./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor527925350 <...> = 0 [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5798 attached [pid 5798] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5798] memfd_create("syzkaller", 0) = 3 [pid 5798] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5790] <... ioctl resumed>) = 0 [pid 5790] close(4) = 0 [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] creat("./bus", 000 [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] open("./bus", O_RDONLY [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... open resumed>) = 3 [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] fallocate(-1, 0, 0, 1048820 [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5790] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5789] <... futex resumed>) = 0 [pid 5790] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5789] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5790] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5790] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5789] <... futex resumed>) = 0 [pid 5790] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5789] exit_group(0 [pid 5790] <... futex resumed>) = ? [pid 5789] <... exit_group resumed>) = ? [pid 5790] +++ exited with 0 +++ [pid 5789] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5789, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=35 /* 0.35 s */} --- [pid 5011] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5792] <... write resumed>) = 16777216 [pid 5011] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./75/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5792] munmap(0x7fe96bb4a000, 16777216 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./75/bus") = 0 [pid 5011] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./75/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./75") = 0 [pid 5011] mkdir("./76", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5799 ./strace-static-x86_64: Process 5799 attached [pid 5799] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5799] chdir("./76") = 0 [pid 5792] <... munmap resumed>) = 0 [pid 5799] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5792] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5799] <... prctl resumed>) = 0 [pid 5799] setpgid(0, 0 [pid 5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5792] <... openat resumed>) = 4 [pid 5799] <... setpgid resumed>) = 0 [pid 5792] ioctl(4, LOOP_SET_FD, 3 [pid 5799] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5799] write(3, "1000", 4) = 4 [pid 5799] close(3) = 0 [pid 5799] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5799] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5799] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5792] <... ioctl resumed>) = 0 [pid 5799] <... mprotect resumed>) = 0 [pid 5799] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5792] close(3) = 0 [pid 5799] <... clone resumed>, parent_tid=[5800], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5800 [pid 5792] mkdir("./bus", 0777 [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5792] <... mkdir resumed>) = 0 [pid 5792] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,"./strace-static-x86_64: Process 5800 attached [pid 5800] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5800] memfd_create("syzkaller", 0) = 3 [pid 5800] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5792] <... mount resumed>) = -1 EEXIST (File exists) [ 207.714750][ T5792] loop3: detected capacity change from 0 to 32768 [ 207.733524][ T5792] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5792) [pid 5792] ioctl(4, LOOP_CLR_FD [pid 5798] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5792] <... ioctl resumed>) = 0 [pid 5792] close(4) = 0 [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] creat("./bus", 000 [pid 5791] <... futex resumed>) = 0 [pid 5792] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5792] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] open("./bus", O_RDONLY [pid 5791] <... futex resumed>) = 0 [pid 5792] <... open resumed>) = 3 [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5792] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5791] <... futex resumed>) = 0 [pid 5792] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5792] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5791] <... futex resumed>) = 0 [pid 5792] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5791] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5792] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] fallocate(-1, 0, 0, 1048820 [pid 5791] <... futex resumed>) = 0 [pid 5792] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5792] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5791] <... futex resumed>) = 0 [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5792] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5792] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5791] <... futex resumed>) = 0 [pid 5792] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5791] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5792] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5792] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5791] <... futex resumed>) = 0 [pid 5792] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5791] exit_group(0 [pid 5792] <... futex resumed>) = ? [pid 5791] <... exit_group resumed>) = ? [pid 5792] +++ exited with 0 +++ [pid 5791] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5791, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./74/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5796] <... write resumed>) = 16777216 [pid 5013] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5796] <... munmap resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./74/bus") = 0 [pid 5013] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./74/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./74" [pid 5796] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... rmdir resumed>) = 0 [pid 5796] <... openat resumed>) = 4 [pid 5013] mkdir("./75", 0777 [pid 5796] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5801 [pid 5796] <... ioctl resumed>) = 0 [pid 5796] close(3) = 0 [pid 5796] mkdir("./bus", 0777) = 0 ./strace-static-x86_64: Process 5801 attached [pid 5796] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5801] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5801] chdir("./75") = 0 [pid 5801] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5801] setpgid(0, 0) = 0 [pid 5801] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5796] <... mount resumed>) = -1 EEXIST (File exists) [pid 5801] <... openat resumed>) = 3 [pid 5796] ioctl(4, LOOP_CLR_FD [pid 5801] write(3, "1000", 4) = 4 [pid 5801] close(3) = 0 [pid 5801] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5795] <... write resumed>) = 16777216 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] munmap(0x7fe96bb4a000, 16777216 [pid 5801] <... futex resumed>) = 0 [ 208.268087][ T5796] loop4: detected capacity change from 0 to 32768 [ 208.299928][ T5796] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5796) [pid 5801] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5801] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5801] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5802], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5802 [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5802 attached [pid 5795] <... munmap resumed>) = 0 [pid 5795] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5795] ioctl(4, LOOP_SET_FD, 3 [pid 5802] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5802] memfd_create("syzkaller", 0) = 3 [pid 5802] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5795] <... ioctl resumed>) = 0 [pid 5795] close(3) = 0 [pid 5795] mkdir("./bus", 0777) = 0 [pid 5795] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5798] <... write resumed>) = 16777216 [pid 5798] munmap(0x7fe96bb4a000, 16777216 [pid 5795] <... mount resumed>) = -1 EEXIST (File exists) [ 208.379314][ T5795] loop2: detected capacity change from 0 to 32768 [ 208.396285][ T5795] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5795) [pid 5795] ioctl(4, LOOP_CLR_FD [pid 5798] <... munmap resumed>) = 0 [pid 5798] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5798] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5798] close(3) = 0 [pid 5798] mkdir("./bus", 0777) = 0 [ 208.482755][ T5798] loop5: detected capacity change from 0 to 32768 [pid 5798] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 208.540483][ T5798] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5798) [pid 5798] ioctl(4, LOOP_CLR_FD [pid 5796] <... ioctl resumed>) = 0 [pid 5796] close(4) = 0 [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] <... futex resumed>) = 0 [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... futex resumed>) = 0 [pid 5796] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] <... futex resumed>) = 0 [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5796] open("./bus", O_RDONLY) = 3 [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5796] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5794] <... futex resumed>) = 0 [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] <... futex resumed>) = 0 [pid 5796] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] <... futex resumed>) = 0 [pid 5796] fallocate(-1, 0, 0, 1048820 [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] <... futex resumed>) = 0 [pid 5796] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] <... futex resumed>) = 0 [pid 5796] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5794] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5796] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5796] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5796] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] exit_group(0 [pid 5796] <... futex resumed>) = ? [pid 5794] <... exit_group resumed>) = ? [pid 5796] +++ exited with 0 +++ [pid 5794] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5794, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./75/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./75/bus") = 0 [pid 5014] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./75/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5800] <... write resumed>) = 16777216 [pid 5014] close(3) = 0 [pid 5014] rmdir("./75") = 0 [pid 5014] mkdir("./76", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5803 ./strace-static-x86_64: Process 5803 attached [pid 5800] munmap(0x7fe96bb4a000, 16777216 [pid 5803] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5803] chdir("./76") = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5803] setpgid(0, 0) = 0 [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5803] write(3, "1000", 4) = 4 [pid 5803] close(3) = 0 [pid 5803] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5803] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5800] <... munmap resumed>) = 0 [pid 5803] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5804], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5804 [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5800] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5800] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5804 attached [pid 5804] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5804] memfd_create("syzkaller", 0) = 3 [pid 5804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5802] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5800] <... ioctl resumed>) = 0 [pid 5800] close(3) = 0 [pid 5800] mkdir("./bus", 0777) = 0 [pid 5800] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5800] ioctl(4, LOOP_CLR_FD [pid 5795] <... ioctl resumed>) = 0 [ 208.838737][ T5800] loop1: detected capacity change from 0 to 32768 [ 208.876976][ T5800] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5800) [pid 5795] close(4) = 0 [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] open("./bus", O_RDONLY [pid 5793] <... futex resumed>) = 0 [pid 5795] <... open resumed>) = 3 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5798] <... ioctl resumed>) = 0 [pid 5795] <... futex resumed>) = 0 [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] close(4 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5798] <... close resumed>) = 0 [pid 5795] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] <... futex resumed>) = 1 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] creat("./bus", 000 [pid 5795] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5798] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5795] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5797] <... futex resumed>) = 0 [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] open("./bus", O_RDONLY [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5798] <... open resumed>) = 3 [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 5798] <... futex resumed>) = 0 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] fallocate(-1, 0, 0, 1048820 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5798] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5798] <... futex resumed>) = 0 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 5798] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5798] <... futex resumed>) = 1 [pid 5797] <... futex resumed>) = 0 [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5798] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5797] <... futex resumed>) = 0 [pid 5795] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5793] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5793] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] fallocate(-1, 0, 0, 1048820 [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5795] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5798] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5795] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5797] <... futex resumed>) = 0 [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 5793] exit_group(0 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... exit_group resumed>) = ? [pid 5798] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5797] <... futex resumed>) = 0 [pid 5795] +++ exited with 0 +++ [pid 5793] +++ exited with 0 +++ [pid 5798] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5798] <... futex resumed>) = 0 [pid 5797] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5798] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5797] <... futex resumed>) = 0 [pid 5798] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5797] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5798] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5797] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5798] <... futex resumed>) = 0 [pid 5797] exit_group(0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5797] <... exit_group resumed>) = ? [pid 5012] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5798] +++ exited with 0 +++ [pid 5012] <... openat resumed>) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5797] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./73/bus", [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5797, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=47 /* 0.47 s */} --- [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5012] umount2("./73/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... restart_syscall resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./73/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] fstat(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] getdents64(4, [pid 5015] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] fstat(3, [pid 5012] getdents64(4, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] getdents64(3, [pid 5012] close(4 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... close resumed>) = 0 [pid 5015] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./73/bus" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5015] lstat("./75/bus", [pid 5012] umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] lstat("./73/binderfs", [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] unlink("./73/binderfs" [pid 5015] <... openat resumed>) = 4 [pid 5012] <... unlink resumed>) = 0 [pid 5015] fstat(4, [pid 5012] getdents64(3, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] getdents64(4, [pid 5012] close(3 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] rmdir("./73" [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5015] close(4 [pid 5012] mkdir("./74", 0777 [pid 5015] <... close resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5015] rmdir("./75/bus" [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5015] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] lstat("./75/binderfs", [pid 5012] close(3 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] unlink("./75/binderfs" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5805 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./75") = 0 [pid 5015] mkdir("./76", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 ./strace-static-x86_64: Process 5805 attached [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5805] set_robust_list(0x5555561c25e0, 24 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5805] <... set_robust_list resumed>) = 0 [pid 5805] chdir("./74" [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5806 [pid 5805] <... chdir resumed>) = 0 [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5805] setpgid(0, 0) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5805] write(3, "1000", 4) = 4 [pid 5805] close(3) = 0 [pid 5805] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5806 attached [pid 5805] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5806] chdir("./76") = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5805] <... mmap resumed>) = 0x7fe973f4a000 [pid 5806] setpgid(0, 0 [pid 5805] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5806] <... setpgid resumed>) = 0 [pid 5805] <... mprotect resumed>) = 0 [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5805] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5806] <... openat resumed>) = 3 [pid 5806] write(3, "1000", 4) = 4 [pid 5805] <... clone resumed>, parent_tid=[5807], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5807 [pid 5806] close(3 [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... close resumed>) = 0 [pid 5805] <... futex resumed>) = 0 [pid 5806] symlink("/dev/binderfs", "./binderfs" [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5806] <... symlink resumed>) = 0 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5806] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5806] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5808], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5808 [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5808 attached [pid 5808] set_robust_list(0x7fe973f6a9e0, 24./strace-static-x86_64: Process 5807 attached [pid 5807] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5808] <... set_robust_list resumed>) = 0 [pid 5808] memfd_create("syzkaller", 0 [pid 5807] memfd_create("syzkaller", 0 [pid 5808] <... memfd_create resumed>) = 3 [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5807] <... memfd_create resumed>) = 3 [pid 5807] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5800] <... ioctl resumed>) = 0 [pid 5800] close(4) = 0 [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5800] creat("./bus", 000 [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5800] open("./bus", O_RDONLY [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] <... open resumed>) = 3 [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5800] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] <... futex resumed>) = 0 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5800] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5799] <... futex resumed>) = 0 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] <... futex resumed>) = 0 [pid 5799] <... futex resumed>) = 1 [pid 5800] fallocate(-1, 0, 0, 1048820 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5800] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] <... futex resumed>) = 0 [pid 5800] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5800] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5799] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5800] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5799] <... futex resumed>) = 0 [pid 5800] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5799] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5800] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5800] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5799] <... futex resumed>) = 0 [pid 5799] exit_group(0) = ? [pid 5800] +++ exited with 0 +++ [pid 5799] +++ exited with 0 +++ [pid 5802] <... write resumed>) = 16777216 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5799, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5802] munmap(0x7fe96bb4a000, 16777216 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5802] <... munmap resumed>) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./76/bus") = 0 [pid 5802] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./76/binderfs") = 0 [pid 5802] <... openat resumed>) = 4 [pid 5011] getdents64(3, [pid 5802] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./76") = 0 [pid 5011] mkdir("./77", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5809 ./strace-static-x86_64: Process 5809 attached [pid 5802] <... ioctl resumed>) = 0 [pid 5809] set_robust_list(0x5555561c25e0, 24 [pid 5802] close(3 [pid 5809] <... set_robust_list resumed>) = 0 [pid 5802] <... close resumed>) = 0 [pid 5809] chdir("./77" [pid 5802] mkdir("./bus", 0777 [pid 5809] <... chdir resumed>) = 0 [pid 5809] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5802] <... mkdir resumed>) = 0 [pid 5809] <... prctl resumed>) = 0 [pid 5802] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5809] setpgid(0, 0) = 0 [ 209.401845][ T5802] loop3: detected capacity change from 0 to 32768 [pid 5809] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5802] <... mount resumed>) = -1 EEXIST (File exists) [pid 5809] write(3, "1000", 4) = 4 [pid 5809] close(3 [pid 5802] ioctl(4, LOOP_CLR_FD [pid 5809] <... close resumed>) = 0 [pid 5809] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5809] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5809] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5809] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5810], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5810 [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 209.452834][ T5802] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5802) [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5810 attached [pid 5810] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5810] memfd_create("syzkaller", 0) = 3 [pid 5810] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5802] <... ioctl resumed>) = 0 [pid 5802] close(4) = 0 [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] creat("./bus", 000 [pid 5801] <... futex resumed>) = 0 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] open("./bus", O_RDONLY [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... open resumed>) = 3 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... futex resumed>) = 0 [pid 5801] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] fallocate(-1, 0, 0, 1048820 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5802] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5801] <... futex resumed>) = 0 [pid 5802] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5801] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5802] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5802] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5801] <... futex resumed>) = 0 [pid 5802] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5801] exit_group(0 [pid 5802] <... futex resumed>) = ? [pid 5801] <... exit_group resumed>) = ? [pid 5802] +++ exited with 0 +++ [pid 5801] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5801, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} --- [pid 5013] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./75/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5804] <... write resumed>) = 16777216 [pid 5013] getdents64(4, [pid 5804] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./75/bus") = 0 [pid 5804] <... munmap resumed>) = 0 [pid 5013] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./75/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./75") = 0 [pid 5013] mkdir("./76", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5804] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... openat resumed>) = 3 [pid 5804] <... openat resumed>) = 4 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5804] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5811 ./strace-static-x86_64: Process 5811 attached [pid 5811] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5811] chdir("./76" [pid 5804] <... ioctl resumed>) = 0 [pid 5811] <... chdir resumed>) = 0 [pid 5804] close(3 [pid 5811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5804] <... close resumed>) = 0 [pid 5811] <... prctl resumed>) = 0 [pid 5804] mkdir("./bus", 0777 [pid 5811] setpgid(0, 0) = 0 [pid 5804] <... mkdir resumed>) = 0 [pid 5811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5804] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5811] <... openat resumed>) = 3 [ 210.001935][ T5804] loop4: detected capacity change from 0 to 32768 [pid 5811] write(3, "1000", 4) = 4 [pid 5811] close(3) = 0 [pid 5811] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5811] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5811] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5812], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5812 [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5804] <... mount resumed>) = -1 EEXIST (File exists) [pid 5804] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5812 attached [pid 5812] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5812] memfd_create("syzkaller", 0) = 3 [pid 5812] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 210.048676][ T5804] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5804) [pid 5810] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5807] <... write resumed>) = 16777216 [pid 5807] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5807] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5807] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5807] close(3) = 0 [pid 5807] mkdir("./bus", 0777) = 0 [ 210.192736][ T5807] loop2: detected capacity change from 0 to 32768 [pid 5807] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 210.232601][ T5807] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5807) [pid 5807] ioctl(4, LOOP_CLR_FD [pid 5808] <... write resumed>) = 16777216 [pid 5808] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5808] close(3) = 0 [pid 5808] mkdir("./bus", 0777) = 0 [pid 5808] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5808] ioctl(4, LOOP_CLR_FD [pid 5804] <... ioctl resumed>) = 0 [ 210.427337][ T5808] loop5: detected capacity change from 0 to 32768 [ 210.457853][ T5808] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5808) [pid 5804] close(4) = 0 [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5804] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] creat("./bus", 000 [pid 5803] <... futex resumed>) = 0 [pid 5804] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] <... futex resumed>) = 0 [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] open("./bus", O_RDONLY [pid 5803] <... futex resumed>) = 0 [pid 5804] <... open resumed>) = 3 [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] <... futex resumed>) = 0 [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5803] <... futex resumed>) = 0 [pid 5804] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] <... futex resumed>) = 0 [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5803] <... futex resumed>) = 0 [pid 5804] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] <... futex resumed>) = 0 [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5804] fallocate(-1, 0, 0, 1048820 [pid 5803] <... futex resumed>) = 0 [pid 5804] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5803] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 5804] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5804] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 5804] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5803] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5804] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5804] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] exit_group(0 [pid 5804] <... futex resumed>) = ? [pid 5803] <... exit_group resumed>) = ? [pid 5804] +++ exited with 0 +++ [pid 5803] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./76/bus") = 0 [pid 5014] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./76/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./76") = 0 [pid 5014] mkdir("./77", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5813 [pid 5810] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5813 attached [pid 5813] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5813] chdir("./77") = 0 [pid 5813] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5813] setpgid(0, 0) = 0 [pid 5813] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5810] munmap(0x7fe96bb4a000, 16777216 [pid 5813] <... openat resumed>) = 3 [pid 5813] write(3, "1000", 4) = 4 [pid 5813] close(3) = 0 [pid 5813] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5813] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5813] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5807] <... ioctl resumed>) = 0 [pid 5813] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5810] <... munmap resumed>) = 0 [pid 5813] <... clone resumed>, parent_tid=[5814], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5814 [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5814 attached [pid 5813] <... futex resumed>) = 0 [pid 5810] <... openat resumed>) = 4 [pid 5814] set_robust_list(0x7fe973f6a9e0, 24 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5810] ioctl(4, LOOP_SET_FD, 3 [pid 5814] <... set_robust_list resumed>) = 0 [pid 5807] close(4) = 0 [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5807] creat("./bus", 000 [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5805] <... futex resumed>) = 0 [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... futex resumed>) = 0 [pid 5805] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5814] memfd_create("syzkaller", 0 [pid 5810] <... ioctl resumed>) = 0 [pid 5814] <... memfd_create resumed>) = 3 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5807] open("./bus", O_RDONLY [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... open resumed>) = 3 [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5814] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5810] close(3 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5810] <... close resumed>) = 0 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5807] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5810] mkdir("./bus", 0777 [pid 5807] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... mkdir resumed>) = 0 [pid 5807] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [ 210.776592][ T5810] loop1: detected capacity change from 0 to 32768 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5807] fallocate(-1, 0, 0, 1048820 [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5807] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5805] <... futex resumed>) = 0 [pid 5807] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5805] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5807] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5807] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5805] <... futex resumed>) = 0 [pid 5807] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5805] exit_group(0 [pid 5807] <... futex resumed>) = ? [pid 5805] <... exit_group resumed>) = ? [pid 5810] <... mount resumed>) = -1 EEXIST (File exists) [pid 5807] +++ exited with 0 +++ [pid 5805] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=42 /* 0.42 s */} --- [pid 5810] ioctl(4, LOOP_CLR_FD [pid 5012] umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 210.821363][ T5810] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5810) [pid 5808] <... ioctl resumed>) = 0 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./74/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./74/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./74/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./74/bus") = 0 [pid 5012] umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./74/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./74") = 0 [pid 5012] mkdir("./75", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5808] close(4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5808] <... close resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] close(3 [pid 5808] <... futex resumed>) = 1 [pid 5012] <... close resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5815 ./strace-static-x86_64: Process 5815 attached [pid 5815] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5815] chdir("./75") = 0 [pid 5815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5815] setpgid(0, 0 [pid 5806] <... futex resumed>) = 0 [pid 5815] <... setpgid resumed>) = 0 [pid 5815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... openat resumed>) = 3 [pid 5808] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 1 [pid 5815] write(3, "1000", 4 [pid 5808] creat("./bus", 000 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5815] <... write resumed>) = 4 [pid 5808] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5815] close(3 [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... close resumed>) = 0 [pid 5808] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5815] symlink("/dev/binderfs", "./binderfs" [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... symlink resumed>) = 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] open("./bus", O_RDONLY [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5815] <... futex resumed>) = 0 [pid 5808] <... open resumed>) = 3 [pid 5815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... mmap resumed>) = 0x7fe973f4a000 [pid 5808] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5815] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] <... mprotect resumed>) = 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5815] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5808] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5815] <... clone resumed>, parent_tid=[5816], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5816 [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5815] <... futex resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5808] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... mmap resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 5816 attached [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] set_robust_list(0x7fe973f6a9e0, 24 [pid 5808] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5816] <... set_robust_list resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] memfd_create("syzkaller", 0 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5816] <... memfd_create resumed>) = 3 [pid 5808] fallocate(-1, 0, 0, 1048820 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5808] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5808] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5808] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5808] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5806] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5808] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5808] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] exit_group(0 [pid 5808] <... futex resumed>) = ? [pid 5806] <... exit_group resumed>) = ? [pid 5808] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5806, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=44 /* 0.44 s */} --- [pid 5015] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./76/bus") = 0 [pid 5015] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./76/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./76") = 0 [pid 5015] mkdir("./77", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5817 ./strace-static-x86_64: Process 5817 attached [pid 5817] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5817] chdir("./77") = 0 [pid 5817] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5817] setpgid(0, 0) = 0 [pid 5817] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5817] write(3, "1000", 4) = 4 [pid 5817] close(3) = 0 [pid 5817] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5817] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5817] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5817] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5818], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5818 [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5818 attached [pid 5818] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5818] memfd_create("syzkaller", 0) = 3 [pid 5818] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5810] <... ioctl resumed>) = 0 [pid 5810] close(4) = 0 [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5810] <... futex resumed>) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5810] creat("./bus", 000 [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5809] <... futex resumed>) = 0 [pid 5812] <... write resumed>) = 16777216 [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... futex resumed>) = 0 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] open("./bus", O_RDONLY [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] munmap(0x7fe96bb4a000, 16777216 [pid 5810] <... open resumed>) = 3 [pid 5809] <... futex resumed>) = 0 [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... futex resumed>) = 0 [pid 5809] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] <... futex resumed>) = 0 [pid 5810] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] <... futex resumed>) = 0 [pid 5810] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... munmap resumed>) = 0 [pid 5810] <... futex resumed>) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] <... futex resumed>) = 0 [pid 5810] fallocate(-1, 0, 0, 1048820 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5812] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... openat resumed>) = 4 [pid 5810] <... futex resumed>) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5812] ioctl(4, LOOP_SET_FD, 3 [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... ioctl resumed>) = 0 [pid 5810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] <... futex resumed>) = 0 [pid 5810] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5810] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5809] <... futex resumed>) = 0 [pid 5810] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5809] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5810] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5810] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5809] <... futex resumed>) = 0 [pid 5810] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5809] exit_group(0 [pid 5810] <... futex resumed>) = ? [pid 5809] <... exit_group resumed>) = ? [pid 5810] +++ exited with 0 +++ [pid 5812] close(3) = 0 [pid 5809] +++ exited with 0 +++ [pid 5812] mkdir("./bus", 0777 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5809, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=34 /* 0.34 s */} --- [pid 5812] <... mkdir resumed>) = 0 [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 5812] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5011] <... restart_syscall resumed>) = 0 [pid 5011] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./77/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./77/bus") = 0 [pid 5011] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./77/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./77") = 0 [ 211.387682][ T5812] loop3: detected capacity change from 0 to 32768 [ 211.415470][ T5812] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5812) [pid 5011] mkdir("./78", 0777 [pid 5812] <... mount resumed>) = -1 EEXIST (File exists) [pid 5011] <... mkdir resumed>) = 0 [pid 5812] ioctl(4, LOOP_CLR_FD [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5816] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5819 ./strace-static-x86_64: Process 5819 attached [pid 5819] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5819] chdir("./78") = 0 [pid 5819] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5819] setpgid(0, 0) = 0 [pid 5819] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5819] write(3, "1000", 4) = 4 [pid 5819] close(3) = 0 [pid 5819] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5819] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5819] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5819] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5820], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5820 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5820 attached [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5820] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5820] memfd_create("syzkaller", 0) = 3 [pid 5820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5818] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5814] <... write resumed>) = 16777216 [pid 5814] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5814] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5814] ioctl(4, LOOP_SET_FD, 3 [pid 5812] <... ioctl resumed>) = 0 [pid 5812] close(4) = 0 [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... futex resumed>) = 0 [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] <... futex resumed>) = 0 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... futex resumed>) = 0 [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5812] open("./bus", O_RDONLY [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... open resumed>) = 3 [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] <... futex resumed>) = 0 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... ioctl resumed>) = 0 [pid 5812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5811] <... futex resumed>) = 0 [pid 5814] close(3 [pid 5812] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5814] <... close resumed>) = 0 [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] mkdir("./bus", 0777 [pid 5812] <... futex resumed>) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5812] <... futex resumed>) = 1 [pid 5811] <... futex resumed>) = 0 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5811] <... futex resumed>) = 0 [pid 5812] fallocate(-1, 0, 0, 1048820 [ 211.871530][ T5814] loop4: detected capacity change from 0 to 32768 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... futex resumed>) = 0 [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = 0 [pid 5811] <... futex resumed>) = 1 [pid 5812] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] <... futex resumed>) = 0 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5812] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5811] <... futex resumed>) = 0 [pid 5812] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5811] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5812] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5812] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5811] <... futex resumed>) = 0 [pid 5812] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] exit_group(0 [pid 5812] <... futex resumed>) = ? [pid 5811] <... exit_group resumed>) = ? [pid 5812] +++ exited with 0 +++ [pid 5811] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5811, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./76/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5814] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5814] ioctl(4, LOOP_CLR_FD [pid 5013] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [ 211.923385][ T5814] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5814) [pid 5820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./76/bus") = 0 [pid 5013] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./76/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./76") = 0 [pid 5013] mkdir("./77", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5821 ./strace-static-x86_64: Process 5821 attached [pid 5821] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5821] chdir("./77") = 0 [pid 5821] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5821] setpgid(0, 0) = 0 [pid 5821] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5821] write(3, "1000", 4) = 4 [pid 5821] close(3) = 0 [pid 5821] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5821] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5821] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5821] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5822], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5822 [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5822 attached [pid 5822] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5822] memfd_create("syzkaller", 0) = 3 [pid 5822] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5816] <... write resumed>) = 16777216 [pid 5816] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5816] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5816] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5816] close(3) = 0 [pid 5816] mkdir("./bus", 0777) = 0 [pid 5816] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5818] <... write resumed>) = 16777216 [pid 5818] munmap(0x7fe96bb4a000, 16777216 [pid 5816] <... mount resumed>) = -1 EEXIST (File exists) [pid 5816] ioctl(4, LOOP_CLR_FD [pid 5818] <... munmap resumed>) = 0 [pid 5818] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 212.132308][ T5816] loop2: detected capacity change from 0 to 32768 [ 212.168646][ T5816] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5816) [pid 5818] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5818] close(3) = 0 [pid 5818] mkdir("./bus", 0777) = 0 [pid 5818] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 212.208618][ T5818] loop5: detected capacity change from 0 to 32768 [ 212.230630][ T5818] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5818) [pid 5818] ioctl(4, LOOP_CLR_FD [pid 5814] <... ioctl resumed>) = 0 [pid 5814] close(4) = 0 [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] creat("./bus", 000 [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] open("./bus", O_RDONLY [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... open resumed>) = 3 [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] fallocate(-1, 0, 0, 1048820 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5814] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5813] <... futex resumed>) = 0 [pid 5814] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5813] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5814] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5814] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5813] <... futex resumed>) = 0 [pid 5814] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5813] exit_group(0 [pid 5814] <... futex resumed>) = ? [pid 5813] <... exit_group resumed>) = ? [pid 5814] +++ exited with 0 +++ [pid 5813] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5813, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5014] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./77/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./77/bus") = 0 [pid 5014] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./77/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./77") = 0 [pid 5014] mkdir("./78", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5823 [pid 5822] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5823 attached [pid 5823] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5823] chdir("./78") = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5823] setpgid(0, 0) = 0 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5823] write(3, "1000", 4) = 4 [pid 5823] close(3) = 0 [pid 5823] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5823] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5823] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5823] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5824], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5824 [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5824 attached [pid 5824] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5824] memfd_create("syzkaller", 0) = 3 [pid 5824] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5820] <... write resumed>) = 16777216 [pid 5820] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5820] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5820] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5820] close(3) = 0 [pid 5820] mkdir("./bus", 0777) = 0 [pid 5820] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5816] <... ioctl resumed>) = 0 [pid 5816] close(4) = 0 [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] creat("./bus", 000 [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... futex resumed>) = 0 [pid 5815] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5816] open("./bus", O_RDONLY [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... open resumed>) = 3 [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... mount resumed>) = -1 EEXIST (File exists) [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5820] ioctl(4, LOOP_CLR_FD [pid 5816] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... open resumed>) = -1 EISDIR (Is a directory) [ 212.596776][ T5820] loop1: detected capacity change from 0 to 32768 [ 212.616102][ T5820] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5820) [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5816] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5816] fallocate(-1, 0, 0, 1048820 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5816] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5816] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] <... futex resumed>) = 0 [pid 5816] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5815] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... ioctl resumed>) = 0 [pid 5816] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5818] close(4 [pid 5816] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5815] <... futex resumed>) = 0 [pid 5816] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5815] exit_group(0 [pid 5818] <... close resumed>) = 0 [pid 5816] <... futex resumed>) = ? [pid 5815] <... exit_group resumed>) = ? [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5816] +++ exited with 0 +++ [pid 5818] <... futex resumed>) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5818] creat("./bus", 000 [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5817] <... futex resumed>) = 0 [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... futex resumed>) = 0 [pid 5817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5815] +++ exited with 0 +++ [pid 5818] open("./bus", O_RDONLY [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... open resumed>) = 3 [pid 5817] <... futex resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5815, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=46 /* 0.46 s */} --- [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] <... futex resumed>) = 0 [pid 5817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5818] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] fstat(3, [pid 5818] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 5818] <... futex resumed>) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] lstat("./75/bus", [pid 5818] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./75/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5818] <... futex resumed>) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./75/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 5818] fallocate(-1, 0, 0, 1048820 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] fstat(4, [pid 5818] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(4, [pid 5818] <... futex resumed>) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5818] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5818] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5817] <... futex resumed>) = 0 [pid 5818] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5817] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5818] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5818] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5817] <... futex resumed>) = 0 [pid 5818] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5817] exit_group(0 [pid 5818] <... futex resumed>) = ? [pid 5817] <... exit_group resumed>) = ? [pid 5818] +++ exited with 0 +++ [pid 5817] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5817, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 5015] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5015] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./77/bus", [pid 5012] close(4 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./75/bus" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5015] fstat(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] lstat("./75/binderfs", [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] getdents64(4, [pid 5012] unlink("./75/binderfs" [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5015] close(4 [pid 5012] getdents64(3, [pid 5015] <... close resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] rmdir("./77/bus" [pid 5012] close(3 [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5015] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./75" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5015] lstat("./77/binderfs", [pid 5012] mkdir("./76", 0777 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5015] unlink("./77/binderfs" [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] <... unlink resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 5015] close(3) = 0 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] rmdir("./77") = 0 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5825 [pid 5015] mkdir("./78", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5826 ./strace-static-x86_64: Process 5825 attached [pid 5825] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5825] chdir("./76") = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0./strace-static-x86_64: Process 5826 attached ) = 0 [pid 5826] set_robust_list(0x5555561c25e0, 24 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5826] <... set_robust_list resumed>) = 0 [pid 5826] chdir("./78" [pid 5825] <... openat resumed>) = 3 [pid 5826] <... chdir resumed>) = 0 [pid 5826] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5825] write(3, "1000", 4 [pid 5826] <... prctl resumed>) = 0 [pid 5825] <... write resumed>) = 4 [pid 5826] setpgid(0, 0) = 0 [pid 5825] close(3 [pid 5826] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5825] <... close resumed>) = 0 [pid 5826] <... openat resumed>) = 3 [pid 5825] symlink("/dev/binderfs", "./binderfs" [pid 5826] write(3, "1000", 4) = 4 [pid 5826] close(3 [pid 5825] <... symlink resumed>) = 0 [pid 5826] <... close resumed>) = 0 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] symlink("/dev/binderfs", "./binderfs" [pid 5825] <... futex resumed>) = 0 [pid 5826] <... symlink resumed>) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5826] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] <... mmap resumed>) = 0x7fe973f4a000 [pid 5826] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5825] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5826] <... mmap resumed>) = 0x7fe973f4a000 [pid 5826] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5825] <... mprotect resumed>) = 0 [pid 5826] <... mprotect resumed>) = 0 [pid 5825] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5826] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5825] <... clone resumed>, parent_tid=[5827], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5827 [pid 5826] <... clone resumed>, parent_tid=[5828], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5828 [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] <... futex resumed>) = 0 [pid 5826] <... futex resumed>) = 0 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5827 attached [pid 5827] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5827] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5828 attached ) = 3 [pid 5828] set_robust_list(0x7fe973f6a9e0, 24 [pid 5827] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5828] <... set_robust_list resumed>) = 0 [pid 5827] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5828] memfd_create("syzkaller", 0) = 3 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5824] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... write resumed>) = 16777216 [pid 5820] <... ioctl resumed>) = 0 [pid 5820] close(4) = 0 [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5820] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] munmap(0x7fe96bb4a000, 16777216 [pid 5819] <... futex resumed>) = 1 [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] <... futex resumed>) = 0 [pid 5820] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] open("./bus", O_RDONLY) = 3 [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5819] <... futex resumed>) = 0 [pid 5820] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5819] <... futex resumed>) = 0 [pid 5820] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5819] <... futex resumed>) = 0 [pid 5820] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] fallocate(-1, 0, 0, 1048820 [pid 5819] <... futex resumed>) = 0 [pid 5820] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5819] <... futex resumed>) = 0 [pid 5820] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] <... futex resumed>) = 0 [pid 5819] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5820] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5819] <... futex resumed>) = 0 [pid 5820] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5819] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5820] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5819] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5820] <... futex resumed>) = 0 [pid 5819] exit_group(0) = ? [pid 5820] +++ exited with 0 +++ [pid 5819] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5819, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=35 /* 0.35 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./78/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, [pid 5822] <... munmap resumed>) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./78/bus" [pid 5822] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] <... rmdir resumed>) = 0 [pid 5822] <... openat resumed>) = 4 [pid 5011] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5822] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./78/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./78" [pid 5822] <... ioctl resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5822] close(3 [pid 5011] mkdir("./79", 0777 [pid 5822] <... close resumed>) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 5822] mkdir("./bus", 0777 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5822] <... mkdir resumed>) = 0 [pid 5011] <... openat resumed>) = 3 [pid 5822] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5829 ./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5829] chdir("./79") = 0 [pid 5829] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5829] setpgid(0, 0) = 0 [pid 5829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5829] write(3, "1000", 4) = 4 [pid 5822] <... mount resumed>) = -1 EEXIST (File exists) [pid 5829] close(3 [pid 5822] ioctl(4, LOOP_CLR_FD [pid 5829] <... close resumed>) = 0 [pid 5829] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5829] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5829] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5829] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5830], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5830 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5830 attached [pid 5830] set_robust_list(0x7fe973f6a9e0, 24) = 0 [ 213.138228][ T5822] loop3: detected capacity change from 0 to 32768 [ 213.153204][ T5822] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5822) [pid 5830] memfd_create("syzkaller", 0) = 3 [pid 5830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5827] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] <... ioctl resumed>) = 0 [pid 5822] close(4) = 0 [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5822] creat("./bus", 000 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5822] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5822] open("./bus", O_RDONLY [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5822] <... open resumed>) = 3 [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5822] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] <... write resumed>) = 16777216 [pid 5822] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5824] munmap(0x7fe96bb4a000, 16777216 [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5822] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5822] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5822] fallocate(-1, 0, 0, 1048820 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5822] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5824] <... munmap resumed>) = 0 [pid 5822] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5822] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5824] <... openat resumed>) = 4 [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] ioctl(4, LOOP_SET_FD, 3 [pid 5822] <... futex resumed>) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5824] <... ioctl resumed>) = 0 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5822] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5821] <... futex resumed>) = 0 [pid 5822] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5821] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5822] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5824] close(3 [pid 5822] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... close resumed>) = 0 [pid 5822] <... futex resumed>) = 1 [pid 5821] <... futex resumed>) = 0 [pid 5824] mkdir("./bus", 0777 [pid 5822] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5821] exit_group(0 [pid 5822] <... futex resumed>) = ? [pid 5821] <... exit_group resumed>) = ? [pid 5824] <... mkdir resumed>) = 0 [pid 5822] +++ exited with 0 +++ [pid 5821] +++ exited with 0 +++ [pid 5824] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5821, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=35 /* 0.35 s */} --- [pid 5013] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [ 213.636481][ T5824] loop4: detected capacity change from 0 to 32768 [pid 5013] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./77/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./77/bus") = 0 [pid 5013] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5824] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] unlink("./77/binderfs" [pid 5824] ioctl(4, LOOP_CLR_FD [pid 5013] <... unlink resumed>) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./77") = 0 [pid 5013] mkdir("./78", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5831 [ 213.676909][ T5824] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5824) ./strace-static-x86_64: Process 5831 attached [pid 5831] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5831] chdir("./78") = 0 [pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5831] setpgid(0, 0) = 0 [pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5831] write(3, "1000", 4) = 4 [pid 5831] close(3) = 0 [pid 5831] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5831] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5831] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5831] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5832], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5832 [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5832 attached [pid 5832] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5832] memfd_create("syzkaller", 0) = 3 [pid 5832] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5827] <... write resumed>) = 16777216 [pid 5827] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5827] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5827] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5827] close(3) = 0 [pid 5827] mkdir("./bus", 0777) = 0 [pid 5827] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5827] ioctl(4, LOOP_CLR_FD [pid 5828] <... write resumed>) = 16777216 [ 213.878580][ T5827] loop2: detected capacity change from 0 to 32768 [ 213.894593][ T5827] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5827) [pid 5828] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5828] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5828] close(3) = 0 [pid 5828] mkdir("./bus", 0777) = 0 [pid 5828] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5824] <... ioctl resumed>) = 0 [pid 5824] close(4 [pid 5828] <... mount resumed>) = -1 EEXIST (File exists) [pid 5828] ioctl(4, LOOP_CLR_FD [pid 5824] <... close resumed>) = 0 [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... futex resumed>) = 0 [pid 5823] <... futex resumed>) = 1 [pid 5824] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] open("./bus", O_RDONLY [pid 5823] <... futex resumed>) = 0 [ 213.992851][ T5828] loop5: detected capacity change from 0 to 32768 [ 214.027517][ T5828] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5828) [pid 5824] <... open resumed>) = 3 [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5823] <... futex resumed>) = 0 [pid 5824] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... write resumed>) = 16777216 [pid 5824] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5823] <... futex resumed>) = 0 [pid 5830] munmap(0x7fe96bb4a000, 16777216 [pid 5824] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5823] <... futex resumed>) = 0 [pid 5824] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5823] <... futex resumed>) = 0 [pid 5824] fallocate(-1, 0, 0, 1048820 [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5830] <... munmap resumed>) = 0 [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5823] <... futex resumed>) = 0 [pid 5830] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5824] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... openat resumed>) = 4 [pid 5824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5823] <... futex resumed>) = 0 [pid 5830] ioctl(4, LOOP_SET_FD, 3 [pid 5824] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5830] <... ioctl resumed>) = 0 [pid 5824] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5830] close(3 [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... close resumed>) = 0 [pid 5824] <... futex resumed>) = 1 [pid 5823] <... futex resumed>) = 0 [pid 5830] mkdir("./bus", 0777 [pid 5824] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... mkdir resumed>) = 0 [pid 5824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5823] <... futex resumed>) = 0 [pid 5830] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5824] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5823] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5824] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5830] <... mount resumed>) = -1 EEXIST (File exists) [pid 5824] <... futex resumed>) = 1 [pid 5823] <... futex resumed>) = 0 [pid 5830] ioctl(4, LOOP_CLR_FD [pid 5824] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] exit_group(0 [pid 5824] <... futex resumed>) = ? [pid 5823] <... exit_group resumed>) = ? [pid 5824] +++ exited with 0 +++ [pid 5823] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5014] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./78/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [ 214.126712][ T5830] loop1: detected capacity change from 0 to 32768 [ 214.147640][ T5830] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5830) [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./78/bus") = 0 [pid 5014] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./78/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./78") = 0 [pid 5014] mkdir("./79", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5832] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5833 ./strace-static-x86_64: Process 5833 attached [pid 5833] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5833] chdir("./79") = 0 [pid 5833] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5833] setpgid(0, 0) = 0 [pid 5833] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5833] write(3, "1000", 4) = 4 [pid 5833] close(3) = 0 [pid 5833] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5833] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5833] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5834], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5834 [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5834 attached [pid 5827] <... ioctl resumed>) = 0 [pid 5827] close(4 [pid 5834] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5834] memfd_create("syzkaller", 0) = 3 [pid 5834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5827] <... close resumed>) = 0 [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5827] creat("./bus", 000 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5827] open("./bus", O_RDONLY [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... open resumed>) = 3 [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5827] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5827] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5827] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5828] <... ioctl resumed>) = 0 [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] close(4 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5825] <... futex resumed>) = 0 [pid 5828] <... close resumed>) = 0 [pid 5827] fallocate(-1, 0, 0, 1048820 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... futex resumed>) = 1 [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = 0 [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... futex resumed>) = 1 [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] <... futex resumed>) = 0 [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... futex resumed>) = 0 [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] creat("./bus", 000 [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] <... futex resumed>) = 0 [pid 5828] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5827] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] <... futex resumed>) = 1 [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = 0 [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... futex resumed>) = 1 [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] <... futex resumed>) = 0 [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... futex resumed>) = 0 [pid 5825] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] open("./bus", O_RDONLY [pid 5827] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] <... futex resumed>) = 0 [pid 5828] <... open resumed>) = 3 [pid 5827] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5825] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5827] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5828] <... futex resumed>) = 1 [pid 5827] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... futex resumed>) = 0 [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5827] <... futex resumed>) = 1 [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] <... futex resumed>) = 0 [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5827] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] <... futex resumed>) = 0 [pid 5825] exit_group(0 [pid 5828] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5827] <... futex resumed>) = ? [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] <... exit_group resumed>) = ? [pid 5828] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5827] +++ exited with 0 +++ [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] +++ exited with 0 +++ [pid 5828] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5828] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5828] fallocate(-1, 0, 0, 1048820 [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] fstat(3, [pid 5828] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 5828] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5828] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] lstat("./76/bus", [pid 5828] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5830] <... ioctl resumed>) = 0 [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./76/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] close(4 [pid 5828] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./76/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5830] <... close resumed>) = 0 [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(4, [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5826] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5830] <... futex resumed>) = 1 [pid 5829] <... futex resumed>) = 0 [pid 5828] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5826] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] close(4 [pid 5830] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] <... close resumed>) = 0 [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5829] <... futex resumed>) = 0 [pid 5828] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] rmdir("./76/bus" [pid 5830] creat("./bus", 000 [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] <... futex resumed>) = 1 [pid 5826] <... futex resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5830] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5828] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5826] exit_group(0 [pid 5012] umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... futex resumed>) = ? [pid 5826] <... exit_group resumed>) = ? [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5830] <... futex resumed>) = 1 [pid 5828] +++ exited with 0 +++ [pid 5012] lstat("./76/binderfs", [pid 5829] <... futex resumed>) = 0 [pid 5826] +++ exited with 0 +++ [pid 5830] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] unlink("./76/binderfs" [pid 5830] open("./bus", O_RDONLY [pid 5829] <... futex resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5826, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5012] <... unlink resumed>) = 0 [pid 5830] <... open resumed>) = 3 [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5012] getdents64(3, [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... restart_syscall resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5830] <... futex resumed>) = 0 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] close(3 [pid 5830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5829] <... futex resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5830] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] rmdir("./76" [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... rmdir resumed>) = 0 [pid 5830] <... futex resumed>) = 0 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] mkdir("./77", 0777 [pid 5830] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5829] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5012] <... mkdir resumed>) = 0 [pid 5830] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] fstat(3, [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5830] <... futex resumed>) = 0 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] getdents64(3, [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5830] fallocate(-1, 0, 0, 1048820 [pid 5829] <... futex resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5830] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5015] lstat("./78/bus", [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5835 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, [pid 5830] <... futex resumed>) = 0 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5830] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5829] <... futex resumed>) = 0 [pid 5015] getdents64(4, [pid 5830] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] getdents64(4, ./strace-static-x86_64: Process 5835 attached [pid 5830] <... futex resumed>) = 0 [pid 5829] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5835] set_robust_list(0x5555561c25e0, 24 [pid 5830] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5829] <... futex resumed>) = 0 [pid 5015] close(4 [pid 5835] <... set_robust_list resumed>) = 0 [pid 5830] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5829] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... close resumed>) = 0 [pid 5835] chdir("./77" [pid 5830] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] rmdir("./78/bus" [pid 5835] <... chdir resumed>) = 0 [pid 5830] <... futex resumed>) = 0 [pid 5829] exit_group(0 [pid 5015] <... rmdir resumed>) = 0 [pid 5835] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5829] <... exit_group resumed>) = ? [pid 5015] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... prctl resumed>) = 0 [pid 5830] +++ exited with 0 +++ [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] setpgid(0, 0 [pid 5829] +++ exited with 0 +++ [pid 5015] lstat("./78/binderfs", [pid 5835] <... setpgid resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5835] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] unlink("./78/binderfs" [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5829, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=30 /* 0.30 s */} --- [pid 5835] <... openat resumed>) = 3 [pid 5015] <... unlink resumed>) = 0 [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 5835] write(3, "1000", 4 [pid 5015] getdents64(3, [pid 5011] <... restart_syscall resumed>) = 0 [pid 5835] <... write resumed>) = 4 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5835] close(3 [pid 5015] close(3 [pid 5835] <... close resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5835] symlink("/dev/binderfs", "./binderfs" [pid 5015] rmdir("./78" [pid 5011] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5835] <... symlink resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5835] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] mkdir("./79", 0777 [pid 5011] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5835] <... futex resumed>) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5835] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5011] <... openat resumed>) = 3 [pid 5835] <... mmap resumed>) = 0x7fe973f4a000 [pid 5015] <... openat resumed>) = 3 [pid 5011] fstat(3, [pid 5835] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5835] <... mprotect resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5835] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5015] close(3 [pid 5011] getdents64(3, [pid 5015] <... close resumed>) = 0 [pid 5835] <... clone resumed>, parent_tid=[5836], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5836 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5837 [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5837 attached [pid 5837] set_robust_list(0x5555561c25e0, 24 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5837] <... set_robust_list resumed>) = 0 [pid 5011] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] chdir("./79" [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] <... chdir resumed>) = 0 [pid 5011] lstat("./79/bus", [pid 5837] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5836 attached [pid 5837] setpgid(0, 0 [pid 5011] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] <... setpgid resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5837] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5836] set_robust_list(0x7fe973f6a9e0, 24 [pid 5011] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5837] <... openat resumed>) = 3 [pid 5837] write(3, "1000", 4 [pid 5836] <... set_robust_list resumed>) = 0 [pid 5011] <... openat resumed>) = 4 [pid 5837] <... write resumed>) = 4 [pid 5011] fstat(4, [pid 5837] close(3 [pid 5836] memfd_create("syzkaller", 0 [pid 5837] <... close resumed>) = 0 [pid 5836] <... memfd_create resumed>) = 3 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5837] symlink("/dev/binderfs", "./binderfs" [pid 5836] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] getdents64(4, [pid 5837] <... symlink resumed>) = 0 [pid 5836] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5837] <... futex resumed>) = 0 [pid 5837] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5837] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5837] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5838], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5838 [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./79/bus") = 0 [pid 5011] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5838 attached ) = -1 EINVAL (Invalid argument) [pid 5838] set_robust_list(0x7fe973f6a9e0, 24 [pid 5011] lstat("./79/binderfs", [pid 5838] <... set_robust_list resumed>) = 0 [pid 5838] memfd_create("syzkaller", 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5838] <... memfd_create resumed>) = 3 [pid 5011] unlink("./79/binderfs" [pid 5838] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5011] <... unlink resumed>) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./79") = 0 [pid 5011] mkdir("./80", 0777 [pid 5832] <... write resumed>) = 16777216 [pid 5832] munmap(0x7fe96bb4a000, 16777216 [pid 5011] <... mkdir resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5839 ./strace-static-x86_64: Process 5839 attached [pid 5839] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5839] chdir("./80") = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4 [pid 5832] <... munmap resumed>) = 0 [pid 5839] <... write resumed>) = 4 [pid 5832] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5839] close(3 [pid 5832] <... openat resumed>) = 4 [pid 5839] <... close resumed>) = 0 [pid 5832] ioctl(4, LOOP_SET_FD, 3 [pid 5839] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5839] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5832] <... ioctl resumed>) = 0 [pid 5839] <... mprotect resumed>) = 0 [pid 5832] close(3 [pid 5839] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5832] <... close resumed>) = 0 [pid 5839] <... clone resumed>, parent_tid=[5840], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5840 [pid 5832] mkdir("./bus", 0777 [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] <... mkdir resumed>) = 0 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5832] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,"./strace-static-x86_64: Process 5840 attached [pid 5840] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5840] memfd_create("syzkaller", 0) = 3 [pid 5840] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5832] <... mount resumed>) = -1 EEXIST (File exists) [ 214.779202][ T5832] loop3: detected capacity change from 0 to 32768 [ 214.801698][ T5832] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5832) [pid 5832] ioctl(4, LOOP_CLR_FD [pid 5836] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5838] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5840] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5832] <... ioctl resumed>) = 0 [pid 5832] close(4) = 0 [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] creat("./bus", 000 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] open("./bus", O_RDONLY [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... open resumed>) = 3 [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] fallocate(-1, 0, 0, 1048820 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5832] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5831] <... futex resumed>) = 0 [pid 5832] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5831] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5832] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5832] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5831] <... futex resumed>) = 0 [pid 5832] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5831] exit_group(0 [pid 5832] <... futex resumed>) = ? [pid 5831] <... exit_group resumed>) = ? [pid 5832] +++ exited with 0 +++ [pid 5831] +++ exited with 0 +++ [pid 5834] <... write resumed>) = 16777216 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 5834] munmap(0x7fe96bb4a000, 16777216 [pid 5013] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./78/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5834] <... munmap resumed>) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5834] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] close(4 [pid 5834] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 5834] ioctl(4, LOOP_SET_FD, 3 [pid 5013] rmdir("./78/bus") = 0 [pid 5013] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./78/binderfs" [pid 5834] <... ioctl resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5013] getdents64(3, [pid 5834] close(3) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5834] mkdir("./bus", 0777 [pid 5013] close(3) = 0 [pid 5834] <... mkdir resumed>) = 0 [pid 5013] rmdir("./78" [pid 5834] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./79", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5841 ./strace-static-x86_64: Process 5841 attached [pid 5841] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5841] chdir("./79") = 0 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5841] setpgid(0, 0) = 0 [pid 5834] <... mount resumed>) = -1 EEXIST (File exists) [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5834] ioctl(4, LOOP_CLR_FD [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 215.363405][ T5834] loop4: detected capacity change from 0 to 32768 [ 215.390851][ T5834] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5834) [pid 5841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5841] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5841] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5842], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5842 [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5842 attached ) = 0 [pid 5842] set_robust_list(0x7fe973f6a9e0, 24 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5842] <... set_robust_list resumed>) = 0 [pid 5842] memfd_create("syzkaller", 0) = 3 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5836] <... write resumed>) = 16777216 [pid 5836] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5836] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5836] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5836] close(3) = 0 [pid 5836] mkdir("./bus", 0777) = 0 [pid 5836] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5838] <... write resumed>) = 16777216 [pid 5838] munmap(0x7fe96bb4a000, 16777216 [pid 5836] <... mount resumed>) = -1 EEXIST (File exists) [pid 5838] <... munmap resumed>) = 0 [pid 5836] ioctl(4, LOOP_CLR_FD [pid 5838] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 215.636363][ T5836] loop2: detected capacity change from 0 to 32768 [ 215.652991][ T5836] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5836) [pid 5838] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5838] close(3) = 0 [pid 5838] mkdir("./bus", 0777) = 0 [pid 5838] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5834] <... ioctl resumed>) = 0 [pid 5838] ioctl(4, LOOP_CLR_FD [pid 5834] close(4) = 0 [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] creat("./bus", 000 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [ 215.700360][ T5838] loop5: detected capacity change from 0 to 32768 [ 215.721319][ T5838] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5838) [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] open("./bus", O_RDONLY [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = 3 [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] fallocate(-1, 0, 0, 1048820 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5833] <... futex resumed>) = 0 [pid 5834] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5833] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5834] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5834] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5833] <... futex resumed>) = 0 [pid 5834] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5833] exit_group(0 [pid 5834] <... futex resumed>) = ? [pid 5833] <... exit_group resumed>) = ? [pid 5834] +++ exited with 0 +++ [pid 5833] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5833, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5014] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./79/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./79/bus") = 0 [pid 5014] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5840] <... write resumed>) = 16777216 [pid 5014] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5840] munmap(0x7fe96bb4a000, 16777216 [pid 5014] unlink("./79/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./79") = 0 [pid 5014] mkdir("./80", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5843 ./strace-static-x86_64: Process 5843 attached [pid 5843] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5843] chdir("./80" [pid 5840] <... munmap resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5840] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5843] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5840] <... openat resumed>) = 4 [pid 5843] setpgid(0, 0 [pid 5840] ioctl(4, LOOP_SET_FD, 3 [pid 5843] <... setpgid resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5843] write(3, "1000", 4) = 4 [pid 5843] close(3) = 0 [pid 5840] <... ioctl resumed>) = 0 [pid 5843] symlink("/dev/binderfs", "./binderfs" [pid 5840] close(3 [pid 5843] <... symlink resumed>) = 0 [pid 5840] <... close resumed>) = 0 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] mkdir("./bus", 0777 [pid 5843] <... futex resumed>) = 0 [pid 5843] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5840] <... mkdir resumed>) = 0 [pid 5843] <... mmap resumed>) = 0x7fe973f4a000 [pid 5840] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5843] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5843] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5844], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5844 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5844] memfd_create("syzkaller", 0) = 3 [pid 5844] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5840] <... mount resumed>) = -1 EEXIST (File exists) [ 215.937569][ T5840] loop1: detected capacity change from 0 to 32768 [ 215.956929][ T5840] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5840) [pid 5840] ioctl(4, LOOP_CLR_FD [pid 5836] <... ioctl resumed>) = 0 [pid 5836] close(4) = 0 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5836] creat("./bus", 000 [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5836] open("./bus", O_RDONLY [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... ioctl resumed>) = 0 [pid 5836] <... open resumed>) = 3 [pid 5838] close(4 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... close resumed>) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5836] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5836] <... futex resumed>) = 0 [pid 5835] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5838] creat("./bus", 000 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5836] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5838] open("./bus", O_RDONLY [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... open resumed>) = 3 [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] fallocate(-1, 0, 0, 1048820 [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5836] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5838] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5836] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5838] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5836] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5835] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5835] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5836] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5836] <... futex resumed>) = 1 [pid 5835] <... futex resumed>) = 0 [pid 5838] fallocate(-1, 0, 0, 1048820 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5836] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5835] exit_group(0 [pid 5838] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5836] <... futex resumed>) = ? [pid 5835] <... exit_group resumed>) = ? [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5836] +++ exited with 0 +++ [pid 5835] +++ exited with 0 +++ [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5835, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5838] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5838] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... restart_syscall resumed>) = 0 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5838] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5837] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5837] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5838] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5838] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] fstat(3, [pid 5838] <... futex resumed>) = 1 [pid 5837] <... futex resumed>) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5838] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5837] exit_group(0 [pid 5012] getdents64(3, [pid 5838] <... futex resumed>) = ? [pid 5837] <... exit_group resumed>) = ? [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5838] +++ exited with 0 +++ [pid 5012] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5837] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5837, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 5012] lstat("./77/bus", [pid 5840] <... ioctl resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5840] close(4 [pid 5012] umount2("./77/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./77/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 4 [pid 5840] <... close resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5012] fstat(4, [pid 5015] fstat(3, [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5015] getdents64(3, [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] getdents64(4, [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5015] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5840] creat("./bus", 000 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(4 [pid 5840] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5015] lstat("./79/bus", [pid 5012] <... close resumed>) = 0 [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] rmdir("./77/bus" [pid 5840] <... futex resumed>) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5015] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... rmdir resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5840] open("./bus", O_RDONLY [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... openat resumed>) = 4 [pid 5012] lstat("./77/binderfs", [pid 5840] <... open resumed>) = 3 [pid 5015] fstat(4, [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] unlink("./77/binderfs" [pid 5840] <... futex resumed>) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] <... unlink resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(3, [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5015] getdents64(4, [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5840] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5840] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5015] close(4 [pid 5012] <... close resumed>) = 0 [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... close resumed>) = 0 [pid 5012] rmdir("./77" [pid 5840] <... futex resumed>) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5015] rmdir("./79/bus" [pid 5012] <... rmdir resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5840] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5840] fallocate(-1, 0, 0, 1048820 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5840] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] <... futex resumed>) = 0 [pid 5840] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5839] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5840] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5840] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5840] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] exit_group(0 [pid 5840] <... futex resumed>) = ? [pid 5839] <... exit_group resumed>) = ? [pid 5840] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ [pid 5015] <... rmdir resumed>) = 0 [pid 5012] mkdir("./78", 0777 [pid 5015] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5012] <... mkdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] lstat("./79/binderfs", [pid 5012] <... openat resumed>) = 3 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5015] unlink("./79/binderfs" [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... unlink resumed>) = 0 [pid 5012] close(3 [pid 5011] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(3, [pid 5012] <... close resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] <... close resumed>) = 0 [pid 5011] rmdir("./80/bus" [pid 5015] close(3 [pid 5011] <... rmdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5011] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5845 attached ) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./80/binderfs" [pid 5015] rmdir("./79" [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5845 [pid 5011] <... unlink resumed>) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./80") = 0 [pid 5011] mkdir("./81", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5015] <... rmdir resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] mkdir("./80", 0777 [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... mkdir resumed>) = 0 [pid 5845] set_robust_list(0x5555561c25e0, 24 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5846 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5015] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5846] chdir("./81" [pid 5845] chdir("./78" [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5845] <... chdir resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5846] <... chdir resumed>) = 0 [pid 5846] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5846] setpgid(0, 0) = 0 [pid 5015] close(3 [pid 5845] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5015] <... close resumed>) = 0 [pid 5845] setpgid(0, 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5845] <... setpgid resumed>) = 0 [pid 5846] <... openat resumed>) = 3 [pid 5846] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5847 attached [pid 5846] close(3 [pid 5845] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5844] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5847 [pid 5846] <... close resumed>) = 0 [pid 5846] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5846] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5847] set_robust_list(0x5555561c25e0, 24 [pid 5846] <... mprotect resumed>) = 0 [pid 5845] <... openat resumed>) = 3 [pid 5846] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5848], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5848 [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5848 attached [pid 5848] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5847] <... set_robust_list resumed>) = 0 [pid 5845] write(3, "1000", 4 [pid 5848] memfd_create("syzkaller", 0) = 3 [pid 5848] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5845] <... write resumed>) = 4 [pid 5847] chdir("./80" [pid 5845] close(3 [pid 5847] <... chdir resumed>) = 0 [pid 5845] <... close resumed>) = 0 [pid 5847] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] symlink("/dev/binderfs", "./binderfs" [pid 5848] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5847] <... prctl resumed>) = 0 [pid 5845] <... symlink resumed>) = 0 [pid 5847] setpgid(0, 0 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... setpgid resumed>) = 0 [pid 5847] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5845] <... futex resumed>) = 0 [pid 5847] <... openat resumed>) = 3 [pid 5845] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5847] write(3, "1000", 4 [pid 5845] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5847] <... write resumed>) = 4 [pid 5847] close(3 [pid 5845] <... mprotect resumed>) = 0 [pid 5847] <... close resumed>) = 0 [pid 5845] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5847] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] <... clone resumed>, parent_tid=[5849], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5849 [pid 5847] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... mmap resumed>) = 0x7fe973f4a000 [pid 5845] <... futex resumed>) = 0 [pid 5847] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5847] <... mprotect resumed>) = 0 [pid 5847] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5850], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5850 [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5849 attached [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5849] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5849] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5850 attached [pid 5850] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5849] <... memfd_create resumed>) = 3 [pid 5849] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5850] memfd_create("syzkaller", 0) = 3 [pid 5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5842] <... write resumed>) = 16777216 [pid 5842] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5842] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5842] close(3) = 0 [pid 5842] mkdir("./bus", 0777) = 0 [ 216.577357][ T5842] loop3: detected capacity change from 0 to 32768 [pid 5842] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 216.618090][ T5842] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5842) [pid 5842] ioctl(4, LOOP_CLR_FD [pid 5848] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5849] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5844] <... write resumed>) = 16777216 [pid 5844] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5844] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5844] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5844] close(3) = 0 [pid 5844] mkdir("./bus", 0777) = 0 [pid 5844] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5844] ioctl(4, LOOP_CLR_FD [pid 5842] <... ioctl resumed>) = 0 [ 216.969381][ T5844] loop4: detected capacity change from 0 to 32768 [ 216.988726][ T5844] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5844) [pid 5842] close(4) = 0 [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] <... futex resumed>) = 0 [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5841] <... futex resumed>) = 0 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] <... futex resumed>) = 0 [pid 5842] open("./bus", O_RDONLY [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] <... open resumed>) = 3 [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5841] <... futex resumed>) = 0 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5841] <... futex resumed>) = 0 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5842] fallocate(-1, 0, 0, 1048820 [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5841] <... futex resumed>) = 0 [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] <... futex resumed>) = 0 [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5841] <... futex resumed>) = 0 [pid 5842] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5841] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] exit_group(0) = ? [pid 5842] <... futex resumed>) = ? [pid 5842] +++ exited with 0 +++ [pid 5841] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./79/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./79/bus") = 0 [pid 5013] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./79/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./79") = 0 [pid 5013] mkdir("./80", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5851 ./strace-static-x86_64: Process 5851 attached [pid 5851] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5851] chdir("./80") = 0 [pid 5851] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5851] setpgid(0, 0) = 0 [pid 5851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5851] write(3, "1000", 4) = 4 [pid 5851] close(3) = 0 [pid 5851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5851] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5851] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5852], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5852 [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5852 attached [pid 5852] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5852] memfd_create("syzkaller", 0) = 3 [pid 5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5850] <... write resumed>) = 16777216 [pid 5844] <... ioctl resumed>) = 0 [pid 5850] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5844] close(4 [pid 5850] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5844] <... close resumed>) = 0 [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... openat resumed>) = 4 [pid 5843] <... futex resumed>) = 0 [pid 5850] ioctl(4, LOOP_SET_FD, 3 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5844] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... futex resumed>) = 0 [pid 5844] open("./bus", O_RDONLY) = 3 [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... ioctl resumed>) = 0 [pid 5848] <... write resumed>) = 16777216 [pid 5844] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5850] close(3 [pid 5848] munmap(0x7fe96bb4a000, 16777216 [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5850] <... close resumed>) = 0 [pid 5849] <... write resumed>) = 16777216 [pid 5849] munmap(0x7fe96bb4a000, 16777216 [pid 5848] <... munmap resumed>) = 0 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5850] mkdir("./bus", 0777 [pid 5844] <... futex resumed>) = 0 [pid 5844] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... mkdir resumed>) = 0 [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 217.419617][ T5850] loop5: detected capacity change from 0 to 32768 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5843] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... munmap resumed>) = 0 [pid 5843] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5844] <... futex resumed>) = 0 [pid 5844] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5844] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] <... futex resumed>) = 0 [pid 5844] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] exit_group(0 [pid 5844] <... futex resumed>) = ? [pid 5843] <... exit_group resumed>) = ? [pid 5844] +++ exited with 0 +++ [pid 5843] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5843, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5849] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5849] <... openat resumed>) = 4 [pid 5849] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5014] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5850] <... mount resumed>) = -1 EEXIST (File exists) [pid 5848] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] <... openat resumed>) = 3 [pid 5849] <... ioctl resumed>) = 0 [pid 5849] close(3) = 0 [pid 5849] mkdir("./bus", 0777 [pid 5850] ioctl(4, LOOP_CLR_FD [pid 5848] <... openat resumed>) = 4 [pid 5014] fstat(3, [pid 5849] <... mkdir resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5848] ioctl(4, LOOP_SET_FD, 3 [pid 5849] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] getdents64(3, [pid 5849] <... mount resumed>) = -1 EEXIST (File exists) [pid 5849] ioctl(4, LOOP_CLR_FD [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5848] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] close(3 [pid 5014] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, [pid 5848] <... close resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5848] mkdir("./bus", 0777 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./80/bus" [pid 5848] <... mkdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5848] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./80/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [ 217.468834][ T5850] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5850) [ 217.489403][ T5849] loop2: detected capacity change from 0 to 32768 [ 217.500676][ T5849] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5849) [ 217.500822][ T5848] loop1: detected capacity change from 0 to 32768 [pid 5014] rmdir("./80") = 0 [pid 5848] <... mount resumed>) = -1 EEXIST (File exists) [pid 5014] mkdir("./81", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5848] ioctl(4, LOOP_CLR_FD [pid 5014] <... openat resumed>) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5853 ./strace-static-x86_64: Process 5853 attached [pid 5853] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5853] chdir("./81") = 0 [pid 5853] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5853] setpgid(0, 0) = 0 [pid 5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5853] write(3, "1000", 4) = 4 [pid 5853] close(3) = 0 [pid 5853] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5853] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5853] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5854], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5854 [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 217.538225][ T5848] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5848) [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5854 attached [pid 5854] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5854] memfd_create("syzkaller", 0) = 3 [pid 5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5850] <... ioctl resumed>) = 0 [pid 5850] close(4) = 0 [pid 5849] <... ioctl resumed>) = 0 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5849] close(4 [pid 5847] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] <... futex resumed>) = 0 [pid 5850] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5849] <... close resumed>) = 0 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5850] <... futex resumed>) = 0 [pid 5849] <... futex resumed>) = 1 [pid 5848] <... ioctl resumed>) = 0 [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5850] open("./bus", O_RDONLY [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] close(4 [pid 5847] <... futex resumed>) = 0 [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... open resumed>) = 3 [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... close resumed>) = 0 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] creat("./bus", 000 [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 0 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... futex resumed>) = 1 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] creat("./bus", 000 [pid 5847] <... futex resumed>) = 0 [pid 5850] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5848] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5850] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5849] <... futex resumed>) = 1 [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5850] <... futex resumed>) = 1 [pid 5847] <... futex resumed>) = 0 [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... futex resumed>) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] open("./bus", O_RDONLY [pid 5848] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... open resumed>) = 3 [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = 0 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] open("./bus", O_RDONLY [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5849] <... futex resumed>) = 0 [pid 5848] <... open resumed>) = 3 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 0 [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... futex resumed>) = 1 [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = 0 [pid 5850] fallocate(-1, 0, 0, 1048820 [pid 5849] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5848] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5847] <... futex resumed>) = 0 [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5849] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5847] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... futex resumed>) = 0 [pid 5849] <... futex resumed>) = 1 [pid 5848] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... futex resumed>) = 0 [pid 5847] <... futex resumed>) = 0 [pid 5850] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5849] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5849] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] <... futex resumed>) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = 1 [pid 5849] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5847] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = 0 [pid 5850] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5847] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... futex resumed>) = 0 [pid 5850] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5849] fallocate(-1, 0, 0, 1048820 [pid 5845] <... futex resumed>) = 0 [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5849] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] <... futex resumed>) = 1 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = 0 [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5849] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] fallocate(-1, 0, 0, 1048820 [pid 5850] <... futex resumed>) = 1 [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5847] <... futex resumed>) = 0 [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5850] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5847] exit_group(0 [pid 5845] <... futex resumed>) = 0 [pid 5849] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5848] <... futex resumed>) = 1 [pid 5847] <... exit_group resumed>) = ? [pid 5846] <... futex resumed>) = 0 [pid 5850] <... futex resumed>) = ? [pid 5849] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5848] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5850] +++ exited with 0 +++ [pid 5847] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5847, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=38 /* 0.38 s */} --- [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5849] <... futex resumed>) = 1 [pid 5848] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5845] <... futex resumed>) = 0 [pid 5015] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5849] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] <... futex resumed>) = 1 [pid 5846] <... futex resumed>) = 0 [pid 5845] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5849] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5848] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5846] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... openat resumed>) = 3 [pid 5849] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5848] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5846] <... futex resumed>) = 0 [pid 5015] fstat(3, [pid 5849] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5849] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] <... futex resumed>) = 0 [pid 5846] exit_group(0) = ? [pid 5015] getdents64(3, [pid 5849] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] exit_group(0 [pid 5848] +++ exited with 0 +++ [pid 5846] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5846, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5849] <... futex resumed>) = ? [pid 5845] <... exit_group resumed>) = ? [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 5849] +++ exited with 0 +++ [pid 5015] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] +++ exited with 0 +++ [pid 5011] <... restart_syscall resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5845, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=40 /* 0.40 s */} --- [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] lstat("./80/bus", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] fstat(3, [pid 5011] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 4 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] fstat(3, [pid 5015] fstat(4, [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] getdents64(4, [pid 5012] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] lstat("./78/bus", [pid 5011] lstat("./81/bus", [pid 5015] close(4 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... close resumed>) = 0 [pid 5012] umount2("./78/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] rmdir("./80/bus" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./78/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] fstat(4, [pid 5011] <... openat resumed>) = 4 [pid 5015] lstat("./80/binderfs", [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] fstat(4, [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] unlink("./80/binderfs" [pid 5012] getdents64(4, [pid 5011] getdents64(4, [pid 5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... unlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(3, [pid 5012] getdents64(4, [pid 5011] getdents64(4, [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5012] close(4 [pid 5011] close(4 [pid 5015] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5015] rmdir("./80" [pid 5012] rmdir("./78/bus" [pid 5011] rmdir("./81/bus" [pid 5015] <... rmdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5011] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] mkdir("./81", 0777 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./81/binderfs", [pid 5015] <... mkdir resumed>) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./78/binderfs", [pid 5011] unlink("./81/binderfs" [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5011] <... unlink resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] getdents64(3, [pid 5015] <... openat resumed>) = 3 [pid 5012] unlink("./78/binderfs" [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 5012] getdents64(3, [pid 5011] <... close resumed>) = 0 [pid 5015] close(3 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5011] rmdir("./81" [pid 5015] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] rmdir("./78" [pid 5011] mkdir("./82", 0777 [pid 5012] <... rmdir resumed>) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5855 [pid 5012] mkdir("./79", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5011] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5855 attached [pid 5012] <... openat resumed>) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 5855] set_robust_list(0x5555561c25e0, 24 [pid 5012] close(3 [pid 5011] <... close resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... set_robust_list resumed>) = 0 [pid 5855] chdir("./81" [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5855] <... chdir resumed>) = 0 [pid 5855] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5855] setpgid(0, 0) = 0 [pid 5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5856 ./strace-static-x86_64: Process 5856 attached [pid 5855] <... openat resumed>) = 3 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5857 [pid 5855] write(3, "1000", 4) = 4 [pid 5855] close(3) = 0 [pid 5855] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5857 attached ) = 0 [pid 5857] set_robust_list(0x5555561c25e0, 24 [pid 5856] set_robust_list(0x5555561c25e0, 24 [pid 5855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5857] <... set_robust_list resumed>) = 0 [pid 5855] <... mmap resumed>) = 0x7fe973f4a000 [pid 5857] chdir("./79" [pid 5856] <... set_robust_list resumed>) = 0 [pid 5855] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5857] <... chdir resumed>) = 0 [pid 5855] <... mprotect resumed>) = 0 [pid 5857] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5856] chdir("./82" [pid 5855] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5857] <... prctl resumed>) = 0 [pid 5857] setpgid(0, 0 [pid 5856] <... chdir resumed>) = 0 [pid 5855] <... clone resumed>, parent_tid=[5858], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5858 [pid 5857] <... setpgid resumed>) = 0 [pid 5856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5856] <... prctl resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5857] <... openat resumed>) = 3 [pid 5856] setpgid(0, 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5857] write(3, "1000", 4 [pid 5856] <... setpgid resumed>) = 0 [pid 5857] <... write resumed>) = 4 [pid 5852] <... write resumed>) = 16777216 [pid 5857] close(3 [pid 5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5852] munmap(0x7fe96bb4a000, 16777216 [pid 5857] <... close resumed>) = 0 [pid 5856] <... openat resumed>) = 3 [pid 5857] symlink("/dev/binderfs", "./binderfs" [pid 5856] write(3, "1000", 4 [pid 5857] <... symlink resumed>) = 0 [pid 5856] <... write resumed>) = 4 [pid 5852] <... munmap resumed>) = 0 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] close(3 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... close resumed>) = 0 [pid 5857] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5856] symlink("/dev/binderfs", "./binderfs" [pid 5857] <... mmap resumed>) = 0x7fe973f4a000 [pid 5857] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5856] <... symlink resumed>) = 0 [pid 5857] <... mprotect resumed>) = 0 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5858 attached [pid 5857] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5859], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5859 [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5859 attached [pid 5859] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5859] memfd_create("syzkaller", 0 [pid 5858] set_robust_list(0x7fe973f6a9e0, 24 [pid 5856] <... futex resumed>) = 0 [pid 5859] <... memfd_create resumed>) = 3 [pid 5856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5858] <... set_robust_list resumed>) = 0 [pid 5856] <... mmap resumed>) = 0x7fe973f4a000 [pid 5856] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5858] memfd_create("syzkaller", 0 [pid 5856] <... mprotect resumed>) = 0 [pid 5856] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5852] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5858] <... memfd_create resumed>) = 3 [pid 5856] <... clone resumed>, parent_tid=[5860], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5860 [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5860 attached [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5856] <... futex resumed>) = 0 [pid 5852] <... ioctl resumed>) = 0 [pid 5860] set_robust_list(0x7fe973f6a9e0, 24 [pid 5858] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5860] <... set_robust_list resumed>) = 0 [pid 5860] memfd_create("syzkaller", 0) = 3 [pid 5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5852] close(3) = 0 [pid 5852] mkdir("./bus", 0777) = 0 [ 218.177578][ T5852] loop3: detected capacity change from 0 to 32768 [pid 5852] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 218.227076][ T5852] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5852) [pid 5852] ioctl(4, LOOP_CLR_FD [pid 5854] <... write resumed>) = 16777216 [pid 5854] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5854] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5854] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5854] close(3) = 0 [pid 5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] mkdir("./bus", 0777) = 0 [pid 5859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5854] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5852] <... ioctl resumed>) = 0 [pid 5852] close(4) = 0 [pid 5854] <... mount resumed>) = -1 EEXIST (File exists) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] ioctl(4, LOOP_CLR_FD [pid 5852] <... futex resumed>) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] creat("./bus", 000 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... creat resumed>) = -1 EISDIR (Is a directory) [ 218.598354][ T5854] loop4: detected capacity change from 0 to 32768 [ 218.616407][ T5854] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5854) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] open("./bus", O_RDONLY [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... open resumed>) = 3 [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] fallocate(-1, 0, 0, 1048820 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5852] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5851] <... futex resumed>) = 0 [pid 5852] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5851] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5852] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5852] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5851] <... futex resumed>) = 0 [pid 5852] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5851] exit_group(0 [pid 5852] <... futex resumed>) = ? [pid 5851] <... exit_group resumed>) = ? [pid 5852] +++ exited with 0 +++ [pid 5851] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5851, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=36 /* 0.36 s */} --- [pid 5013] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./80/bus") = 0 [pid 5013] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./80/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./80") = 0 [pid 5013] mkdir("./81", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5861 ./strace-static-x86_64: Process 5861 attached [pid 5861] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5861] chdir("./81") = 0 [pid 5861] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5861] setpgid(0, 0) = 0 [pid 5861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5861] write(3, "1000", 4) = 4 [pid 5861] close(3) = 0 [pid 5861] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5861] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5861] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5862], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5862 [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5862] memfd_create("syzkaller", 0) = 3 [pid 5862] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5854] <... ioctl resumed>) = 0 [pid 5854] close(4) = 0 [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5854] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] open("./bus", O_RDONLY) = 3 [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5854] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5853] <... futex resumed>) = 0 [pid 5854] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5853] <... futex resumed>) = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5854] fallocate(-1, 0, 0, 1048820 [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] <... futex resumed>) = 0 [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] <... futex resumed>) = 0 [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5853] <... futex resumed>) = 0 [pid 5854] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] <... futex resumed>) = 0 [pid 5853] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5854] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5853] <... futex resumed>) = 0 [pid 5854] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5853] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5854] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5853] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5854] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5853] exit_group(0 [pid 5854] <... futex resumed>) = ? [pid 5853] <... exit_group resumed>) = ? [pid 5854] +++ exited with 0 +++ [pid 5853] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=36 /* 0.36 s */} --- [pid 5014] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./81/bus") = 0 [pid 5014] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./81/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./81") = 0 [pid 5014] mkdir("./82", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5863 ./strace-static-x86_64: Process 5863 attached [pid 5863] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5863] chdir("./82") = 0 [pid 5863] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5860] <... write resumed>) = 16777216 [pid 5863] <... prctl resumed>) = 0 [pid 5863] setpgid(0, 0) = 0 [pid 5863] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5863] write(3, "1000", 4) = 4 [pid 5863] close(3) = 0 [pid 5863] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5863] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5863] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5864], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5864 [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5860] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 5864 attached [pid 5864] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5859] <... write resumed>) = 16777216 [pid 5859] munmap(0x7fe96bb4a000, 16777216 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5860] <... munmap resumed>) = 0 [pid 5864] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5860] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5860] ioctl(4, LOOP_SET_FD, 3 [pid 5859] <... munmap resumed>) = 0 [pid 5858] <... write resumed>) = 16777216 [pid 5859] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5858] munmap(0x7fe96bb4a000, 16777216 [pid 5859] ioctl(4, LOOP_SET_FD, 3 [pid 5860] <... ioctl resumed>) = 0 [pid 5860] close(3) = 0 [pid 5860] mkdir("./bus", 0777) = 0 [pid 5860] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5858] <... munmap resumed>) = 0 [pid 5859] <... ioctl resumed>) = 0 [pid 5859] close(3) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5859] mkdir("./bus", 0777 [pid 5858] <... openat resumed>) = 4 [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 5859] <... mkdir resumed>) = 0 [ 219.228987][ T5860] loop1: detected capacity change from 0 to 32768 [ 219.246037][ T5859] loop2: detected capacity change from 0 to 32768 [ 219.259433][ T5860] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5860) [pid 5859] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5860] <... mount resumed>) = -1 EEXIST (File exists) [pid 5860] ioctl(4, LOOP_CLR_FD [pid 5859] <... mount resumed>) = -1 EEXIST (File exists) [pid 5859] ioctl(4, LOOP_CLR_FD [pid 5858] <... ioctl resumed>) = 0 [pid 5858] close(3) = 0 [pid 5858] mkdir("./bus", 0777 [pid 5862] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5858] <... mkdir resumed>) = 0 [pid 5858] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 219.277476][ T5858] loop5: detected capacity change from 0 to 32768 [ 219.279408][ T5859] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5859) [ 219.305752][ T5858] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5858) [pid 5858] ioctl(4, LOOP_CLR_FD [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5858] <... ioctl resumed>) = 0 [pid 5858] close(4 [pid 5859] <... ioctl resumed>) = 0 [pid 5860] <... ioctl resumed>) = 0 [pid 5860] close(4 [pid 5858] <... close resumed>) = 0 [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5855] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... close resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... futex resumed>) = 1 [pid 5856] <... futex resumed>) = 0 [pid 5860] creat("./bus", 000 [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5856] <... futex resumed>) = 0 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... futex resumed>) = 0 [pid 5859] close(4 [pid 5856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5860] open("./bus", O_RDONLY [pid 5859] <... close resumed>) = 0 [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... open resumed>) = 3 [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... futex resumed>) = 0 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... futex resumed>) = 0 [pid 5859] creat("./bus", 000 [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5858] creat("./bus", 000 [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5860] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5859] <... futex resumed>) = 0 [pid 5858] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5857] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5859] open("./bus", O_RDONLY [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... open resumed>) = 3 [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] open("./bus", O_RDONLY [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5859] <... futex resumed>) = 1 [pid 5858] <... open resumed>) = 3 [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] fallocate(-1, 0, 0, 1048820 [pid 5859] <... futex resumed>) = 1 [pid 5858] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5857] <... futex resumed>) = 0 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 1 [pid 5859] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5856] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5859] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5860] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5857] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 0 [pid 5859] fallocate(-1, 0, 0, 1048820 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5859] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5858] <... futex resumed>) = 1 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = 0 [pid 5859] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... futex resumed>) = 1 [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5856] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5855] <... futex resumed>) = 0 [pid 5860] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5859] <... futex resumed>) = 1 [pid 5858] fallocate(-1, 0, 0, 1048820 [pid 5857] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5860] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] <... futex resumed>) = 1 [pid 5859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] <... futex resumed>) = 0 [pid 5856] <... futex resumed>) = 0 [pid 5860] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5859] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5858] <... futex resumed>) = 1 [pid 5857] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5856] exit_group(0 [pid 5855] <... futex resumed>) = 0 [pid 5860] <... futex resumed>) = ? [pid 5859] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5856] <... exit_group resumed>) = ? [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5860] +++ exited with 0 +++ [pid 5859] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5855] <... futex resumed>) = 0 [pid 5859] <... futex resumed>) = 1 [pid 5857] <... futex resumed>) = 0 [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5859] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5857] exit_group(0 [pid 5856] +++ exited with 0 +++ [pid 5859] <... futex resumed>) = ? [pid 5858] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5857] <... exit_group resumed>) = ? [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 5859] +++ exited with 0 +++ [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5857] +++ exited with 0 +++ [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 5858] <... futex resumed>) = 1 [pid 5855] <... futex resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=42 /* 0.42 s */} --- [pid 5011] <... restart_syscall resumed>) = 0 [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5855] <... futex resumed>) = 0 [pid 5858] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5855] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5858] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5858] <... futex resumed>) = 1 [pid 5855] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5011] <... openat resumed>) = 3 [pid 5858] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5855] exit_group(0 [pid 5012] fstat(3, [pid 5011] fstat(3, [pid 5858] <... futex resumed>) = ? [pid 5855] <... exit_group resumed>) = ? [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5858] +++ exited with 0 +++ [pid 5855] +++ exited with 0 +++ [pid 5012] getdents64(3, [pid 5011] getdents64(3, [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./79/bus", [pid 5011] lstat("./82/bus", [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./79/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./79/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 4 [pid 5011] <... openat resumed>) = 4 [pid 5012] fstat(4, [pid 5011] fstat(4, [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, [pid 5011] getdents64(4, [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=32 /* 0.32 s */} --- [pid 5012] getdents64(4, [pid 5011] getdents64(4, [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5011] close(4 [pid 5012] <... close resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5012] rmdir("./79/bus" [pid 5011] rmdir("./82/bus" [pid 5012] <... rmdir resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5015] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] lstat("./79/binderfs", [pid 5011] lstat("./82/binderfs", [pid 5015] <... openat resumed>) = 3 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] fstat(3, [pid 5012] unlink("./79/binderfs" [pid 5011] unlink("./82/binderfs" [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5011] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5012] getdents64(3, [pid 5011] getdents64(3, [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5011] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5015] lstat("./81/bus", [pid 5012] rmdir("./79" [pid 5011] rmdir("./82" [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5015] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] mkdir("./80", 0777 [pid 5011] mkdir("./83", 0777 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... mkdir resumed>) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... openat resumed>) = 4 [pid 5012] <... openat resumed>) = 3 [pid 5011] <... openat resumed>) = 3 [pid 5015] fstat(4, [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] getdents64(4, [pid 5012] close(3 [pid 5011] close(3 [pid 5862] <... write resumed>) = 16777216 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] <... close resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5862] munmap(0x7fe96bb4a000, 16777216 [pid 5015] getdents64(4, [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5865 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5866 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./81/bus"./strace-static-x86_64: Process 5866 attached ) = 0 [pid 5015] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./81/binderfs", [pid 5866] set_robust_list(0x5555561c25e0, 24 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5866] <... set_robust_list resumed>) = 0 [pid 5015] unlink("./81/binderfs" [pid 5866] chdir("./83" [pid 5015] <... unlink resumed>) = 0 [pid 5866] <... chdir resumed>) = 0 [pid 5015] getdents64(3, [pid 5866] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5866] <... prctl resumed>) = 0 [pid 5862] <... munmap resumed>) = 0 [pid 5015] close(3 [pid 5866] setpgid(0, 0 [pid 5862] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5015] <... close resumed>) = 0 ./strace-static-x86_64: Process 5865 attached [pid 5866] <... setpgid resumed>) = 0 [pid 5015] rmdir("./81" [pid 5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5865] set_robust_list(0x5555561c25e0, 24 [pid 5862] <... openat resumed>) = 4 [pid 5866] <... openat resumed>) = 3 [pid 5865] <... set_robust_list resumed>) = 0 [pid 5862] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5866] write(3, "1000", 4 [pid 5865] chdir("./80" [pid 5866] <... write resumed>) = 4 [pid 5866] close(3) = 0 [pid 5866] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5866] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5866] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5015] mkdir("./82", 0777 [pid 5866] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5865] <... chdir resumed>) = 0 [pid 5865] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... mkdir resumed>) = 0 [pid 5866] <... clone resumed>, parent_tid=[5867], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5867 [pid 5865] <... prctl resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5865] setpgid(0, 0 [pid 5866] <... futex resumed>) = 0 [pid 5865] <... setpgid resumed>) = 0 [pid 5862] <... ioctl resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5862] close(3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5865] <... openat resumed>) = 3 [pid 5862] <... close resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5867 attached [pid 5865] write(3, "1000", 4 [pid 5862] mkdir("./bus", 0777 [pid 5015] close(3 [pid 5867] set_robust_list(0x7fe973f6a9e0, 24 [pid 5865] <... write resumed>) = 4 [pid 5015] <... close resumed>) = 0 [pid 5867] <... set_robust_list resumed>) = 0 [pid 5867] memfd_create("syzkaller", 0 [pid 5865] close(3 [pid 5862] <... mkdir resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5867] <... memfd_create resumed>) = 3 [pid 5865] <... close resumed>) = 0 [pid 5862] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5865] symlink("/dev/binderfs", "./binderfs" [pid 5867] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5865] <... symlink resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5868 [pid 5865] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5868 attached [pid 5865] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5862] <... mount resumed>) = -1 EEXIST (File exists) [pid 5868] set_robust_list(0x5555561c25e0, 24 [pid 5865] <... mmap resumed>) = 0x7fe973f4a000 [pid 5862] ioctl(4, LOOP_CLR_FD [pid 5868] <... set_robust_list resumed>) = 0 [pid 5865] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5868] chdir("./82") = 0 [pid 5865] <... mprotect resumed>) = 0 [pid 5868] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5865] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5868] <... prctl resumed>) = 0 [pid 5868] setpgid(0, 0 [pid 5865] <... clone resumed>, parent_tid=[5869], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5869 [pid 5868] <... setpgid resumed>) = 0 [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5865] <... futex resumed>) = 0 [pid 5868] <... openat resumed>) = 3 [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5868] write(3, "1000", 4) = 4 [pid 5868] close(3) = 0 [pid 5868] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5869 attached ) = 0 [ 219.888602][ T5862] loop3: detected capacity change from 0 to 32768 [ 219.911579][ T5862] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5862) [pid 5868] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] set_robust_list(0x7fe973f6a9e0, 24 [pid 5868] <... futex resumed>) = 0 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5868] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5868] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5869] memfd_create("syzkaller", 0 [pid 5868] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5869] <... memfd_create resumed>) = 3 [pid 5868] <... clone resumed>, parent_tid=[5870], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5870 [pid 5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5868] <... futex resumed>) = 0 [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5870 attached [pid 5870] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5870] memfd_create("syzkaller", 0) = 3 [pid 5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5864] <... write resumed>) = 16777216 [pid 5864] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] mkdir("./bus", 0777) = 0 [pid 5864] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 220.117770][ T5864] loop4: detected capacity change from 0 to 32768 [ 220.131908][ T5864] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5864) [pid 5864] ioctl(4, LOOP_CLR_FD [pid 5862] <... ioctl resumed>) = 0 [pid 5862] close(4) = 0 [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] creat("./bus", 000 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] open("./bus", O_RDONLY [pid 5861] <... futex resumed>) = 0 [pid 5862] <... open resumed>) = 3 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... futex resumed>) = 0 [pid 5861] <... futex resumed>) = 1 [pid 5862] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... futex resumed>) = 0 [pid 5862] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] <... futex resumed>) = 0 [pid 5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] fallocate(-1, 0, 0, 1048820 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5862] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] <... futex resumed>) = 0 [pid 5862] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5861] <... futex resumed>) = 0 [pid 5862] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5861] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5861] <... futex resumed>) = 0 [pid 5862] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5861] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5862] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 5861] exit_group(0) = ? [pid 5862] +++ exited with 0 +++ [pid 5861] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5861, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 5013] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./81/bus") = 0 [pid 5013] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./81/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./81") = 0 [pid 5013] mkdir("./82", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5871 ./strace-static-x86_64: Process 5871 attached [pid 5871] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5871] chdir("./82") = 0 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5871] setpgid(0, 0 [pid 5864] <... ioctl resumed>) = 0 [pid 5871] <... setpgid resumed>) = 0 [pid 5864] close(4 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] <... close resumed>) = 0 [pid 5871] <... openat resumed>) = 3 [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] write(3, "1000", 4 [pid 5864] <... futex resumed>) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5871] <... write resumed>) = 4 [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] close(3 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5871] <... close resumed>) = 0 [pid 5864] creat("./bus", 000 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] symlink("/dev/binderfs", "./binderfs" [pid 5864] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5871] <... symlink resumed>) = 0 [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5863] <... futex resumed>) = 0 [pid 5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] <... mmap resumed>) = 0x7fe973f4a000 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5871] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5864] open("./bus", O_RDONLY [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] <... mprotect resumed>) = 0 [pid 5864] <... open resumed>) = 3 [pid 5871] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5871] <... clone resumed>, parent_tid=[5872], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5872 [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5871] <... futex resumed>) = 0 [pid 5864] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5864] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5872 attached [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] set_robust_list(0x7fe973f6a9e0, 24 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] <... set_robust_list resumed>) = 0 [pid 5864] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5872] memfd_create("syzkaller", 0 [pid 5864] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] <... memfd_create resumed>) = 3 [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5863] <... futex resumed>) = 0 [pid 5864] <... futex resumed>) = 1 [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5864] fallocate(-1, 0, 0, 1048820 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5864] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5863] <... futex resumed>) = 0 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5863] <... futex resumed>) = 0 [pid 5863] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5864] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5864] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5863] <... futex resumed>) = 0 [pid 5864] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5863] exit_group(0 [pid 5864] <... futex resumed>) = ? [pid 5863] <... exit_group resumed>) = ? [pid 5864] +++ exited with 0 +++ [pid 5863] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5863, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=33 /* 0.33 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./82/bus") = 0 [pid 5014] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./82/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./82") = 0 [pid 5014] mkdir("./83", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5873 ./strace-static-x86_64: Process 5873 attached [pid 5873] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5873] chdir("./83") = 0 [pid 5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5873] setpgid(0, 0) = 0 [pid 5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5873] write(3, "1000", 4) = 4 [pid 5873] close(3) = 0 [pid 5873] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5873] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5873] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5874], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5874 [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5869] <... write resumed>) = 16777216 [pid 5869] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5869] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5869] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5869] close(3) = 0 [pid 5869] mkdir("./bus", 0777) = 0 [pid 5869] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 220.887327][ T5869] loop2: detected capacity change from 0 to 32768 [ 220.899854][ T5869] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5869) [pid 5869] ioctl(4, LOOP_CLR_FD [pid 5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5867] <... write resumed>) = 16777216 [pid 5867] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5867] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5870] <... write resumed>) = 16777216 [pid 5867] close(3) = 0 [pid 5867] mkdir("./bus", 0777) = 0 [pid 5867] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5870] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5870] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 221.066938][ T5867] loop1: detected capacity change from 0 to 32768 [ 221.095667][ T5867] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5867) [pid 5870] ioctl(4, LOOP_SET_FD, 3 [pid 5867] <... mount resumed>) = -1 EEXIST (File exists) [pid 5867] ioctl(4, LOOP_CLR_FD [pid 5870] <... ioctl resumed>) = 0 [pid 5870] close(3) = 0 [pid 5870] mkdir("./bus", 0777) = 0 [pid 5870] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5870] <... mount resumed>) = -1 EEXIST (File exists) [ 221.131481][ T5870] loop5: detected capacity change from 0 to 32768 [ 221.150475][ T5870] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5870) [pid 5870] ioctl(4, LOOP_CLR_FD [pid 5869] <... ioctl resumed>) = 0 [pid 5869] close(4) = 0 [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = 0 [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = 1 [pid 5869] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = 1 [pid 5869] open("./bus", O_RDONLY [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... open resumed>) = 3 [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = 1 [pid 5869] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5865] <... futex resumed>) = 1 [pid 5869] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] <... futex resumed>) = 0 [pid 5869] fallocate(-1, 0, 0, 1048820 [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] <... futex resumed>) = 0 [pid 5869] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5865] <... futex resumed>) = 0 [pid 5869] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5865] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5869] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5865] <... futex resumed>) = 0 [pid 5869] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5865] exit_group(0 [pid 5869] <... futex resumed>) = ? [pid 5865] <... exit_group resumed>) = ? [pid 5869] +++ exited with 0 +++ [pid 5865] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=34 /* 0.34 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./80/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./80/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./80/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./80/bus") = 0 [pid 5012] umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./80/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./80") = 0 [pid 5012] mkdir("./81", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5875 ./strace-static-x86_64: Process 5875 attached [pid 5875] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5875] chdir("./81") = 0 [pid 5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5875] setpgid(0, 0) = 0 [pid 5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5875] write(3, "1000", 4) = 4 [pid 5875] close(3) = 0 [pid 5875] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5875] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5875] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5876], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5876 [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5876 attached [pid 5876] set_robust_list(0x7fe973f6a9e0, 24 [pid 5872] <... write resumed>) = 16777216 [pid 5876] <... set_robust_list resumed>) = 0 [pid 5876] memfd_create("syzkaller", 0 [pid 5872] munmap(0x7fe96bb4a000, 16777216 [pid 5876] <... memfd_create resumed>) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5872] <... munmap resumed>) = 0 [pid 5872] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5872] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5872] close(3) = 0 [pid 5872] mkdir("./bus", 0777) = 0 [pid 5872] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5872] ioctl(4, LOOP_CLR_FD [pid 5870] <... ioctl resumed>) = 0 [pid 5870] close(4) = 0 [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] <... futex resumed>) = 0 [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = 0 [pid 5868] <... futex resumed>) = 1 [ 221.535618][ T5872] loop3: detected capacity change from 0 to 32768 [ 221.569839][ T5872] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5872) [pid 5870] creat("./bus", 000 [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5870] <... futex resumed>) = 0 [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] open("./bus", O_RDONLY) = 3 [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5868] <... futex resumed>) = 0 [pid 5870] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5868] <... futex resumed>) = 0 [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... futex resumed>) = 0 [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5868] <... futex resumed>) = 0 [pid 5870] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5868] <... futex resumed>) = 0 [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] <... ioctl resumed>) = 0 [pid 5870] fallocate(-1, 0, 0, 1048820 [pid 5868] <... futex resumed>) = 0 [pid 5867] close(4 [pid 5870] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... close resumed>) = 0 [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] <... futex resumed>) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 5868] <... futex resumed>) = 1 [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... write resumed>) = 16777216 [pid 5870] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] creat("./bus", 000 [pid 5866] <... futex resumed>) = 0 [pid 5870] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] munmap(0x7fe96bb4a000, 16777216 [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5867] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5874] <... munmap resumed>) = 0 [pid 5868] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = 0 [pid 5868] <... futex resumed>) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5870] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5868] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... futex resumed>) = 1 [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... openat resumed>) = 4 [pid 5870] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5866] <... futex resumed>) = 0 [pid 5870] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 5870] <... futex resumed>) = 0 [pid 5868] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5867] open("./bus", O_RDONLY [pid 5870] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5868] exit_group(0 [pid 5867] <... open resumed>) = 3 [pid 5868] <... exit_group resumed>) = ? [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = ? [pid 5867] <... futex resumed>) = 1 [pid 5867] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] +++ exited with 0 +++ [pid 5868] +++ exited with 0 +++ [pid 5866] <... futex resumed>) = 0 [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5867] <... futex resumed>) = 0 [pid 5866] <... futex resumed>) = 1 [pid 5867] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5867] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5867] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... ioctl resumed>) = 0 [pid 5867] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5866] <... futex resumed>) = 0 [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] close(3 [pid 5867] <... futex resumed>) = 0 [pid 5866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5867] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5874] <... close resumed>) = 0 [pid 5867] fallocate(-1, 0, 0, 1048820 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, [pid 5874] mkdir("./bus", 0777 [pid 5867] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5874] <... mkdir resumed>) = 0 [pid 5867] <... futex resumed>) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5874] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5867] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5866] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] fstat(4, [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./82/bus") = 0 [pid 5015] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./82/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./82") = 0 [pid 5015] mkdir("./83", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5867] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5015] <... openat resumed>) = 3 [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5867] <... futex resumed>) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5867] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5866] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] close(3 [pid 5874] <... mount resumed>) = -1 EEXIST (File exists) [pid 5867] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5866] <... futex resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5866] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5874] ioctl(4, LOOP_CLR_FD [pid 5867] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5877 [pid 5867] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5867] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5866] <... futex resumed>) = 0 [pid 5866] exit_group(0 [pid 5867] exit_group(0 [pid 5866] <... exit_group resumed>) = ? [ 221.709382][ T5874] loop4: detected capacity change from 0 to 32768 [ 221.742642][ T5874] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5874) ./strace-static-x86_64: Process 5877 attached [pid 5867] +++ exited with 0 +++ [pid 5866] +++ exited with 0 +++ [pid 5877] set_robust_list(0x5555561c25e0, 24 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=45 /* 0.45 s */} --- [pid 5877] <... set_robust_list resumed>) = 0 [pid 5011] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] chdir("./83" [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5877] <... chdir resumed>) = 0 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5877] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5011] getdents64(3, [pid 5877] <... prctl resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5877] setpgid(0, 0 [pid 5011] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] <... setpgid resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./83/bus", [pid 5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5877] <... openat resumed>) = 3 [pid 5011] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] write(3, "1000", 4 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5877] <... write resumed>) = 4 [pid 5011] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5877] close(3 [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] <... openat resumed>) = 4 [pid 5877] <... close resumed>) = 0 [pid 5011] fstat(4, [pid 5877] symlink("/dev/binderfs", "./binderfs" [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, [pid 5877] <... symlink resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] rmdir("./83/bus" [pid 5877] <... futex resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5011] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5877] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./83/binderfs", [pid 5877] <... mmap resumed>) = 0x7fe973f4a000 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5877] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5011] unlink("./83/binderfs" [pid 5877] <... mprotect resumed>) = 0 [pid 5011] <... unlink resumed>) = 0 [pid 5011] getdents64(3, [pid 5877] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5877] <... clone resumed>, parent_tid=[5878], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5878 [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] close(3 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] <... close resumed>) = 0 [pid 5011] rmdir("./83") = 0 [pid 5011] mkdir("./84", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3./strace-static-x86_64: Process 5878 attached ) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5879 [pid 5878] set_robust_list(0x7fe973f6a9e0, 24./strace-static-x86_64: Process 5879 attached ) = 0 [pid 5879] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5878] memfd_create("syzkaller", 0 [pid 5879] chdir("./84" [pid 5878] <... memfd_create resumed>) = 3 [pid 5879] <... chdir resumed>) = 0 [pid 5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5878] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5879] setpgid(0, 0) = 0 [pid 5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5879] write(3, "1000", 4) = 4 [pid 5879] close(3) = 0 [pid 5879] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5879] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5879] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5880], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5880 [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5880 attached [pid 5880] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5880] memfd_create("syzkaller", 0) = 3 [pid 5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5872] <... ioctl resumed>) = 0 [pid 5872] close(4) = 0 [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] <... futex resumed>) = 0 [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5872] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] open("./bus", O_RDONLY) = 3 [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5871] <... futex resumed>) = 1 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... futex resumed>) = 0 [pid 5871] <... futex resumed>) = 1 [pid 5872] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] <... futex resumed>) = 0 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] <... futex resumed>) = 0 [pid 5872] fallocate(-1, 0, 0, 1048820 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] <... futex resumed>) = 0 [pid 5872] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5872] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5871] <... futex resumed>) = 0 [pid 5872] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5871] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] <... futex resumed>) = 0 [pid 5871] exit_group(0 [pid 5872] exit_group(0 [pid 5872] +++ exited with 0 +++ [pid 5871] <... exit_group resumed>) = ? [pid 5871] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./82/bus") = 0 [pid 5013] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./82/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./82") = 0 [pid 5013] mkdir("./83", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5881 ./strace-static-x86_64: Process 5881 attached [pid 5881] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5881] chdir("./83") = 0 [pid 5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5881] setpgid(0, 0) = 0 [pid 5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5881] write(3, "1000", 4) = 4 [pid 5881] close(3) = 0 [pid 5881] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5881] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5881] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5882], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5882 [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5882 attached [pid 5882] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5882] memfd_create("syzkaller", 0) = 3 [pid 5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5874] <... ioctl resumed>) = 0 [pid 5874] close(4) = 0 [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] <... futex resumed>) = 0 [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5874] creat("./bus", 000 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5874] open("./bus", O_RDONLY) = 3 [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5874] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... futex resumed>) = 0 [pid 5874] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... futex resumed>) = 0 [pid 5874] fallocate(-1, 0, 0, 1048820 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... futex resumed>) = 0 [pid 5874] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... futex resumed>) = 0 [pid 5874] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5873] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5874] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5874] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] exit_group(0 [pid 5874] <... futex resumed>) = ? [pid 5873] <... exit_group resumed>) = ? [pid 5874] +++ exited with 0 +++ [pid 5873] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5014] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./83/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./83/bus") = 0 [pid 5014] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./83/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./83") = 0 [pid 5014] mkdir("./84", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5883 ./strace-static-x86_64: Process 5883 attached [pid 5883] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5883] chdir("./84") = 0 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5883] setpgid(0, 0) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5883] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5884], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5884 [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5884 attached [pid 5884] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5884] memfd_create("syzkaller", 0) = 3 [pid 5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5876] <... write resumed>) = 16777216 [pid 5876] munmap(0x7fe96bb4a000, 16777216 [pid 5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5876] <... munmap resumed>) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5876] close(3) = 0 [pid 5876] mkdir("./bus", 0777) = 0 [pid 5876] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 222.438722][ T5876] loop2: detected capacity change from 0 to 32768 [ 222.461294][ T5876] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5876) [pid 5876] ioctl(4, LOOP_CLR_FD [pid 5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5878] <... write resumed>) = 16777216 [pid 5878] munmap(0x7fe96bb4a000, 16777216 [pid 5876] <... ioctl resumed>) = 0 [pid 5876] close(4) = 0 [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] <... futex resumed>) = 0 [pid 5878] <... munmap resumed>) = 0 [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5876] <... futex resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5876] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] <... openat resumed>) = 4 [pid 5876] <... futex resumed>) = 0 [pid 5875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] <... write resumed>) = 16777216 [pid 5878] ioctl(4, LOOP_SET_FD, 3 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] open("./bus", O_RDONLY) = 3 [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5876] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5880] munmap(0x7fe96bb4a000, 16777216 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 0 [pid 5876] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 0 [pid 5876] fallocate(-1, 0, 0, 1048820 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 0 [pid 5876] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... munmap resumed>) = 0 [pid 5878] <... ioctl resumed>) = 0 [pid 5876] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] close(3 [pid 5876] <... futex resumed>) = 1 [pid 5880] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5875] <... futex resumed>) = 0 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 0 [pid 5876] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5875] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] <... close resumed>) = 0 [pid 5876] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5876] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] mkdir("./bus", 0777 [pid 5876] <... futex resumed>) = 1 [pid 5875] <... futex resumed>) = 0 [pid 5876] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] exit_group(0 [pid 5878] <... mkdir resumed>) = 0 [pid 5876] <... futex resumed>) = ? [pid 5875] <... exit_group resumed>) = ? [pid 5880] <... openat resumed>) = 4 [pid 5878] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5876] +++ exited with 0 +++ [pid 5875] +++ exited with 0 +++ [ 222.919837][ T5878] loop5: detected capacity change from 0 to 32768 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=46 /* 0.46 s */} --- [pid 5012] umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5880] ioctl(4, LOOP_SET_FD, 3 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./81/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./81/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./81/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./81/bus") = 0 [pid 5880] <... ioctl resumed>) = 0 [pid 5012] umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./81/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./81") = 0 [pid 5012] mkdir("./82", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5878] <... mount resumed>) = -1 EEXIST (File exists) [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5885 [ 222.962800][ T5878] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5878) [ 222.977716][ T5880] loop1: detected capacity change from 0 to 32768 [pid 5878] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5885 attached [pid 5880] close(3 [pid 5885] set_robust_list(0x5555561c25e0, 24 [pid 5880] <... close resumed>) = 0 [pid 5885] <... set_robust_list resumed>) = 0 [pid 5880] mkdir("./bus", 0777 [pid 5885] chdir("./82" [pid 5880] <... mkdir resumed>) = 0 [pid 5885] <... chdir resumed>) = 0 [pid 5880] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5885] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5885] setpgid(0, 0 [pid 5880] <... mount resumed>) = -1 EEXIST (File exists) [pid 5885] <... setpgid resumed>) = 0 [pid 5880] ioctl(4, LOOP_CLR_FD [pid 5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5885] write(3, "1000", 4) = 4 [pid 5885] close(3) = 0 [pid 5885] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5885] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5885] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5886], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5886 [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5882] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5886 attached [ 223.034624][ T5880] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5880) [pid 5882] munmap(0x7fe96bb4a000, 16777216 [pid 5886] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5886] memfd_create("syzkaller", 0) = 3 [pid 5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5882] <... munmap resumed>) = 0 [pid 5882] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5882] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5882] close(3) = 0 [pid 5882] mkdir("./bus", 0777) = 0 [pid 5882] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 223.149390][ T5882] loop3: detected capacity change from 0 to 32768 [ 223.174519][ T5882] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5882) [pid 5882] ioctl(4, LOOP_CLR_FD [pid 5884] <... write resumed>) = 16777216 [pid 5884] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5884] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5884] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5884] close(3) = 0 [pid 5884] mkdir("./bus", 0777) = 0 [pid 5884] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 223.279076][ T5884] loop4: detected capacity change from 0 to 32768 [ 223.297958][ T5884] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5884) [pid 5884] ioctl(4, LOOP_CLR_FD [pid 5878] <... ioctl resumed>) = 0 [pid 5878] close(4) = 0 [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5877] <... futex resumed>) = 0 [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] creat("./bus", 000 [pid 5882] <... ioctl resumed>) = 0 [pid 5878] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5878] open("./bus", O_RDONLY [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] close(4 [pid 5878] <... open resumed>) = 3 [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... close resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5878] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5882] creat("./bus", 000 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5880] <... ioctl resumed>) = 0 [pid 5878] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] open("./bus", O_RDONLY [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] close(4 [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... open resumed>) = 3 [pid 5880] <... close resumed>) = 0 [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] fallocate(-1, 0, 0, 1048820 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5878] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5880] creat("./bus", 000 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5882] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5878] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5880] open("./bus", O_RDONLY [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... open resumed>) = 3 [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5877] <... futex resumed>) = 0 [pid 5882] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5877] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5878] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5880] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5878] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5878] <... futex resumed>) = 1 [pid 5877] <... futex resumed>) = 0 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5877] exit_group(0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5878] <... futex resumed>) = ? [pid 5877] <... exit_group resumed>) = ? [pid 5882] fallocate(-1, 0, 0, 1048820 [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5878] +++ exited with 0 +++ [pid 5877] +++ exited with 0 +++ [pid 5882] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5881] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5882] <... futex resumed>) = 0 [pid 5881] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5880] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5882] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5015] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] fallocate(-1, 0, 0, 1048820 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5880] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5882] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5881] <... futex resumed>) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5882] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5881] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] fstat(3, [pid 5882] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5882] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] getdents64(3, [pid 5882] <... futex resumed>) = 1 [pid 5881] <... futex resumed>) = 0 [pid 5880] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5882] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5881] exit_group(0 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5882] <... futex resumed>) = ? [pid 5881] <... exit_group resumed>) = ? [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5882] +++ exited with 0 +++ [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5880] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5879] <... futex resumed>) = 0 [pid 5881] +++ exited with 0 +++ [pid 5880] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5879] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] lstat("./83/bus", [pid 5880] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5880] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5880] <... futex resumed>) = 1 [pid 5879] <... futex resumed>) = 0 [pid 5015] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5880] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5879] exit_group(0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5880] <... futex resumed>) = ? [pid 5879] <... exit_group resumed>) = ? [pid 5015] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... restart_syscall resumed>) = 0 [pid 5880] +++ exited with 0 +++ [pid 5879] +++ exited with 0 +++ [pid 5015] <... openat resumed>) = 4 [pid 5015] fstat(4, [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} --- [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(4 [pid 5013] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./83/bus" [pid 5013] <... openat resumed>) = 3 [pid 5884] <... ioctl resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] fstat(3, [pid 5015] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] close(4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(3, [pid 5011] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... close resumed>) = 0 [pid 5015] lstat("./83/binderfs", [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5015] unlink("./83/binderfs" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... openat resumed>) = 3 [pid 5884] creat("./bus", 000 [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... unlink resumed>) = 0 [pid 5013] lstat("./83/bus", [pid 5011] fstat(3, [pid 5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5884] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5883] <... futex resumed>) = 0 [pid 5015] getdents64(3, [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, [pid 5884] <... futex resumed>) = 0 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] close(3 [pid 5013] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... close resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5015] rmdir("./83" [pid 5013] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] open("./bus", O_RDONLY [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5011] lstat("./84/bus", [pid 5884] <... open resumed>) = 3 [pid 5015] mkdir("./84", 0777 [pid 5013] fstat(4, [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] getdents64(4, [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] getdents64(4, [pid 5011] <... openat resumed>) = 4 [pid 5884] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] fstat(4, [pid 5884] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5015] close(3 [pid 5013] close(4 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5011] getdents64(4, [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] rmdir("./83/bus" [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... rmdir resumed>) = 0 [pid 5011] getdents64(4, [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5887 [pid 5013] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5884] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] close(4 [pid 5884] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5013] lstat("./83/binderfs", [pid 5011] <... close resumed>) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] rmdir("./84/bus" [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5013] unlink("./83/binderfs" [pid 5011] <... rmdir resumed>) = 0 [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... unlink resumed>) = 0 [pid 5011] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5013] getdents64(3, [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5884] fallocate(-1, 0, 0, 1048820 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] lstat("./84/binderfs", [pid 5884] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5013] close(3 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... close resumed>) = 0 [pid 5011] unlink("./84/binderfs" [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5013] rmdir("./83" [pid 5011] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 5887 attached [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... rmdir resumed>) = 0 [pid 5011] getdents64(3, [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5883] <... futex resumed>) = 0 [pid 5013] mkdir("./84", 0777 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5884] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... mkdir resumed>) = 0 [pid 5011] close(3 [pid 5884] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] <... close resumed>) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... openat resumed>) = 3 [pid 5011] rmdir("./84" [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5011] <... rmdir resumed>) = 0 [pid 5887] set_robust_list(0x5555561c25e0, 24 [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] mkdir("./85", 0777 [pid 5884] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5887] <... set_robust_list resumed>) = 0 [pid 5883] <... futex resumed>) = 0 [pid 5013] close(3 [pid 5011] <... mkdir resumed>) = 0 [pid 5887] chdir("./84" [pid 5884] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5883] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... close resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5884] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] <... openat resumed>) = 3 [pid 5887] <... chdir resumed>) = 0 [pid 5884] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5887] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5884] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5888 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5884] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] exit_group(0 [pid 5011] close(3 [pid 5884] <... futex resumed>) = ? [pid 5883] <... exit_group resumed>) = ? [pid 5011] <... close resumed>) = 0 [pid 5887] <... prctl resumed>) = 0 [pid 5884] +++ exited with 0 +++ [pid 5883] +++ exited with 0 +++ [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5888 attached [pid 5887] setpgid(0, 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=34 /* 0.34 s */} --- [pid 5888] set_robust_list(0x5555561c25e0, 24 [pid 5887] <... setpgid resumed>) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5889 [pid 5014] <... restart_syscall resumed>) = 0 ./strace-static-x86_64: Process 5889 attached [pid 5888] <... set_robust_list resumed>) = 0 [pid 5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5888] chdir("./84" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5888] <... chdir resumed>) = 0 [pid 5887] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5889] set_robust_list(0x5555561c25e0, 24 [pid 5888] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5887] write(3, "1000", 4 [pid 5014] <... openat resumed>) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./84/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5889] <... set_robust_list resumed>) = 0 [pid 5888] <... prctl resumed>) = 0 [pid 5887] <... write resumed>) = 4 [pid 5014] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5889] chdir("./85" [pid 5888] setpgid(0, 0 [pid 5887] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5889] <... chdir resumed>) = 0 [pid 5888] <... setpgid resumed>) = 0 [pid 5887] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5889] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5887] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... openat resumed>) = 4 [pid 5889] <... prctl resumed>) = 0 [pid 5014] fstat(4, [pid 5888] <... openat resumed>) = 3 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5887] <... symlink resumed>) = 0 [pid 5014] getdents64(4, [pid 5889] setpgid(0, 0 [pid 5888] write(3, "1000", 4 [pid 5887] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5889] <... setpgid resumed>) = 0 [pid 5888] <... write resumed>) = 4 [pid 5887] <... futex resumed>) = 0 [pid 5014] getdents64(4, [pid 5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5888] close(3 [pid 5887] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5889] <... openat resumed>) = 3 [pid 5888] <... close resumed>) = 0 [pid 5014] close(4 [pid 5889] write(3, "1000", 4 [pid 5888] symlink("/dev/binderfs", "./binderfs" [pid 5887] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] <... close resumed>) = 0 [pid 5889] <... write resumed>) = 4 [pid 5888] <... symlink resumed>) = 0 [pid 5887] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] rmdir("./84/bus" [pid 5889] close(3 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... mprotect resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5889] <... close resumed>) = 0 [pid 5014] unlink("./84/binderfs" [pid 5889] symlink("/dev/binderfs", "./binderfs" [pid 5888] <... futex resumed>) = 0 [pid 5887] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... unlink resumed>) = 0 [pid 5014] getdents64(3, [pid 5889] <... symlink resumed>) = 0 [pid 5888] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5888] <... mmap resumed>) = 0x7fe973f4a000 [pid 5887] <... clone resumed>, parent_tid=[5890], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5890 [pid 5014] close(3 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... close resumed>) = 0 [pid 5889] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] rmdir("./84" [pid 5889] <... mmap resumed>) = 0x7fe973f4a000 [pid 5888] <... mprotect resumed>) = 0 [pid 5887] <... futex resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5889] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] mkdir("./85", 0777 [pid 5888] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5889] <... mprotect resumed>) = 0 [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5890 attached [pid 5889] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5888] <... clone resumed>, parent_tid=[5891], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5891 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5890] set_robust_list(0x7fe973f6a9e0, 24 [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 5890] <... set_robust_list resumed>) = 0 [pid 5889] <... clone resumed>, parent_tid=[5892], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5892 [pid 5888] <... futex resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5890] memfd_create("syzkaller", 0 [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5890] <... memfd_create resumed>) = 3 [pid 5889] <... futex resumed>) = 0 [pid 5014] close(3./strace-static-x86_64: Process 5891 attached [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... close resumed>) = 0 ./strace-static-x86_64: Process 5892 attached [pid 5890] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5892] set_robust_list(0x7fe973f6a9e0, 24 [pid 5891] set_robust_list(0x7fe973f6a9e0, 24 [pid 5892] <... set_robust_list resumed>) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5893 [pid 5892] memfd_create("syzkaller", 0 [pid 5891] <... set_robust_list resumed>) = 0 [pid 5892] <... memfd_create resumed>) = 3 [pid 5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5891] memfd_create("syzkaller", 0) = 3 [pid 5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 5893 attached [pid 5893] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5893] chdir("./85") = 0 [pid 5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5893] setpgid(0, 0) = 0 [pid 5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5893] write(3, "1000", 4) = 4 [pid 5893] close(3) = 0 [pid 5893] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5893] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5893] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5894], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5894 [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5894 attached [pid 5894] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5894] memfd_create("syzkaller", 0) = 3 [pid 5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5886] <... write resumed>) = 16777216 [pid 5886] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5886] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5886] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5886] close(3) = 0 [pid 5886] mkdir("./bus", 0777) = 0 [pid 5886] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 224.019916][ T5886] loop2: detected capacity change from 0 to 32768 [ 224.052290][ T5886] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5886) [pid 5886] ioctl(4, LOOP_CLR_FD [pid 5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5886] <... ioctl resumed>) = 0 [pid 5886] close(4) = 0 [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = 0 [pid 5885] <... futex resumed>) = 1 [pid 5886] creat("./bus", 000 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] open("./bus", O_RDONLY [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... open resumed>) = 3 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... futex resumed>) = 0 [pid 5885] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5886] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5886] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5886] fallocate(-1, 0, 0, 1048820 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5886] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5886] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5885] <... futex resumed>) = 0 [pid 5886] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5885] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5886] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5886] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5885] <... futex resumed>) = 0 [pid 5886] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5885] exit_group(0 [pid 5886] <... futex resumed>) = ? [pid 5885] <... exit_group resumed>) = ? [pid 5886] +++ exited with 0 +++ [pid 5885] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./82/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./82/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./82/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./82/bus") = 0 [pid 5012] umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./82/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./82") = 0 [pid 5012] mkdir("./83", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5895 ./strace-static-x86_64: Process 5895 attached [pid 5895] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5895] chdir("./83") = 0 [pid 5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5895] setpgid(0, 0) = 0 [pid 5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5895] write(3, "1000", 4) = 4 [pid 5895] close(3) = 0 [pid 5895] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5895] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5895] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5895] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5896], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5896 [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5896 attached [pid 5896] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5896] memfd_create("syzkaller", 0) = 3 [pid 5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5891] <... write resumed>) = 16777216 [pid 5891] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5891] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5891] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5891] close(3) = 0 [pid 5891] mkdir("./bus", 0777) = 0 [pid 5891] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5892] <... write resumed>) = 16777216 [pid 5892] munmap(0x7fe96bb4a000, 16777216 [pid 5891] <... mount resumed>) = -1 EEXIST (File exists) [pid 5892] <... munmap resumed>) = 0 [pid 5891] ioctl(4, LOOP_CLR_FD [pid 5892] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 224.728903][ T5891] loop3: detected capacity change from 0 to 32768 [ 224.755234][ T5891] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5891) [pid 5892] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5892] close(3 [pid 5890] <... write resumed>) = 16777216 [pid 5890] munmap(0x7fe96bb4a000, 16777216 [pid 5892] <... close resumed>) = 0 [pid 5892] mkdir("./bus", 0777) = 0 [pid 5892] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5890] <... munmap resumed>) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5894] <... write resumed>) = 16777216 [pid 5892] <... mount resumed>) = -1 EEXIST (File exists) [ 224.798518][ T5892] loop1: detected capacity change from 0 to 32768 [ 224.826002][ T5892] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5892) [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5892] ioctl(4, LOOP_CLR_FD [pid 5890] <... ioctl resumed>) = 0 [pid 5894] munmap(0x7fe96bb4a000, 16777216 [pid 5890] close(3) = 0 [pid 5890] mkdir("./bus", 0777) = 0 [ 224.857765][ T5890] loop5: detected capacity change from 0 to 32768 [pid 5890] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5894] <... munmap resumed>) = 0 [pid 5894] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5890] <... mount resumed>) = -1 EEXIST (File exists) [pid 5894] <... openat resumed>) = 4 [ 224.897767][ T5890] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5890) [pid 5890] ioctl(4, LOOP_CLR_FD [pid 5894] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5894] close(3) = 0 [pid 5894] mkdir("./bus", 0777) = 0 [ 224.932806][ T5894] loop4: detected capacity change from 0 to 32768 [ 224.962194][ T5894] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5894) [pid 5894] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5894] ioctl(4, LOOP_CLR_FD [pid 5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5891] <... ioctl resumed>) = 0 [pid 5891] close(4) = 0 [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5891] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 1 [pid 5891] open("./bus", O_RDONLY [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... open resumed>) = 3 [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5891] <... futex resumed>) = 0 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5888] <... futex resumed>) = 0 [pid 5891] <... futex resumed>) = 0 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... futex resumed>) = 0 [pid 5888] <... futex resumed>) = 1 [pid 5891] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5891] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5888] <... futex resumed>) = 0 [pid 5891] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5888] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5891] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5891] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5888] <... futex resumed>) = 0 [pid 5891] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5888] exit_group(0 [pid 5891] <... futex resumed>) = ? [pid 5888] <... exit_group resumed>) = ? [pid 5891] +++ exited with 0 +++ [pid 5888] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=31 /* 0.31 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./84/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./84/bus") = 0 [pid 5013] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./84/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./84") = 0 [pid 5013] mkdir("./85", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5897 ./strace-static-x86_64: Process 5897 attached [pid 5897] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5897] chdir("./85") = 0 [pid 5892] <... ioctl resumed>) = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5897] setpgid(0, 0) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5892] close(4 [pid 5897] <... openat resumed>) = 3 [pid 5892] <... close resumed>) = 0 [pid 5897] write(3, "1000", 4 [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] <... write resumed>) = 4 [pid 5889] <... futex resumed>) = 0 [pid 5897] close(3 [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... close resumed>) = 0 [pid 5892] <... futex resumed>) = 0 [pid 5889] <... futex resumed>) = 1 [pid 5897] symlink("/dev/binderfs", "./binderfs" [pid 5892] creat("./bus", 000 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] <... symlink resumed>) = 0 [pid 5892] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = 0 [pid 5889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] <... futex resumed>) = 0 [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5892] <... futex resumed>) = 0 [pid 5892] open("./bus", O_RDONLY) = 3 [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] <... mmap resumed>) = 0x7fe973f4a000 [pid 5889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... mprotect resumed>) = 0 [pid 5889] <... futex resumed>) = 1 [pid 5892] <... futex resumed>) = 0 [pid 5892] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5897] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5892] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5889] <... futex resumed>) = 0 [pid 5897] <... clone resumed>, parent_tid=[5898], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5898 [pid 5892] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] <... futex resumed>) = 0 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5889] <... futex resumed>) = 0 [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5892] <... futex resumed>) = 0 [pid 5889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5889] <... futex resumed>) = 0 [pid 5892] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5898 attached [pid 5898] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5898] memfd_create("syzkaller", 0 [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5889] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5892] <... futex resumed>) = 0 [pid 5889] <... futex resumed>) = 1 [pid 5898] <... memfd_create resumed>) = 3 [pid 5892] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5889] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5892] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5898] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5892] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5890] <... ioctl resumed>) = 0 [pid 5889] <... futex resumed>) = 0 [pid 5892] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5889] exit_group(0 [pid 5890] close(4 [pid 5892] <... futex resumed>) = ? [pid 5889] <... exit_group resumed>) = ? [pid 5892] +++ exited with 0 +++ [pid 5890] <... close resumed>) = 0 [pid 5889] +++ exited with 0 +++ [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5890] <... futex resumed>) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./85/bus", [pid 5890] creat("./bus", 000 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5890] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5887] <... futex resumed>) = 0 [pid 5011] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, [pid 5890] <... futex resumed>) = 0 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./85/bus" [pid 5890] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... rmdir resumed>) = 0 [pid 5011] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5890] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5887] <... futex resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./85/binderfs") = 0 [pid 5890] open("./bus", O_RDONLY [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./85") = 0 [pid 5011] mkdir("./86", 0777 [pid 5890] <... open resumed>) = 3 [pid 5011] <... mkdir resumed>) = 0 [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5887] <... futex resumed>) = 0 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5887] <... futex resumed>) = 0 [pid 5890] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... openat resumed>) = 3 [pid 5890] <... futex resumed>) = 0 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5890] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5887] <... futex resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5890] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] close(3 [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... close resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5894] <... ioctl resumed>) = 0 [pid 5890] fallocate(-1, 0, 0, 1048820 [pid 5887] <... futex resumed>) = 0 [pid 5890] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5899 [pid 5890] <... futex resumed>) = 0 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5887] <... futex resumed>) = 0 [pid 5890] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5894] close(4 [pid 5890] <... futex resumed>) = 0 [pid 5887] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... close resumed>) = 0 [pid 5890] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5887] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5899 attached [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5887] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5899] set_robust_list(0x5555561c25e0, 24 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5890] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5887] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... set_robust_list resumed>) = 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = 0 [pid 5887] exit_group(0 [pid 5899] chdir("./86" [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5887] <... exit_group resumed>) = ? [pid 5899] <... chdir resumed>) = 0 [pid 5894] creat("./bus", 000 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] +++ exited with 0 +++ [pid 5887] +++ exited with 0 +++ [pid 5899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5894] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5899] <... prctl resumed>) = 0 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=48 /* 0.48 s */} --- [pid 5899] setpgid(0, 0 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5899] <... setpgid resumed>) = 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5899] <... openat resumed>) = 3 [pid 5894] open("./bus", O_RDONLY [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5899] write(3, "1000", 4 [pid 5894] <... open resumed>) = 3 [pid 5015] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... write resumed>) = 4 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] close(3 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5899] <... close resumed>) = 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... openat resumed>) = 3 [pid 5899] symlink("/dev/binderfs", "./binderfs" [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5015] fstat(3, [pid 5899] <... symlink resumed>) = 0 [pid 5894] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5015] getdents64(3, [pid 5899] <... futex resumed>) = 0 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5899] <... mmap resumed>) = 0x7fe973f4a000 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5015] lstat("./84/bus", [pid 5899] <... mprotect resumed>) = 0 [pid 5894] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5899] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5894] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5899] <... clone resumed>, parent_tid=[5900], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5900 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5900 attached [pid 5899] <... futex resumed>) = 0 [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5015] fstat(4, [pid 5900] set_robust_list(0x7fe973f6a9e0, 24 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5894] fallocate(-1, 0, 0, 1048820 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5900] <... set_robust_list resumed>) = 0 [pid 5894] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] getdents64(4, [pid 5900] memfd_create("syzkaller", 0 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5900] <... memfd_create resumed>) = 3 [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] getdents64(4, [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5900] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./84/bus") = 0 [pid 5015] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5894] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] lstat("./84/binderfs", [pid 5894] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] unlink("./84/binderfs" [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] getdents64(3, [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5893] <... futex resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5894] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5893] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] close(3 [pid 5894] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5015] <... close resumed>) = 0 [pid 5894] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] rmdir("./84" [pid 5894] <... futex resumed>) = 1 [pid 5893] <... futex resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5894] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5893] exit_group(0 [pid 5015] mkdir("./85", 0777 [pid 5894] <... futex resumed>) = ? [pid 5893] <... exit_group resumed>) = ? [pid 5015] <... mkdir resumed>) = 0 [pid 5894] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5893] +++ exited with 0 +++ [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 5015] <... close resumed>) = 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... restart_syscall resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5901 [pid 5014] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5901 attached ) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./85/bus", [pid 5901] set_robust_list(0x5555561c25e0, 24 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5901] <... set_robust_list resumed>) = 0 [pid 5014] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] chdir("./85" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] <... chdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... openat resumed>) = 4 [pid 5901] <... prctl resumed>) = 0 [pid 5014] fstat(4, [pid 5901] setpgid(0, 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5901] <... setpgid resumed>) = 0 [pid 5014] getdents64(4, [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5901] <... openat resumed>) = 3 [pid 5014] getdents64(4, [pid 5901] write(3, "1000", 4 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5901] <... write resumed>) = 4 [pid 5014] close(4 [pid 5901] close(3 [pid 5014] <... close resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 5014] rmdir("./85/bus" [pid 5901] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... rmdir resumed>) = 0 [pid 5901] <... symlink resumed>) = 0 [pid 5014] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5901] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] <... futex resumed>) = 0 [pid 5014] lstat("./85/binderfs", [pid 5901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5901] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] unlink("./85/binderfs" [pid 5901] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] <... unlink resumed>) = 0 [pid 5901] <... mprotect resumed>) = 0 [pid 5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] getdents64(3, [pid 5901] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./85") = 0 [pid 5014] mkdir("./86", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5901] <... clone resumed>, parent_tid=[5902], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5902 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] close(3 [pid 5901] <... futex resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5903 ./strace-static-x86_64: Process 5903 attached [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5902 attached [pid 5903] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5902] set_robust_list(0x7fe973f6a9e0, 24 [pid 5903] chdir("./86" [pid 5902] <... set_robust_list resumed>) = 0 [pid 5903] <... chdir resumed>) = 0 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] memfd_create("syzkaller", 0 [pid 5903] setpgid(0, 0 [pid 5902] <... memfd_create resumed>) = 3 [pid 5903] <... setpgid resumed>) = 0 [pid 5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5903] <... openat resumed>) = 3 [pid 5903] write(3, "1000", 4) = 4 [pid 5903] close(3) = 0 [pid 5903] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5903] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5903] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5904], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5904 [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x7fe973f6a9e0, 24 [pid 5896] <... write resumed>) = 16777216 [pid 5904] <... set_robust_list resumed>) = 0 [pid 5904] memfd_create("syzkaller", 0) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5896] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5896] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5896] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5896] close(3) = 0 [pid 5896] mkdir("./bus", 0777) = 0 [pid 5896] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 225.745129][ T5896] loop2: detected capacity change from 0 to 32768 [ 225.777208][ T5896] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5896) [pid 5896] ioctl(4, LOOP_CLR_FD [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5896] <... ioctl resumed>) = 0 [pid 5898] <... write resumed>) = 16777216 [pid 5896] close(4) = 0 [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5898] munmap(0x7fe96bb4a000, 16777216 [pid 5896] creat("./bus", 000 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5896] open("./bus", O_RDONLY [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... open resumed>) = 3 [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5896] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5896] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5898] <... munmap resumed>) = 0 [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5898] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] <... openat resumed>) = 4 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5898] ioctl(4, LOOP_SET_FD, 3 [pid 5896] fallocate(-1, 0, 0, 1048820 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5896] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5896] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5898] <... ioctl resumed>) = 0 [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] close(3 [pid 5896] <... futex resumed>) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5898] <... close resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] mkdir("./bus", 0777 [pid 5896] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5895] <... futex resumed>) = 0 [pid 5898] <... mkdir resumed>) = 0 [pid 5896] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5895] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5896] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5896] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5895] <... futex resumed>) = 0 [pid 5896] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5895] exit_group(0 [pid 5896] <... futex resumed>) = ? [pid 5895] <... exit_group resumed>) = ? [pid 5896] +++ exited with 0 +++ [pid 5895] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=47 /* 0.47 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5898] <... mount resumed>) = -1 EEXIST (File exists) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5898] ioctl(4, LOOP_CLR_FD [pid 5012] lstat("./83/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./83/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./83/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./83/bus") = 0 [pid 5012] umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./83/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./83") = 0 [pid 5012] mkdir("./84", 0777) = 0 [ 226.256629][ T5898] loop3: detected capacity change from 0 to 32768 [ 226.272716][ T5898] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5898) [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5905 ./strace-static-x86_64: Process 5905 attached [pid 5905] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5905] chdir("./84") = 0 [pid 5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5905] setpgid(0, 0) = 0 [pid 5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5905] write(3, "1000", 4) = 4 [pid 5905] close(3) = 0 [pid 5905] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5905] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5905] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5906], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5906 [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5900] <... write resumed>) = 16777216 [pid 5900] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5900] close(3) = 0 [pid 5900] mkdir("./bus", 0777) = 0 [pid 5900] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 226.497794][ T5900] loop1: detected capacity change from 0 to 32768 [ 226.519809][ T5900] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5900) [pid 5900] ioctl(4, LOOP_CLR_FD [pid 5902] <... write resumed>) = 16777216 [pid 5902] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5902] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5902] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5902] close(3) = 0 [pid 5902] mkdir("./bus", 0777) = 0 [pid 5902] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5898] <... ioctl resumed>) = 0 [pid 5898] close(4) = 0 [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5898] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] creat("./bus", 000 [pid 5897] <... futex resumed>) = 0 [pid 5898] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5902] <... mount resumed>) = -1 EEXIST (File exists) [pid 5898] <... futex resumed>) = 0 [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] ioctl(4, LOOP_CLR_FD [pid 5898] open("./bus", O_RDONLY [pid 5897] <... futex resumed>) = 0 [pid 5898] <... open resumed>) = 3 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... write resumed>) = 16777216 [pid 5898] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [ 226.654229][ T5902] loop5: detected capacity change from 0 to 32768 [ 226.678739][ T5902] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5902) [pid 5898] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=34000000} [pid 5898] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5898] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] <... futex resumed>) = 0 [pid 5898] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] munmap(0x7fe96bb4a000, 16777216 [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] fallocate(-1, 0, 0, 1048820 [pid 5897] <... futex resumed>) = 0 [pid 5898] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] <... futex resumed>) = 0 [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5897] <... futex resumed>) = 0 [pid 5898] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5898] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5897] <... futex resumed>) = 0 [pid 5898] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5897] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5898] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5898] <... futex resumed>) = 0 [pid 5897] exit_group(0) = ? [pid 5904] <... munmap resumed>) = 0 [pid 5898] +++ exited with 0 +++ [pid 5897] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] getdents64(3, [pid 5904] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5013] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./85/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./85/bus") = 0 [pid 5013] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./85/binderfs", [pid 5904] <... ioctl resumed>) = 0 [pid 5904] close(3 [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5904] <... close resumed>) = 0 [pid 5013] unlink("./85/binderfs" [pid 5904] mkdir("./bus", 0777) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5904] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] getdents64(3, [pid 5900] <... ioctl resumed>) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5900] close(4 [pid 5013] close(3 [pid 5900] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] rmdir("./85" [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] creat("./bus", 000 [pid 5013] mkdir("./86", 0777 [pid 5899] <... futex resumed>) = 0 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... mkdir resumed>) = 0 [pid 5900] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... openat resumed>) = 3 [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... futex resumed>) = 0 [pid 5013] close(3 [pid 5900] open("./bus", O_RDONLY [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... close resumed>) = 0 [pid 5900] <... open resumed>) = 3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5907 [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... futex resumed>) = 0 [pid 5900] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] <... open resumed>) = -1 EISDIR (Is a directory) ./strace-static-x86_64: Process 5907 attached [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] set_robust_list(0x5555561c25e0, 24 [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5907] <... set_robust_list resumed>) = 0 [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 226.819360][ T5904] loop4: detected capacity change from 0 to 32768 [ 226.849819][ T5904] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5904) [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] chdir("./86" [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... futex resumed>) = 0 [pid 5907] <... chdir resumed>) = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5900] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5907] setpgid(0, 0 [pid 5900] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5907] <... setpgid resumed>) = 0 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5907] <... openat resumed>) = 3 [pid 5904] <... mount resumed>) = -1 EEXIST (File exists) [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] write(3, "1000", 4 [pid 5904] ioctl(4, LOOP_CLR_FD [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... futex resumed>) = 0 [pid 5907] <... write resumed>) = 4 [pid 5900] fallocate(-1, 0, 0, 1048820 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5907] close(3 [pid 5900] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5907] <... close resumed>) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] <... futex resumed>) = 0 [pid 5900] <... futex resumed>) = 1 [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] <... futex resumed>) = 0 [pid 5907] <... mmap resumed>) = 0x7fe973f4a000 [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5900] <... futex resumed>) = 0 [pid 5899] <... futex resumed>) = 1 [pid 5907] <... mprotect resumed>) = 0 [pid 5900] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5907] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5900] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5907] <... clone resumed>, parent_tid=[5908], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5908 [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5908 attached [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] set_robust_list(0x7fe973f6a9e0, 24 [pid 5907] <... futex resumed>) = 0 [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5899] <... futex resumed>) = 0 [pid 5908] <... set_robust_list resumed>) = 0 [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5900] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5899] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] memfd_create("syzkaller", 0 [pid 5900] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5908] <... memfd_create resumed>) = 3 [pid 5900] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5900] <... futex resumed>) = 1 [pid 5899] <... futex resumed>) = 0 [pid 5908] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5900] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5899] exit_group(0) = ? [pid 5900] <... futex resumed>) = ? [pid 5900] +++ exited with 0 +++ [pid 5899] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=36 /* 0.36 s */} --- [pid 5011] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./86/bus") = 0 [pid 5011] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./86/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./86" [pid 5902] <... ioctl resumed>) = 0 [pid 5902] close(4 [pid 5011] <... rmdir resumed>) = 0 [pid 5902] <... close resumed>) = 0 [pid 5011] mkdir("./87", 0777 [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5902] creat("./bus", 000 [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 3 [pid 5902] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5902] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5011] close(3 [pid 5902] open("./bus", O_RDONLY [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... close resumed>) = 0 [pid 5902] <... open resumed>) = 3 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5909 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5902] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5902] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5909 attached ) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5909] set_robust_list(0x5555561c25e0, 24 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... set_robust_list resumed>) = 0 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5909] chdir("./87" [pid 5902] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... chdir resumed>) = 0 [pid 5902] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... prctl resumed>) = 0 [pid 5902] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5909] setpgid(0, 0 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... setpgid resumed>) = 0 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5902] fallocate(-1, 0, 0, 1048820 [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... openat resumed>) = 3 [pid 5902] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5909] write(3, "1000", 4 [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... write resumed>) = 4 [pid 5902] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5909] close(3 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... close resumed>) = 0 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5909] symlink("/dev/binderfs", "./binderfs" [pid 5902] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... symlink resumed>) = 0 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5909] <... futex resumed>) = 0 [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5902] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5909] <... mmap resumed>) = 0x7fe973f4a000 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5909] <... mprotect resumed>) = 0 [pid 5902] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5901] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5902] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5902] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... clone resumed>, parent_tid=[5910], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5910 [pid 5902] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5910 attached [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] exit_group(0 [pid 5909] <... futex resumed>) = 0 [pid 5901] <... exit_group resumed>) = ? [pid 5902] <... futex resumed>) = ? [pid 5910] set_robust_list(0x7fe973f6a9e0, 24 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5910] <... set_robust_list resumed>) = 0 [pid 5902] +++ exited with 0 +++ [pid 5901] +++ exited with 0 +++ [pid 5910] memfd_create("syzkaller", 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5910] <... memfd_create resumed>) = 3 [pid 5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5015] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./85/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./85/bus") = 0 [pid 5015] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./85/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./85") = 0 [pid 5015] mkdir("./86", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5911 ./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5911] chdir("./86") = 0 [pid 5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5911] setpgid(0, 0) = 0 [pid 5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5911] write(3, "1000", 4) = 4 [pid 5911] close(3) = 0 [pid 5911] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5911] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5911] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5911] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5912], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5912 [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5912 attached [pid 5912] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5912] memfd_create("syzkaller", 0) = 3 [pid 5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5904] <... ioctl resumed>) = 0 [pid 5904] close(4) = 0 [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] creat("./bus", 000 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] open("./bus", O_RDONLY [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... open resumed>) = 3 [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] fallocate(-1, 0, 0, 1048820 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5904] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5903] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5904] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5904] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] exit_group(0 [pid 5904] <... futex resumed>) = ? [pid 5903] <... exit_group resumed>) = ? [pid 5904] +++ exited with 0 +++ [pid 5903] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=38 /* 0.38 s */} --- [pid 5014] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./86/bus") = 0 [pid 5014] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./86/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./86") = 0 [pid 5014] mkdir("./87", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5906] <... write resumed>) = 16777216 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5913 ./strace-static-x86_64: Process 5913 attached [pid 5913] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5913] chdir("./87" [pid 5906] munmap(0x7fe96bb4a000, 16777216 [pid 5913] <... chdir resumed>) = 0 [pid 5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5913] setpgid(0, 0) = 0 [pid 5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5913] write(3, "1000", 4) = 4 [pid 5913] close(3) = 0 [pid 5913] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5913] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5913] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5914], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5914 [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5906] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5914 attached [pid 5906] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5914] set_robust_list(0x7fe973f6a9e0, 24 [pid 5906] <... openat resumed>) = 4 [pid 5914] <... set_robust_list resumed>) = 0 [pid 5906] ioctl(4, LOOP_SET_FD, 3 [pid 5914] memfd_create("syzkaller", 0) = 3 [pid 5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5906] <... ioctl resumed>) = 0 [pid 5906] close(3) = 0 [pid 5906] mkdir("./bus", 0777) = 0 [pid 5906] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 227.599956][ T5906] loop2: detected capacity change from 0 to 32768 [ 227.622729][ T5906] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5906) [pid 5906] ioctl(4, LOOP_CLR_FD [pid 5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5908] <... write resumed>) = 16777216 [pid 5908] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5908] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5908] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5908] close(3) = 0 [pid 5908] mkdir("./bus", 0777) = 0 [pid 5908] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 227.896479][ T5908] loop3: detected capacity change from 0 to 32768 [ 227.910960][ T5908] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5908) [pid 5908] ioctl(4, LOOP_CLR_FD [pid 5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5906] <... ioctl resumed>) = 0 [pid 5906] close(4) = 0 [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] creat("./bus", 000 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... write resumed>) = 16777216 [pid 5906] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] munmap(0x7fe96bb4a000, 16777216 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] open("./bus", O_RDONLY [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... open resumed>) = 3 [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5910] <... munmap resumed>) = 0 [pid 5906] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5906] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5910] <... openat resumed>) = 4 [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] ioctl(4, LOOP_SET_FD, 3 [pid 5906] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5910] <... ioctl resumed>) = 0 [pid 5906] fallocate(-1, 0, 0, 1048820 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] close(3 [pid 5906] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5910] <... close resumed>) = 0 [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] mkdir("./bus", 0777 [pid 5906] <... futex resumed>) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5910] <... mkdir resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5905] <... futex resumed>) = 0 [pid 5906] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5905] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5906] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5905] <... futex resumed>) = 0 [pid 5906] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5905] exit_group(0 [pid 5906] <... futex resumed>) = ? [pid 5905] <... exit_group resumed>) = ? [pid 5906] +++ exited with 0 +++ [pid 5905] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=43 /* 0.43 s */} --- [pid 5012] umount2("./84", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5910] <... mount resumed>) = -1 EEXIST (File exists) [pid 5012] fstat(3, [pid 5910] ioctl(4, LOOP_CLR_FD [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [ 228.121900][ T5910] loop1: detected capacity change from 0 to 32768 [ 228.157960][ T5910] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5910) [pid 5012] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./84/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./84/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./84/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./84/bus") = 0 [pid 5012] umount2("./84/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./84/binderfs", [pid 5908] <... ioctl resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5908] close(4 [pid 5012] unlink("./84/binderfs" [pid 5908] <... close resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./84") = 0 [pid 5012] mkdir("./85", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5915 ./strace-static-x86_64: Process 5915 attached [pid 5915] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5915] chdir("./85") = 0 [pid 5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5915] setpgid(0, 0) = 0 [pid 5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] write(3, "1000", 4 [pid 5908] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5915] <... write resumed>) = 4 [pid 5908] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] close(3 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5915] <... close resumed>) = 0 [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] creat("./bus", 000 [pid 5915] symlink("/dev/binderfs", "./binderfs" [pid 5908] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5915] <... symlink resumed>) = 0 [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = 0 [pid 5908] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5915] <... mmap resumed>) = 0x7fe973f4a000 [pid 5908] open("./bus", O_RDONLY [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5915] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5908] <... open resumed>) = 3 [pid 5915] <... mprotect resumed>) = 0 [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5908] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5908] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5915] <... clone resumed>, parent_tid=[5916], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5916 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5915] <... futex resumed>) = 0 [pid 5908] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5916 attached ) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5916] set_robust_list(0x7fe973f6a9e0, 24 [pid 5908] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... set_robust_list resumed>) = 0 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5916] memfd_create("syzkaller", 0 [pid 5908] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... memfd_create resumed>) = 3 [pid 5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5908] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5916] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5908] fallocate(-1, 0, 0, 1048820 [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5908] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5908] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5908] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5908] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5907] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5908] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5908] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5907] exit_group(0) = ? [pid 5908] +++ exited with 0 +++ [pid 5907] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=36 /* 0.36 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5912] <... write resumed>) = 16777216 [pid 5013] getdents64(4, [pid 5912] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./86/bus") = 0 [pid 5013] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./86/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5912] <... munmap resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5013] rmdir("./86" [pid 5912] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./87", 0777 [pid 5912] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5917 ./strace-static-x86_64: Process 5917 attached [pid 5917] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5917] chdir("./87") = 0 [pid 5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5917] setpgid(0, 0) = 0 [pid 5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5917] write(3, "1000", 4) = 4 [pid 5917] close(3 [pid 5912] <... ioctl resumed>) = 0 [pid 5912] close(3 [pid 5917] <... close resumed>) = 0 [pid 5917] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5912] <... close resumed>) = 0 [pid 5917] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5912] mkdir("./bus", 0777 [pid 5917] <... mmap resumed>) = 0x7fe973f4a000 [pid 5912] <... mkdir resumed>) = 0 [pid 5917] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5912] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5917] <... mprotect resumed>) = 0 [pid 5917] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5918], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5918 [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5918 attached [pid 5918] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5918] memfd_create("syzkaller", 0) = 3 [pid 5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5912] <... mount resumed>) = -1 EEXIST (File exists) [ 228.395793][ T5912] loop5: detected capacity change from 0 to 32768 [ 228.446582][ T5912] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5912) [pid 5912] ioctl(4, LOOP_CLR_FD [pid 5910] <... ioctl resumed>) = 0 [pid 5910] close(4) = 0 [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5910] creat("./bus", 000 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] <... futex resumed>) = 0 [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = 0 [pid 5909] <... futex resumed>) = 1 [pid 5910] open("./bus", O_RDONLY [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... open resumed>) = 3 [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5910] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... write resumed>) = 16777216 [pid 5910] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5914] munmap(0x7fe96bb4a000, 16777216 [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... munmap resumed>) = 0 [pid 5910] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5914] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... openat resumed>) = 4 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5914] ioctl(4, LOOP_SET_FD, 3 [pid 5910] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... ioctl resumed>) = 0 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5914] close(3 [pid 5910] fallocate(-1, 0, 0, 1048820 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... close resumed>) = 0 [pid 5910] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5914] mkdir("./bus", 0777 [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... mkdir resumed>) = 0 [pid 5910] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5914] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5910] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5914] <... mount resumed>) = -1 EEXIST (File exists) [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] ioctl(4, LOOP_CLR_FD [pid 5910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = 0 [pid 5910] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5909] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5910] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5910] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5909] <... futex resumed>) = 0 [pid 5910] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] exit_group(0 [pid 5910] <... futex resumed>) = ? [pid 5909] <... exit_group resumed>) = ? [pid 5910] +++ exited with 0 +++ [pid 5909] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=35 /* 0.35 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 228.641021][ T5914] loop4: detected capacity change from 0 to 32768 [ 228.669949][ T5914] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5914) [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./87/bus") = 0 [pid 5011] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./87/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./87") = 0 [pid 5011] mkdir("./88", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5919 ./strace-static-x86_64: Process 5919 attached [pid 5919] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5919] chdir("./88") = 0 [pid 5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5919] setpgid(0, 0) = 0 [pid 5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5919] write(3, "1000", 4) = 4 [pid 5919] close(3) = 0 [pid 5919] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5919] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5919] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5919] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5920], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5920 [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5920 attached [pid 5920] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5920] memfd_create("syzkaller", 0) = 3 [pid 5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5912] <... ioctl resumed>) = 0 [pid 5912] close(4) = 0 [pid 5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] creat("./bus", 000 [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5912] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] open("./bus", O_RDONLY [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... open resumed>) = 3 [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] fallocate(-1, 0, 0, 1048820 [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5911] <... futex resumed>) = 0 [pid 5912] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5911] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5912] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5912] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5911] <... futex resumed>) = 0 [pid 5912] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5911] exit_group(0 [pid 5912] <... futex resumed>) = ? [pid 5911] <... exit_group resumed>) = ? [pid 5912] +++ exited with 0 +++ [pid 5911] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5015] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./86/bus") = 0 [pid 5015] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./86/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./86") = 0 [pid 5015] mkdir("./87", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5921 ./strace-static-x86_64: Process 5921 attached [pid 5921] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5921] chdir("./87") = 0 [pid 5921] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5914] <... ioctl resumed>) = 0 [pid 5921] <... prctl resumed>) = 0 [pid 5921] setpgid(0, 0) = 0 [pid 5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5921] write(3, "1000", 4) = 4 [pid 5921] close(3) = 0 [pid 5921] symlink("/dev/binderfs", "./binderfs" [pid 5914] close(4 [pid 5921] <... symlink resumed>) = 0 [pid 5914] <... close resumed>) = 0 [pid 5921] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5921] <... futex resumed>) = 0 [pid 5914] <... futex resumed>) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5921] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5914] creat("./bus", 000 [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5921] <... mmap resumed>) = 0x7fe973f4a000 [pid 5914] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5913] <... futex resumed>) = 0 [pid 5921] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5921] <... mprotect resumed>) = 0 [pid 5914] <... futex resumed>) = 0 [pid 5913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5921] <... clone resumed>, parent_tid=[5922], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5922 [pid 5914] open("./bus", O_RDONLY [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... open resumed>) = 3 [pid 5921] <... futex resumed>) = 0 [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5914] <... futex resumed>) = 1 [pid 5913] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5922 attached [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] set_robust_list(0x7fe973f6a9e0, 24 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5922] <... set_robust_list resumed>) = 0 [pid 5914] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] memfd_create("syzkaller", 0 [pid 5914] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5922] <... memfd_create resumed>) = 3 [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5914] <... futex resumed>) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5922] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5914] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5914] fallocate(-1, 0, 0, 1048820 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5914] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5913] <... futex resumed>) = 0 [pid 5914] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5913] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5914] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5914] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5913] <... futex resumed>) = 0 [pid 5914] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5913] exit_group(0 [pid 5914] <... futex resumed>) = ? [pid 5913] <... exit_group resumed>) = ? [pid 5914] +++ exited with 0 +++ [pid 5913] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=36 /* 0.36 s */} --- [pid 5014] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5916] <... write resumed>) = 16777216 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./87/bus") = 0 [pid 5014] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./87/binderfs", [pid 5916] munmap(0x7fe96bb4a000, 16777216 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./87/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./87") = 0 [pid 5014] mkdir("./88", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5916] <... munmap resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5923 ./strace-static-x86_64: Process 5923 attached [pid 5923] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5916] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5923] chdir("./88" [pid 5916] ioctl(4, LOOP_SET_FD, 3 [pid 5923] <... chdir resumed>) = 0 [pid 5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5923] setpgid(0, 0 [pid 5916] <... ioctl resumed>) = 0 [pid 5923] <... setpgid resumed>) = 0 [pid 5916] close(3 [pid 5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5916] <... close resumed>) = 0 [pid 5923] <... openat resumed>) = 3 [pid 5916] mkdir("./bus", 0777 [pid 5923] write(3, "1000", 4) = 4 [pid 5916] <... mkdir resumed>) = 0 [pid 5923] close(3 [pid 5916] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5923] <... close resumed>) = 0 [pid 5923] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5923] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5923] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5924], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5924 [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5924 attached [pid 5924] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5924] memfd_create("syzkaller", 0) = 3 [pid 5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5916] <... mount resumed>) = -1 EEXIST (File exists) [ 229.270055][ T5916] loop2: detected capacity change from 0 to 32768 [ 229.289302][ T5916] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5916) [pid 5916] ioctl(4, LOOP_CLR_FD [pid 5918] <... write resumed>) = 16777216 [pid 5918] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5918] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5918] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5918] close(3) = 0 [pid 5918] mkdir("./bus", 0777) = 0 [pid 5918] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5918] <... mount resumed>) = -1 EEXIST (File exists) [ 229.548154][ T5918] loop3: detected capacity change from 0 to 32768 [ 229.563467][ T5918] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5918) [pid 5918] ioctl(4, LOOP_CLR_FD [pid 5916] <... ioctl resumed>) = 0 [pid 5916] close(4) = 0 [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = 0 [pid 5915] <... futex resumed>) = 1 [pid 5916] creat("./bus", 000 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5916] open("./bus", O_RDONLY [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... open resumed>) = 3 [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5916] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5916] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5916] fallocate(-1, 0, 0, 1048820 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5915] <... futex resumed>) = 0 [pid 5916] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5920] <... write resumed>) = 16777216 [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] munmap(0x7fe96bb4a000, 16777216 [pid 5916] <... futex resumed>) = 1 [pid 5915] <... futex resumed>) = 0 [pid 5915] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5915] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5916] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5916] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5916] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5915] <... futex resumed>) = 0 [pid 5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5915] exit_group(0 [pid 5916] <... futex resumed>) = ? [pid 5915] <... exit_group resumed>) = ? [pid 5920] <... munmap resumed>) = 0 [pid 5916] +++ exited with 0 +++ [pid 5915] +++ exited with 0 +++ [pid 5920] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5920] <... openat resumed>) = 4 [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5920] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... restart_syscall resumed>) = 0 [pid 5012] umount2("./85", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, [pid 5920] <... ioctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5920] close(3 [pid 5012] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5920] <... close resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5920] mkdir("./bus", 0777 [pid 5012] lstat("./85/bus", [pid 5920] <... mkdir resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5920] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5012] umount2("./85/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./85/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./85/bus") = 0 [pid 5012] umount2("./85/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./85/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./85" [pid 5920] <... mount resumed>) = -1 EEXIST (File exists) [pid 5012] <... rmdir resumed>) = 0 [pid 5920] ioctl(4, LOOP_CLR_FD [pid 5012] mkdir("./86", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5925 ./strace-static-x86_64: Process 5925 attached [pid 5925] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5925] chdir("./86") = 0 [pid 5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5925] setpgid(0, 0) = 0 [ 229.788733][ T5920] loop1: detected capacity change from 0 to 32768 [ 229.812419][ T5920] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5920) [pid 5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5925] write(3, "1000", 4) = 4 [pid 5925] close(3) = 0 [pid 5925] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5925] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5925] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5926], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5926 [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5926 attached [pid 5918] <... ioctl resumed>) = 0 [pid 5926] set_robust_list(0x7fe973f6a9e0, 24 [pid 5918] close(4 [pid 5926] <... set_robust_list resumed>) = 0 [pid 5918] <... close resumed>) = 0 [pid 5926] memfd_create("syzkaller", 0 [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... memfd_create resumed>) = 3 [pid 5918] <... futex resumed>) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] creat("./bus", 000 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] open("./bus", O_RDONLY [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... open resumed>) = 3 [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] fallocate(-1, 0, 0, 1048820 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5917] <... futex resumed>) = 0 [pid 5918] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5917] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5918] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5918] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5917] <... futex resumed>) = 0 [pid 5918] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5917] exit_group(0 [pid 5918] <... futex resumed>) = ? [pid 5917] <... exit_group resumed>) = ? [pid 5918] +++ exited with 0 +++ [pid 5917] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5013] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./87/bus") = 0 [pid 5013] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./87/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./87") = 0 [pid 5013] mkdir("./88", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5927 ./strace-static-x86_64: Process 5927 attached [pid 5927] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5927] chdir("./88") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0 [pid 5920] <... ioctl resumed>) = 0 [pid 5927] <... setpgid resumed>) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] close(4 [pid 5927] <... futex resumed>) = 0 [pid 5920] <... close resumed>) = 0 [pid 5927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... mmap resumed>) = 0x7fe973f4a000 [pid 5920] <... futex resumed>) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5927] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5920] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... mprotect resumed>) = 0 [pid 5920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5919] <... futex resumed>) = 0 [pid 5927] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5920] creat("./bus", 000 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5927] <... clone resumed>, parent_tid=[5928], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5928 [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... futex resumed>) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5927] <... futex resumed>) = 0 [pid 5920] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5928 attached [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5919] <... futex resumed>) = 0 [pid 5928] set_robust_list(0x7fe973f6a9e0, 24 [pid 5920] open("./bus", O_RDONLY [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... set_robust_list resumed>) = 0 [pid 5920] <... open resumed>) = 3 [pid 5928] memfd_create("syzkaller", 0 [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... memfd_create resumed>) = 3 [pid 5920] <... futex resumed>) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5920] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5919] <... futex resumed>) = 0 [pid 5920] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5920] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5919] <... futex resumed>) = 0 [pid 5920] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] fallocate(-1, 0, 0, 1048820 [pid 5919] <... futex resumed>) = 0 [pid 5920] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5919] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5920] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5920] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5919] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5920] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5919] <... futex resumed>) = 0 [pid 5919] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5920] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5919] <... futex resumed>) = 0 [pid 5924] <... write resumed>) = 16777216 [pid 5920] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5919] exit_group(0 [pid 5924] munmap(0x7fe96bb4a000, 16777216 [pid 5920] <... futex resumed>) = ? [pid 5919] <... exit_group resumed>) = ? [pid 5920] +++ exited with 0 +++ [pid 5919] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 5011] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, [pid 5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5924] <... munmap resumed>) = 0 [pid 5922] <... write resumed>) = 16777216 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./88/bus") = 0 [pid 5011] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./88/binderfs") = 0 [pid 5924] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5011] getdents64(3, [pid 5924] <... openat resumed>) = 4 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5924] ioctl(4, LOOP_SET_FD, 3 [pid 5011] close(3) = 0 [pid 5011] rmdir("./88") = 0 [pid 5011] mkdir("./89", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5929 [pid 5922] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 5929 attached [pid 5929] set_robust_list(0x5555561c25e0, 24 [pid 5924] <... ioctl resumed>) = 0 [pid 5929] <... set_robust_list resumed>) = 0 [pid 5924] close(3 [pid 5929] chdir("./89" [pid 5924] <... close resumed>) = 0 [pid 5929] <... chdir resumed>) = 0 [pid 5924] mkdir("./bus", 0777 [pid 5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5929] setpgid(0, 0 [pid 5924] <... mkdir resumed>) = 0 [pid 5929] <... setpgid resumed>) = 0 [pid 5924] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5929] write(3, "1000", 4) = 4 [pid 5929] close(3) = 0 [pid 5929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5929] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5929] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5930], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5930 [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... munmap resumed>) = 0 [pid 5929] <... futex resumed>) = 0 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 230.308308][ T5924] loop4: detected capacity change from 0 to 32768 [ 230.342218][ T5924] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5924) [pid 5922] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5930 attached [pid 5930] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5930] memfd_create("syzkaller", 0) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5924] <... mount resumed>) = -1 EEXIST (File exists) [pid 5924] ioctl(4, LOOP_CLR_FD [pid 5922] <... ioctl resumed>) = 0 [pid 5922] close(3) = 0 [pid 5922] mkdir("./bus", 0777) = 0 [ 230.354836][ T5922] loop5: detected capacity change from 0 to 32768 [pid 5922] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 230.387726][ T5922] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5922) [pid 5922] ioctl(4, LOOP_CLR_FD [pid 5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5924] <... ioctl resumed>) = 0 [pid 5924] close(4) = 0 [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5923] <... futex resumed>) = 0 [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] creat("./bus", 000 [pid 5923] <... futex resumed>) = 0 [pid 5924] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] open("./bus", O_RDONLY [pid 5923] <... futex resumed>) = 0 [pid 5924] <... open resumed>) = 3 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5924] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5923] <... futex resumed>) = 0 [pid 5924] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5923] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5922] <... ioctl resumed>) = 0 [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = 0 [pid 5923] <... futex resumed>) = 0 [pid 5922] close(4 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5922] <... close resumed>) = 0 [pid 5924] <... futex resumed>) = 1 [pid 5923] <... futex resumed>) = 0 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5923] <... futex resumed>) = 0 [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] fallocate(-1, 0, 0, 1048820 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5921] <... futex resumed>) = 0 [pid 5924] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] creat("./bus", 000 [pid 5924] <... futex resumed>) = 1 [pid 5923] <... futex resumed>) = 0 [pid 5924] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5923] <... futex resumed>) = 0 [pid 5922] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5924] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = 1 [pid 5923] <... futex resumed>) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5923] <... futex resumed>) = 0 [pid 5922] open("./bus", O_RDONLY [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5923] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5922] <... open resumed>) = 3 [pid 5926] <... write resumed>) = 16777216 [pid 5924] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] munmap(0x7fe96bb4a000, 16777216 [pid 5924] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = 1 [pid 5923] <... futex resumed>) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5924] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5923] exit_group(0 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5924] <... futex resumed>) = ? [pid 5923] <... exit_group resumed>) = ? [pid 5922] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] +++ exited with 0 +++ [pid 5923] +++ exited with 0 +++ [pid 5922] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5014] <... restart_syscall resumed>) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5926] <... munmap resumed>) = 0 [pid 5922] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5926] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5922] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5926] <... openat resumed>) = 4 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 5926] ioctl(4, LOOP_SET_FD, 3 [pid 5014] fstat(3, [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] close(4 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5922] fallocate(-1, 0, 0, 1048820 [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] rmdir("./88/bus" [pid 5922] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] <... rmdir resumed>) = 0 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5926] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] lstat("./88/binderfs", [pid 5926] close(3 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5922] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... close resumed>) = 0 [pid 5014] unlink("./88/binderfs" [pid 5926] mkdir("./bus", 0777 [pid 5922] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] <... unlink resumed>) = 0 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getdents64(3, [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] close(3 [pid 5922] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5921] <... futex resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5926] <... mkdir resumed>) = 0 [pid 5922] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5921] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] rmdir("./88" [pid 5926] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5922] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5922] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] mkdir("./89", 0777 [pid 5922] <... futex resumed>) = 1 [pid 5921] <... futex resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5922] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5921] exit_group(0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5922] <... futex resumed>) = ? [pid 5921] <... exit_group resumed>) = ? [pid 5014] close(3 [pid 5922] +++ exited with 0 +++ [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5931 ./strace-static-x86_64: Process 5931 attached [pid 5931] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5931] chdir("./89") = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5931] setpgid(0, 0) = 0 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5921] +++ exited with 0 +++ [pid 5931] <... openat resumed>) = 3 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=45 /* 0.45 s */} --- [pid 5931] write(3, "1000", 4) = 4 [pid 5931] close(3 [pid 5015] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] <... close resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 5015] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5931] <... symlink resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] fstat(3, [pid 5931] <... futex resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5015] getdents64(3, [pid 5931] <... mmap resumed>) = 0x7fe973f4a000 [pid 5926] <... mount resumed>) = -1 EEXIST (File exists) [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5931] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5926] ioctl(4, LOOP_CLR_FD [pid 5015] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] <... mprotect resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5015] lstat("./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5931] <... clone resumed>, parent_tid=[5932], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5932 [pid 5015] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5931] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5932 attached [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5015] <... openat resumed>) = 4 [pid 5932] set_robust_list(0x7fe973f6a9e0, 24 [pid 5015] fstat(4, [pid 5932] <... set_robust_list resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [ 230.872313][ T5926] loop2: detected capacity change from 0 to 32768 [ 230.894927][ T5926] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5926) [pid 5015] close(4 [pid 5932] memfd_create("syzkaller", 0 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./87/bus" [pid 5932] <... memfd_create resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./87/binderfs", [pid 5932] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./87/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./87") = 0 [pid 5015] mkdir("./88", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5933 ./strace-static-x86_64: Process 5933 attached [pid 5933] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5933] chdir("./88") = 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5933] setpgid(0, 0) = 0 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5933] write(3, "1000", 4) = 4 [pid 5933] close(3) = 0 [pid 5933] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5933] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5933] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5934], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5934 [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5934 attached [pid 5934] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5934] memfd_create("syzkaller", 0) = 3 [pid 5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5928] <... write resumed>) = 16777216 [pid 5928] munmap(0x7fe96bb4a000, 16777216 [pid 5926] <... ioctl resumed>) = 0 [pid 5928] <... munmap resumed>) = 0 [pid 5926] close(4 [pid 5928] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5928] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5926] <... close resumed>) = 0 [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] creat("./bus", 000 [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5926] open("./bus", O_RDONLY [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... open resumed>) = 3 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... write resumed>) = 16777216 [pid 5926] <... futex resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] close(3) = 0 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [pid 5926] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5928] mkdir("./bus", 0777 [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... mkdir resumed>) = 0 [pid 5926] <... futex resumed>) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5928] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5930] munmap(0x7fe96bb4a000, 16777216 [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [ 231.296242][ T5928] loop3: detected capacity change from 0 to 32768 [pid 5930] <... munmap resumed>) = 0 [pid 5926] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [pid 5926] fallocate(-1, 0, 0, 1048820 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5930] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5925] <... futex resumed>) = 0 [pid 5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5930] <... openat resumed>) = 4 [pid 5928] <... mount resumed>) = -1 EEXIST (File exists) [pid 5926] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 5926] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5926] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5925] <... futex resumed>) = 0 [pid 5926] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5925] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5926] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5928] ioctl(4, LOOP_CLR_FD [pid 5926] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5925] <... futex resumed>) = 0 [pid 5926] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5925] exit_group(0 [pid 5926] <... futex resumed>) = ? [pid 5925] <... exit_group resumed>) = ? [pid 5926] +++ exited with 0 +++ [pid 5925] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5930] <... ioctl resumed>) = 0 [pid 5012] umount2("./86", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5930] close(3 [pid 5012] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5930] <... close resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5930] mkdir("./bus", 0777 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5930] <... mkdir resumed>) = 0 [ 231.346814][ T5928] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5928) [ 231.381381][ T5930] loop1: detected capacity change from 0 to 32768 [pid 5012] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5930] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./86/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./86/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./86/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./86/bus") = 0 [pid 5012] umount2("./86/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./86/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./86") = 0 [pid 5012] mkdir("./87", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5935 ./strace-static-x86_64: Process 5935 attached [pid 5935] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5935] chdir("./87") = 0 [pid 5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5935] setpgid(0, 0) = 0 [pid 5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5935] write(3, "1000", 4) = 4 [pid 5935] close(3) = 0 [pid 5935] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5930] <... mount resumed>) = -1 EEXIST (File exists) [ 231.420859][ T5930] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5930) [pid 5935] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] ioctl(4, LOOP_CLR_FD [pid 5935] <... futex resumed>) = 0 [pid 5935] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5935] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5935] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5936], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5936 [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5936 attached [pid 5936] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5936] memfd_create("syzkaller", 0) = 3 [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5928] <... ioctl resumed>) = 0 [pid 5928] close(4) = 0 [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] creat("./bus", 000 [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... futex resumed>) = 0 [pid 5927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] open("./bus", O_RDONLY [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... open resumed>) = 3 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... futex resumed>) = 0 [pid 5927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5928] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5928] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5928] fallocate(-1, 0, 0, 1048820 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5928] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5928] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5927] <... futex resumed>) = 0 [pid 5928] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5927] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5928] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5928] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5928] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] exit_group(0 [pid 5928] <... futex resumed>) = ? [pid 5927] <... exit_group resumed>) = ? [pid 5928] +++ exited with 0 +++ [pid 5927] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=41 /* 0.41 s */} --- [pid 5013] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./88/bus") = 0 [pid 5013] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./88/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./88") = 0 [pid 5013] mkdir("./89", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5937 ./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5937] chdir("./89") = 0 [pid 5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5937] setpgid(0, 0 [pid 5930] <... ioctl resumed>) = 0 [pid 5937] <... setpgid resumed>) = 0 [pid 5930] close(4 [pid 5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5930] <... close resumed>) = 0 [pid 5937] <... openat resumed>) = 3 [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] write(3, "1000", 4 [pid 5930] <... futex resumed>) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5937] <... write resumed>) = 4 [pid 5930] creat("./bus", 000 [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] close(3 [pid 5930] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5929] <... futex resumed>) = 0 [pid 5937] <... close resumed>) = 0 [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5937] symlink("/dev/binderfs", "./binderfs" [pid 5930] <... futex resumed>) = 0 [pid 5929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... symlink resumed>) = 0 [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... futex resumed>) = 0 [pid 5929] <... futex resumed>) = 1 [pid 5930] <... futex resumed>) = 0 [pid 5930] open("./bus", O_RDONLY [pid 5937] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5930] <... open resumed>) = 3 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... mmap resumed>) = 0x7fe973f4a000 [pid 5930] <... futex resumed>) = 0 [pid 5929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... mprotect resumed>) = 0 [pid 5930] <... futex resumed>) = 0 [pid 5929] <... futex resumed>) = 1 [pid 5937] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5930] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5937] <... clone resumed>, parent_tid=[5938], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5938 [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] <... futex resumed>) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5937] <... futex resumed>) = 0 [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5929] <... futex resumed>) = 0 [pid 5930] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5929] <... futex resumed>) = 0 [pid 5930] fallocate(-1, 0, 0, 1048820 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5929] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5938 attached [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] set_robust_list(0x7fe973f6a9e0, 24 [pid 5930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5929] <... futex resumed>) = 0 [pid 5938] <... set_robust_list resumed>) = 0 [pid 5930] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] memfd_create("syzkaller", 0 [pid 5930] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5938] <... memfd_create resumed>) = 3 [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5930] <... futex resumed>) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5938] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5930] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5929] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5929] <... futex resumed>) = 0 [pid 5929] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5930] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5929] <... futex resumed>) = 0 [pid 5929] exit_group(0) = ? [pid 5930] +++ exited with 0 +++ [pid 5929] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=35 /* 0.35 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, [pid 5932] <... write resumed>) = 16777216 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] munmap(0x7fe96bb4a000, 16777216 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, [pid 5932] <... munmap resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./89/bus" [pid 5932] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5011] <... rmdir resumed>) = 0 [pid 5932] <... openat resumed>) = 4 [pid 5011] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5932] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./89/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./89") = 0 [pid 5011] mkdir("./90", 0777) = 0 [pid 5932] <... ioctl resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5939 ./strace-static-x86_64: Process 5939 attached [pid 5939] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5939] chdir("./90") = 0 [pid 5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5939] setpgid(0, 0) = 0 [pid 5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5932] close(3 [pid 5939] write(3, "1000", 4 [pid 5932] <... close resumed>) = 0 [pid 5939] <... write resumed>) = 4 [pid 5932] mkdir("./bus", 0777 [pid 5939] close(3) = 0 [pid 5939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5932] <... mkdir resumed>) = 0 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5939] <... futex resumed>) = 0 [pid 5939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5939] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5939] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5940], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5940 [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5940 attached [pid 5940] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5940] memfd_create("syzkaller", 0) = 3 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5934] <... write resumed>) = 16777216 [pid 5934] munmap(0x7fe96bb4a000, 16777216 [pid 5932] <... mount resumed>) = -1 EEXIST (File exists) [ 231.998078][ T5932] loop4: detected capacity change from 0 to 32768 [ 232.035945][ T5932] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5932) [pid 5932] ioctl(4, LOOP_CLR_FD [pid 5934] <... munmap resumed>) = 0 [pid 5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5934] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5934] close(3) = 0 [pid 5934] mkdir("./bus", 0777) = 0 [ 232.088539][ T5934] loop5: detected capacity change from 0 to 32768 [pid 5934] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 232.131056][ T5934] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5934) [pid 5934] ioctl(4, LOOP_CLR_FD [pid 5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5932] <... ioctl resumed>) = 0 [pid 5932] close(4) = 0 [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] creat("./bus", 000 [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] open("./bus", O_RDONLY [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... open resumed>) = 3 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5931] <... futex resumed>) = 0 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = 0 [pid 5932] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = 0 [pid 5932] fallocate(-1, 0, 0, 1048820 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = 0 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5932] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5931] <... futex resumed>) = 0 [pid 5932] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5931] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5932] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5931] <... futex resumed>) = 0 [pid 5932] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5931] exit_group(0 [pid 5932] <... futex resumed>) = ? [pid 5931] <... exit_group resumed>) = ? [pid 5932] +++ exited with 0 +++ [pid 5931] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5014] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5934] <... ioctl resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5934] close(4 [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5934] <... close resumed>) = 0 [pid 5014] getdents64(4, [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] rmdir("./89/bus" [pid 5934] creat("./bus", 000 [pid 5933] <... futex resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5934] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./89/binderfs", [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./89/binderfs" [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... unlink resumed>) = 0 [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5014] getdents64(3, [pid 5934] open("./bus", O_RDONLY [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5934] <... open resumed>) = 3 [pid 5014] close(3 [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... close resumed>) = 0 [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5014] rmdir("./89" [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... rmdir resumed>) = 0 [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5014] mkdir("./90", 0777 [pid 5934] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... mkdir resumed>) = 0 [pid 5934] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5014] close(3 [pid 5934] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... close resumed>) = 0 [pid 5934] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5941 ./strace-static-x86_64: Process 5941 attached [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] set_robust_list(0x5555561c25e0, 24 [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5941] <... set_robust_list resumed>) = 0 [pid 5934] fallocate(-1, 0, 0, 1048820 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] chdir("./90" [pid 5934] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5941] <... chdir resumed>) = 0 [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5941] <... prctl resumed>) = 0 [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] setpgid(0, 0 [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5941] <... setpgid resumed>) = 0 [pid 5934] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5934] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5941] <... openat resumed>) = 3 [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] write(3, "1000", 4 [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5941] <... write resumed>) = 4 [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] close(3 [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5941] <... close resumed>) = 0 [pid 5934] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5933] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5941] symlink("/dev/binderfs", "./binderfs" [pid 5934] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5941] <... symlink resumed>) = 0 [pid 5936] <... write resumed>) = 16777216 [pid 5934] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5941] <... futex resumed>) = 0 [pid 5936] munmap(0x7fe96bb4a000, 16777216 [pid 5934] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] exit_group(0 [pid 5941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5934] <... futex resumed>) = ? [pid 5933] <... exit_group resumed>) = ? [pid 5941] <... mmap resumed>) = 0x7fe973f4a000 [pid 5934] +++ exited with 0 +++ [pid 5933] +++ exited with 0 +++ [pid 5941] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=41 /* 0.41 s */} --- [pid 5941] <... mprotect resumed>) = 0 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5941] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5015] <... restart_syscall resumed>) = 0 [pid 5941] <... clone resumed>, parent_tid=[5942], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5942 [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5941] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5015] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5942 attached ) = -1 EINVAL (Invalid argument) [pid 5942] set_robust_list(0x7fe973f6a9e0, 24 [pid 5015] lstat("./88/bus", [pid 5942] <... set_robust_list resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5942] memfd_create("syzkaller", 0 [pid 5015] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5942] <... memfd_create resumed>) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5942] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5015] <... openat resumed>) = 4 [pid 5936] <... munmap resumed>) = 0 [pid 5015] fstat(4, [pid 5936] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5936] <... openat resumed>) = 4 [pid 5015] getdents64(4, [pid 5936] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./88/bus") = 0 [pid 5015] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./88/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./88" [pid 5936] <... ioctl resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./89", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5936] close(3) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5936] mkdir("./bus", 0777 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5936] <... mkdir resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5943 ./strace-static-x86_64: Process 5943 attached [ 232.647792][ T5936] loop2: detected capacity change from 0 to 32768 [pid 5936] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5943] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5943] chdir("./89") = 0 [pid 5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5943] setpgid(0, 0) = 0 [pid 5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5936] <... mount resumed>) = -1 EEXIST (File exists) [pid 5943] write(3, "1000", 4 [pid 5936] ioctl(4, LOOP_CLR_FD [pid 5943] <... write resumed>) = 4 [pid 5943] close(3) = 0 [pid 5943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5943] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5943] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5944], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5944 [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5944 attached [pid 5944] set_robust_list(0x7fe973f6a9e0, 24) = 0 [ 232.688088][ T5936] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5936) [pid 5944] memfd_create("syzkaller", 0) = 3 [pid 5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5940] <... write resumed>) = 16777216 [pid 5940] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5938] <... write resumed>) = 16777216 [pid 5938] munmap(0x7fe96bb4a000, 16777216 [pid 5940] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5940] close(3) = 0 [pid 5940] mkdir("./bus", 0777) = 0 [pid 5940] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5938] <... munmap resumed>) = 0 [pid 5938] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5938] ioctl(4, LOOP_SET_FD, 3 [pid 5940] <... mount resumed>) = -1 EEXIST (File exists) [pid 5940] ioctl(4, LOOP_CLR_FD [pid 5936] <... ioctl resumed>) = 0 [pid 5936] close(4) = 0 [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] creat("./bus", 000 [pid 5935] <... futex resumed>) = 0 [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5936] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [ 233.007502][ T5940] loop1: detected capacity change from 0 to 32768 [ 233.028590][ T5940] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5940) [ 233.030082][ T5938] loop3: detected capacity change from 0 to 32768 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... ioctl resumed>) = 0 [pid 5938] close(3) = 0 [pid 5938] mkdir("./bus", 0777) = 0 [pid 5938] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5936] open("./bus", O_RDONLY [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... open resumed>) = 3 [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5936] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5936] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5936] fallocate(-1, 0, 0, 1048820 [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5938] <... mount resumed>) = -1 EEXIST (File exists) [pid 5936] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] ioctl(4, LOOP_CLR_FD [pid 5936] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5935] <... futex resumed>) = 0 [pid 5936] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5935] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5936] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5935] <... futex resumed>) = 0 [ 233.091674][ T5938] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5938) [pid 5936] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5935] exit_group(0 [pid 5936] <... futex resumed>) = ? [pid 5935] <... exit_group resumed>) = ? [pid 5936] +++ exited with 0 +++ [pid 5935] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./87", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./87/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./87/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./87/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./87/bus" [pid 5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] umount2("./87/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./87/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./87") = 0 [pid 5012] mkdir("./88", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5945 ./strace-static-x86_64: Process 5945 attached [pid 5945] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5945] chdir("./88") = 0 [pid 5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5945] setpgid(0, 0) = 0 [pid 5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5945] write(3, "1000", 4) = 4 [pid 5945] close(3) = 0 [pid 5945] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5945] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5945] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5946], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5946 [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5946 attached [pid 5946] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5946] memfd_create("syzkaller", 0) = 3 [pid 5946] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5940] <... ioctl resumed>) = 0 [pid 5940] close(4) = 0 [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] creat("./bus", 000 [pid 5939] <... futex resumed>) = 0 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] open("./bus", O_RDONLY) = 3 [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5940] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5939] <... futex resumed>) = 0 [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... futex resumed>) = 0 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5940] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5939] <... futex resumed>) = 0 [pid 5940] fallocate(-1, 0, 0, 1048820 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5940] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5939] <... futex resumed>) = 0 [pid 5940] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5940] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5939] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5939] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5940] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5939] <... futex resumed>) = 0 [pid 5940] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5939] exit_group(0 [pid 5940] <... futex resumed>) = ? [pid 5939] <... exit_group resumed>) = ? [pid 5940] +++ exited with 0 +++ [pid 5939] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5938] <... ioctl resumed>) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4 [pid 5938] close(4 [pid 5011] <... close resumed>) = 0 [pid 5011] rmdir("./90/bus" [pid 5938] <... close resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5011] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5938] <... futex resumed>) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5011] lstat("./90/binderfs", [pid 5938] creat("./bus", 000 [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5937] <... futex resumed>) = 0 [pid 5011] unlink("./90/binderfs" [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... unlink resumed>) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./90" [pid 5938] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5011] <... rmdir resumed>) = 0 [pid 5011] mkdir("./91", 0777 [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... mkdir resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5938] <... futex resumed>) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5011] <... openat resumed>) = 3 [pid 5938] open("./bus", O_RDONLY [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5938] <... open resumed>) = 3 [pid 5937] <... futex resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] close(3 [pid 5938] <... futex resumed>) = 0 [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] <... close resumed>) = 0 [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5938] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5937] <... futex resumed>) = 0 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5947 [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] <... futex resumed>) = 0 [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5938] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... futex resumed>) = 0 [pid 5938] fallocate(-1, 0, 0, 1048820 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5938] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... futex resumed>) = 0 [pid 5938] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5938] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5938] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5938] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... futex resumed>) = 0 [pid 5938] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5937] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5947 attached [pid 5938] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5938] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] set_robust_list(0x5555561c25e0, 24 [pid 5938] <... futex resumed>) = 1 [pid 5937] <... futex resumed>) = 0 [pid 5947] <... set_robust_list resumed>) = 0 [pid 5938] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] exit_group(0 [pid 5947] chdir("./91" [pid 5938] <... futex resumed>) = ? [pid 5937] <... exit_group resumed>) = ? [pid 5947] <... chdir resumed>) = 0 [pid 5938] +++ exited with 0 +++ [pid 5937] +++ exited with 0 +++ [pid 5947] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=46 /* 0.46 s */} --- [pid 5947] <... prctl resumed>) = 0 [pid 5947] setpgid(0, 0) = 0 [pid 5947] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5947] write(3, "1000", 4 [pid 5013] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5947] <... write resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5947] close(3 [pid 5013] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5947] <... close resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5947] symlink("/dev/binderfs", "./binderfs" [pid 5013] fstat(3, [pid 5947] <... symlink resumed>) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5947] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] getdents64(3, [pid 5947] <... futex resumed>) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5947] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5013] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5947] <... mmap resumed>) = 0x7fe973f4a000 [pid 5013] lstat("./89/bus", [pid 5947] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5947] <... mprotect resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5947] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5013] <... openat resumed>) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5947] <... clone resumed>, parent_tid=[5948], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5948 [pid 5013] getdents64(4, [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5947] <... futex resumed>) = 0 [pid 5013] getdents64(4, [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5948 attached [pid 5013] close(4 [pid 5948] set_robust_list(0x7fe973f6a9e0, 24 [pid 5013] <... close resumed>) = 0 [pid 5948] <... set_robust_list resumed>) = 0 [pid 5013] rmdir("./89/bus" [pid 5948] memfd_create("syzkaller", 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5948] <... memfd_create resumed>) = 3 [pid 5013] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5948] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5013] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./89/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./89") = 0 [pid 5013] mkdir("./90", 0777) = 0 [pid 5944] <... write resumed>) = 16777216 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5944] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5949 ./strace-static-x86_64: Process 5949 attached [pid 5949] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5949] chdir("./90") = 0 [pid 5949] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5949] setpgid(0, 0) = 0 [pid 5949] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5949] write(3, "1000", 4) = 4 [pid 5949] close(3) = 0 [pid 5949] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5949] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5949] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5949] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5950], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5950 [pid 5944] <... munmap resumed>) = 0 [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 ./strace-static-x86_64: Process 5950 attached [pid 5950] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5944] ioctl(4, LOOP_SET_FD, 3 [pid 5950] memfd_create("syzkaller", 0) = 3 [pid 5950] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5942] <... write resumed>) = 16777216 [pid 5946] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5942] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5944] <... ioctl resumed>) = 0 [pid 5944] close(3) = 0 [pid 5944] mkdir("./bus", 0777) = 0 [pid 5942] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5944] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5942] <... openat resumed>) = 4 [ 233.734342][ T5944] loop5: detected capacity change from 0 to 32768 [pid 5942] ioctl(4, LOOP_SET_FD, 3 [pid 5944] <... mount resumed>) = -1 EEXIST (File exists) [pid 5944] ioctl(4, LOOP_CLR_FD [pid 5942] <... ioctl resumed>) = 0 [pid 5942] close(3) = 0 [pid 5942] mkdir("./bus", 0777) = 0 [ 233.782243][ T5944] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5944) [ 233.782422][ T5942] loop4: detected capacity change from 0 to 32768 [pid 5942] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 233.832295][ T5942] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5942) [pid 5942] ioctl(4, LOOP_CLR_FD [pid 5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5950] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5944] <... ioctl resumed>) = 0 [pid 5944] close(4) = 0 [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5944] creat("./bus", 000 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5944] open("./bus", O_RDONLY [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... open resumed>) = 3 [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... futex resumed>) = 0 [pid 5943] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5942] <... ioctl resumed>) = 0 [pid 5944] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] close(4 [pid 5944] <... futex resumed>) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5944] fallocate(-1, 0, 0, 1048820 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5942] <... close resumed>) = 0 [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] <... futex resumed>) = 0 [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... futex resumed>) = 1 [pid 5942] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5943] <... futex resumed>) = 0 [pid 5944] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5943] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5944] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5944] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] open("./bus", O_RDONLY [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5944] <... futex resumed>) = 1 [pid 5943] <... futex resumed>) = 0 [pid 5942] <... open resumed>) = 3 [pid 5941] <... futex resumed>) = 0 [pid 5944] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5943] exit_group(0 [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5944] <... futex resumed>) = ? [pid 5943] <... exit_group resumed>) = ? [pid 5942] <... futex resumed>) = 0 [pid 5941] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5944] +++ exited with 0 +++ [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5942] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5943] +++ exited with 0 +++ [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 5942] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5942] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5942] fallocate(-1, 0, 0, 1048820 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5942] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5015] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5942] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] fstat(3, [pid 5942] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5015] getdents64(3, [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5942] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5941] <... futex resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5942] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5941] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5942] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] lstat("./89/bus", [pid 5942] <... futex resumed>) = 1 [pid 5941] <... futex resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5942] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5941] exit_group(0 [pid 5015] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5942] <... futex resumed>) = ? [pid 5941] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5942] +++ exited with 0 +++ [pid 5941] +++ exited with 0 +++ [pid 5015] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=45 /* 0.45 s */} --- [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5015] close(4 [pid 5014] fstat(3, [pid 5015] <... close resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] rmdir("./89/bus" [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... rmdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./90/bus", [pid 5015] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./89/binderfs", [pid 5014] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] unlink("./89/binderfs" [pid 5014] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] <... unlink resumed>) = 0 [pid 5014] fstat(4, [pid 5015] getdents64(3, [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] getdents64(4, [pid 5015] close(3 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5946] <... write resumed>) = 16777216 [pid 5015] <... close resumed>) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] rmdir("./89" [pid 5014] close(4) = 0 [pid 5014] rmdir("./90/bus" [pid 5015] <... rmdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] mkdir("./90", 0777 [pid 5014] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./90/binderfs", [pid 5015] <... mkdir resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] unlink("./90/binderfs" [pid 5015] <... openat resumed>) = 3 [pid 5014] <... unlink resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] getdents64(3, [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5014] close(3 [pid 5015] <... close resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./90") = 0 [pid 5014] mkdir("./91", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5951 [pid 5946] munmap(0x7fe96bb4a000, 16777216 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached , child_tidptr=0x5555561c25d0) = 5952 [pid 5951] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5951] chdir("./91") = 0 [pid 5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5951] setpgid(0, 0) = 0 [pid 5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5952 attached ) = 3 [pid 5952] set_robust_list(0x5555561c25e0, 24 [pid 5951] write(3, "1000", 4 [pid 5952] <... set_robust_list resumed>) = 0 [pid 5951] <... write resumed>) = 4 [pid 5952] chdir("./90" [pid 5951] close(3 [pid 5952] <... chdir resumed>) = 0 [pid 5951] <... close resumed>) = 0 [pid 5946] <... munmap resumed>) = 0 [pid 5952] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5951] symlink("/dev/binderfs", "./binderfs" [pid 5946] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5952] <... prctl resumed>) = 0 [pid 5951] <... symlink resumed>) = 0 [pid 5952] setpgid(0, 0 [pid 5951] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... openat resumed>) = 4 [pid 5952] <... setpgid resumed>) = 0 [pid 5951] <... futex resumed>) = 0 [pid 5946] ioctl(4, LOOP_SET_FD, 3 [pid 5952] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5951] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5952] <... openat resumed>) = 3 [pid 5951] <... mmap resumed>) = 0x7fe973f4a000 [pid 5951] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5952] write(3, "1000", 4 [pid 5951] <... mprotect resumed>) = 0 [pid 5952] <... write resumed>) = 4 [pid 5951] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5952] close(3) = 0 [pid 5951] <... clone resumed>, parent_tid=[5953], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5953 [pid 5952] symlink("/dev/binderfs", "./binderfs" [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... symlink resumed>) = 0 [pid 5951] <... futex resumed>) = 0 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5952] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5953 attached [pid 5952] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5946] <... ioctl resumed>) = 0 [pid 5953] set_robust_list(0x7fe973f6a9e0, 24 [pid 5952] <... mmap resumed>) = 0x7fe973f4a000 [pid 5946] close(3 [pid 5952] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5946] <... close resumed>) = 0 [pid 5953] <... set_robust_list resumed>) = 0 [pid 5952] <... mprotect resumed>) = 0 [pid 5946] mkdir("./bus", 0777 [pid 5953] memfd_create("syzkaller", 0 [pid 5952] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5946] <... mkdir resumed>) = 0 [pid 5953] <... memfd_create resumed>) = 3 [pid 5946] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5953] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5952] <... clone resumed>, parent_tid=[5954], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5954 [pid 5953] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5954 attached ) = 0 [pid 5954] set_robust_list(0x7fe973f6a9e0, 24 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5954] <... set_robust_list resumed>) = 0 [pid 5954] memfd_create("syzkaller", 0) = 3 [pid 5954] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5946] <... mount resumed>) = -1 EEXIST (File exists) [ 234.382179][ T5946] loop2: detected capacity change from 0 to 32768 [ 234.413832][ T5946] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5946) [pid 5946] ioctl(4, LOOP_CLR_FD [pid 5948] <... write resumed>) = 16777216 [pid 5948] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5948] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5948] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5948] close(3) = 0 [pid 5948] mkdir("./bus", 0777) = 0 [pid 5948] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5948] ioctl(4, LOOP_CLR_FD [pid 5950] <... write resumed>) = 16777216 [ 234.679385][ T5948] loop1: detected capacity change from 0 to 32768 [ 234.701035][ T5948] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5948) [pid 5950] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5950] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5950] ioctl(4, LOOP_SET_FD, 3 [pid 5946] <... ioctl resumed>) = 0 [pid 5946] close(4) = 0 [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] <... futex resumed>) = 0 [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = 0 [pid 5945] <... futex resumed>) = 1 [pid 5946] creat("./bus", 000 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] open("./bus", O_RDONLY [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... open resumed>) = 3 [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... ioctl resumed>) = 0 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5950] close(3 [pid 5946] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5950] <... close resumed>) = 0 [pid 5946] <... open resumed>) = -1 EISDIR (Is a directory) [ 234.793976][ T5950] loop3: detected capacity change from 0 to 32768 [pid 5950] mkdir("./bus", 0777 [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... mkdir resumed>) = 0 [pid 5946] <... futex resumed>) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5950] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] fallocate(-1, 0, 0, 1048820 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5945] <... futex resumed>) = 0 [pid 5946] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5945] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5946] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5946] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5945] <... futex resumed>) = 0 [pid 5946] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5945] exit_group(0 [pid 5946] <... futex resumed>) = ? [pid 5945] <... exit_group resumed>) = ? [pid 5946] +++ exited with 0 +++ [pid 5945] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5950] <... mount resumed>) = -1 EEXIST (File exists) [pid 5950] ioctl(4, LOOP_CLR_FD [pid 5012] umount2("./88", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5953] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] <... openat resumed>) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 234.861566][ T5950] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5950) [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./88/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./88/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./88/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./88/bus") = 0 [pid 5012] umount2("./88/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./88/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./88") = 0 [pid 5012] mkdir("./89", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5955 ./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5955] chdir("./89") = 0 [pid 5955] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5955] setpgid(0, 0) = 0 [pid 5955] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5955] write(3, "1000", 4) = 4 [pid 5955] close(3) = 0 [pid 5955] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5955] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5955] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5955] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5956], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5956 [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5956 attached [pid 5956] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5956] memfd_create("syzkaller", 0) = 3 [pid 5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5948] <... ioctl resumed>) = 0 [pid 5948] close(4) = 0 [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = 0 [pid 5948] <... futex resumed>) = 1 [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] creat("./bus", 000 [pid 5947] <... futex resumed>) = 0 [pid 5948] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5948] <... futex resumed>) = 0 [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] open("./bus", O_RDONLY [pid 5947] <... futex resumed>) = 0 [pid 5948] <... open resumed>) = 3 [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5948] <... futex resumed>) = 0 [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5947] <... futex resumed>) = 0 [pid 5948] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5948] <... futex resumed>) = 0 [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5947] <... futex resumed>) = 0 [pid 5948] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5948] <... futex resumed>) = 0 [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5947] <... futex resumed>) = 0 [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5948] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5947] <... futex resumed>) = 0 [pid 5948] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5947] <... futex resumed>) = 0 [pid 5948] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5948] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5947] <... futex resumed>) = 0 [pid 5948] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5947] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5948] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5948] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5947] <... futex resumed>) = 0 [pid 5948] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5947] exit_group(0 [pid 5948] <... futex resumed>) = ? [pid 5947] <... exit_group resumed>) = ? [pid 5948] +++ exited with 0 +++ [pid 5947] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5947, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=44 /* 0.44 s */} --- [pid 5011] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./91/bus") = 0 [pid 5011] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./91/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./91") = 0 [pid 5011] mkdir("./92", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5957 ./strace-static-x86_64: Process 5957 attached [pid 5957] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5957] chdir("./92") = 0 [pid 5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5957] setpgid(0, 0) = 0 [pid 5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5957] write(3, "1000", 4) = 4 [pid 5957] close(3) = 0 [pid 5957] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5957] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5957] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5958], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5958 [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5958 attached [pid 5958] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5958] memfd_create("syzkaller", 0) = 3 [pid 5950] <... ioctl resumed>) = 0 [pid 5958] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5950] close(4) = 0 [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5949] <... futex resumed>) = 0 [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5950] <... futex resumed>) = 1 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] open("./bus", O_RDONLY [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... open resumed>) = 3 [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] fallocate(-1, 0, 0, 1048820 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5950] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5949] <... futex resumed>) = 0 [pid 5950] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5949] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5950] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5950] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5949] <... futex resumed>) = 0 [pid 5950] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5949] exit_group(0 [pid 5950] <... futex resumed>) = ? [pid 5949] <... exit_group resumed>) = ? [pid 5950] +++ exited with 0 +++ [pid 5949] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5949, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=48 /* 0.48 s */} --- [pid 5013] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5954] <... write resumed>) = 16777216 [pid 5954] munmap(0x7fe96bb4a000, 16777216 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./90/bus") = 0 [pid 5013] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./90/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./90") = 0 [pid 5013] mkdir("./91", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5954] <... munmap resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5954] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5959 [pid 5954] <... openat resumed>) = 4 [pid 5954] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5959 attached [pid 5959] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5959] chdir("./91") = 0 [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5959] setpgid(0, 0) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5954] <... ioctl resumed>) = 0 [pid 5959] <... openat resumed>) = 3 [pid 5959] write(3, "1000", 4) = 4 [pid 5954] close(3 [pid 5959] close(3) = 0 [pid 5954] <... close resumed>) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs" [pid 5954] mkdir("./bus", 0777 [pid 5959] <... symlink resumed>) = 0 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5954] <... mkdir resumed>) = 0 [pid 5959] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5954] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [ 235.441369][ T5954] loop5: detected capacity change from 0 to 32768 [pid 5959] <... mprotect resumed>) = 0 [pid 5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5953] <... write resumed>) = 16777216 [pid 5959] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5954] <... mount resumed>) = -1 EEXIST (File exists) [pid 5954] ioctl(4, LOOP_CLR_FD [pid 5953] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5959] <... clone resumed>, parent_tid=[5960], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5960 [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5953] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 ./strace-static-x86_64: Process 5960 attached [pid 5953] ioctl(4, LOOP_SET_FD, 3 [pid 5960] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5960] memfd_create("syzkaller", 0) = 3 [pid 5960] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 235.490679][ T5954] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5954) [ 235.529456][ T5953] loop4: detected capacity change from 0 to 32768 [pid 5953] <... ioctl resumed>) = 0 [pid 5953] close(3) = 0 [pid 5953] mkdir("./bus", 0777) = 0 [pid 5953] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5958] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 235.599810][ T5953] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5953) [pid 5953] ioctl(4, LOOP_CLR_FD [pid 5954] <... ioctl resumed>) = 0 [pid 5954] close(4) = 0 [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] <... futex resumed>) = 0 [pid 5954] creat("./bus", 000 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] <... futex resumed>) = 0 [pid 5954] open("./bus", O_RDONLY [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... open resumed>) = 3 [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] <... futex resumed>) = 0 [pid 5954] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] <... futex resumed>) = 0 [pid 5954] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] <... futex resumed>) = 0 [pid 5954] fallocate(-1, 0, 0, 1048820 [pid 5953] <... ioctl resumed>) = 0 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5953] close(4 [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... close resumed>) = 0 [pid 5954] <... futex resumed>) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5953] <... futex resumed>) = 1 [pid 5952] <... futex resumed>) = 0 [pid 5954] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 5952] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5954] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5952] <... futex resumed>) = 0 [pid 5954] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5952] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5951] <... futex resumed>) = 0 [pid 5956] <... write resumed>) = 16777216 [pid 5954] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] munmap(0x7fe96bb4a000, 16777216 [pid 5954] <... futex resumed>) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5952] exit_group(0 [pid 5951] <... futex resumed>) = 1 [pid 5953] creat("./bus", 000 [pid 5952] <... exit_group resumed>) = ? [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5954] +++ exited with 0 +++ [pid 5953] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5952] +++ exited with 0 +++ [pid 5953] <... futex resumed>) = 1 [pid 5951] <... futex resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5952, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5953] <... futex resumed>) = 0 [pid 5951] <... futex resumed>) = 1 [pid 5015] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5953] open("./bus", O_RDONLY [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5953] <... open resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5951] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] fstat(3, [pid 5953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5951] <... futex resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5953] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] getdents64(3, [pid 5953] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5956] <... munmap resumed>) = 0 [pid 5953] <... futex resumed>) = 1 [pid 5951] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5956] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] lstat("./90/bus", [pid 5956] <... openat resumed>) = 4 [pid 5953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5951] <... futex resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5956] ioctl(4, LOOP_SET_FD, 3 [pid 5953] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5956] <... ioctl resumed>) = 0 [pid 5953] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5953] <... futex resumed>) = 1 [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5015] fstat(4, [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, [pid 5956] close(3 [pid 5953] <... futex resumed>) = 0 [pid 5951] <... futex resumed>) = 1 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5956] <... close resumed>) = 0 [pid 5953] fallocate(-1, 0, 0, 1048820 [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] getdents64(4, [pid 5956] mkdir("./bus", 0777 [pid 5953] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] close(4 [pid 5953] <... futex resumed>) = 1 [pid 5951] <... futex resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5956] <... mkdir resumed>) = 0 [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] rmdir("./90/bus" [pid 5956] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5953] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5951] <... futex resumed>) = 0 [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5953] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5015] <... rmdir resumed>) = 0 [pid 5953] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5951] <... futex resumed>) = 0 [pid 5015] lstat("./90/binderfs", [pid 5951] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5953] <... futex resumed>) = 0 [pid 5951] <... futex resumed>) = 1 [pid 5015] unlink("./90/binderfs" [pid 5953] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5951] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... unlink resumed>) = 0 [pid 5953] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5015] getdents64(3, [pid 5953] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5953] <... futex resumed>) = 1 [pid 5951] <... futex resumed>) = 0 [pid 5015] close(3 [pid 5953] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5951] exit_group(0 [pid 5015] <... close resumed>) = 0 [pid 5953] <... futex resumed>) = ? [pid 5951] <... exit_group resumed>) = ? [pid 5015] rmdir("./90" [pid 5953] +++ exited with 0 +++ [pid 5951] +++ exited with 0 +++ [pid 5956] <... mount resumed>) = -1 EEXIST (File exists) [pid 5015] <... rmdir resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} --- [pid 5956] ioctl(4, LOOP_CLR_FD [pid 5015] mkdir("./91", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(3 [pid 5014] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5961 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 ./strace-static-x86_64: Process 5961 attached [ 236.038192][ T5956] loop2: detected capacity change from 0 to 32768 [ 236.056172][ T5956] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5956) [pid 5961] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5961] chdir("./91") = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] rmdir("./91/bus" [pid 5961] setpgid(0, 0) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5961] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5961] write(3, "1000", 4 [pid 5014] lstat("./91/binderfs", [pid 5961] <... write resumed>) = 4 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5961] close(3 [pid 5014] unlink("./91/binderfs" [pid 5961] <... close resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs" [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5961] <... symlink resumed>) = 0 [pid 5014] close(3 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... close resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5014] rmdir("./91" [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5961] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5961] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... rmdir resumed>) = 0 [pid 5961] <... clone resumed>, parent_tid=[5962], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5962 [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5962 attached [pid 5962] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5962] memfd_create("syzkaller", 0 [pid 5014] mkdir("./92", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5962] <... memfd_create resumed>) = 3 [pid 5958] <... write resumed>) = 16777216 [pid 5014] close(3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... close resumed>) = 0 [pid 5962] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5963 [pid 5958] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 5963 attached [pid 5963] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5963] chdir("./92") = 0 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] setpgid(0, 0) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5958] <... munmap resumed>) = 0 [pid 5963] <... openat resumed>) = 3 [pid 5958] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5963] write(3, "1000", 4 [pid 5958] <... openat resumed>) = 4 [pid 5963] <... write resumed>) = 4 [pid 5958] ioctl(4, LOOP_SET_FD, 3 [pid 5963] close(3 [pid 5958] <... ioctl resumed>) = 0 [pid 5963] <... close resumed>) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs" [pid 5958] close(3 [pid 5963] <... symlink resumed>) = 0 [pid 5958] <... close resumed>) = 0 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] mkdir("./bus", 0777 [pid 5963] <... futex resumed>) = 0 [pid 5963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5958] <... mkdir resumed>) = 0 [pid 5963] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5958] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5963] <... mprotect resumed>) = 0 [pid 5963] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5964], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5964 [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5964 attached [pid 5964] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5958] <... mount resumed>) = -1 EEXIST (File exists) [pid 5964] memfd_create("syzkaller", 0 [pid 5958] ioctl(4, LOOP_CLR_FD [pid 5964] <... memfd_create resumed>) = 3 [pid 5964] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 236.218154][ T5958] loop1: detected capacity change from 0 to 32768 [ 236.234997][ T5958] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5958) [pid 5956] <... ioctl resumed>) = 0 [pid 5956] close(4) = 0 [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] <... futex resumed>) = 0 [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = 0 [pid 5955] <... futex resumed>) = 1 [pid 5956] creat("./bus", 000 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] open("./bus", O_RDONLY [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... open resumed>) = 3 [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] fallocate(-1, 0, 0, 1048820 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5956] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5955] <... futex resumed>) = 0 [pid 5956] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5955] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5956] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5956] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5955] <... futex resumed>) = 0 [pid 5956] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5955] exit_group(0 [pid 5956] <... futex resumed>) = ? [pid 5955] <... exit_group resumed>) = ? [pid 5956] +++ exited with 0 +++ [pid 5955] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5955, si_uid=0, si_status=0, si_utime=0, si_stime=38 /* 0.38 s */} --- [pid 5012] umount2("./89", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./89/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./89/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./89/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./89/bus") = 0 [pid 5012] umount2("./89/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./89/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./89") = 0 [pid 5012] mkdir("./90", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5965 ./strace-static-x86_64: Process 5965 attached [pid 5965] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5965] chdir("./90") = 0 [pid 5965] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5965] setpgid(0, 0) = 0 [pid 5965] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5965] write(3, "1000", 4) = 4 [pid 5965] close(3) = 0 [pid 5965] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5965] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5965] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5965] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5966], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5966 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5966 attached [pid 5966] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5966] memfd_create("syzkaller", 0) = 3 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5960] <... write resumed>) = 16777216 [pid 5960] munmap(0x7fe96bb4a000, 16777216 [pid 5964] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5960] <... munmap resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5960] <... openat resumed>) = 4 [pid 5960] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5960] close(3) = 0 [pid 5960] mkdir("./bus", 0777) = 0 [pid 5960] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5958] <... ioctl resumed>) = 0 [pid 5958] close(4 [pid 5960] <... mount resumed>) = -1 EEXIST (File exists) [pid 5958] <... close resumed>) = 0 [pid 5960] ioctl(4, LOOP_CLR_FD [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5957] <... futex resumed>) = 0 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] <... futex resumed>) = 0 [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5957] <... futex resumed>) = 1 [pid 5958] open("./bus", O_RDONLY [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... open resumed>) = 3 [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5957] <... futex resumed>) = 0 [pid 5958] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [ 236.683981][ T5960] loop3: detected capacity change from 0 to 32768 [ 236.702306][ T5960] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5960) [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5957] <... futex resumed>) = 0 [pid 5958] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] <... futex resumed>) = 0 [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = 0 [pid 5957] <... futex resumed>) = 1 [pid 5958] fallocate(-1, 0, 0, 1048820 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5957] <... futex resumed>) = 0 [pid 5958] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5958] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5957] <... futex resumed>) = 0 [pid 5958] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5957] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5958] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5958] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5957] <... futex resumed>) = 0 [pid 5958] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5957] exit_group(0 [pid 5958] <... futex resumed>) = ? [pid 5957] <... exit_group resumed>) = ? [pid 5958] +++ exited with 0 +++ [pid 5957] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 5011] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./92/bus") = 0 [pid 5011] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./92/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./92") = 0 [pid 5011] mkdir("./93", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5967 ./strace-static-x86_64: Process 5967 attached [pid 5967] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5967] chdir("./93") = 0 [pid 5967] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5967] setpgid(0, 0) = 0 [pid 5967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5967] write(3, "1000", 4) = 4 [pid 5967] close(3) = 0 [pid 5967] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5967] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5967] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5968], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5968 [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5968] memfd_create("syzkaller", 0) = 3 [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5960] <... ioctl resumed>) = 0 [pid 5960] close(4 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5960] <... close resumed>) = 0 [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5960] creat("./bus", 000 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5960] open("./bus", O_RDONLY [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... open resumed>) = 3 [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5960] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... write resumed>) = 16777216 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5964] munmap(0x7fe96bb4a000, 16777216 [pid 5960] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5964] <... munmap resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5964] <... openat resumed>) = 4 [pid 5960] fallocate(-1, 0, 0, 1048820 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] ioctl(4, LOOP_SET_FD, 3 [pid 5960] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5964] <... ioctl resumed>) = 0 [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] close(3 [pid 5960] <... futex resumed>) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5964] <... close resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] mkdir("./bus", 0777 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5964] <... mkdir resumed>) = 0 [pid 5960] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5960] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5960] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5959] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5960] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... mount resumed>) = -1 EEXIST (File exists) [pid 5960] <... futex resumed>) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5964] ioctl(4, LOOP_CLR_FD [pid 5960] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5959] exit_group(0 [pid 5960] <... futex resumed>) = ? [pid 5959] <... exit_group resumed>) = ? [pid 5960] +++ exited with 0 +++ [pid 5959] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 237.146514][ T5964] loop4: detected capacity change from 0 to 32768 [ 237.171949][ T5964] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5964) [pid 5013] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./91/bus") = 0 [pid 5013] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./91/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./91") = 0 [pid 5013] mkdir("./92", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5969 ./strace-static-x86_64: Process 5969 attached [pid 5969] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5969] chdir("./92") = 0 [pid 5969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5969] setpgid(0, 0) = 0 [pid 5969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5969] write(3, "1000", 4) = 4 [pid 5969] close(3) = 0 [pid 5969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5969] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5969] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5970], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5970 [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5970 attached [pid 5970] set_robust_list(0x7fe973f6a9e0, 24 [pid 5962] <... write resumed>) = 16777216 [pid 5970] <... set_robust_list resumed>) = 0 [pid 5962] munmap(0x7fe96bb4a000, 16777216 [pid 5970] memfd_create("syzkaller", 0) = 3 [pid 5970] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5962] <... munmap resumed>) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5962] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5962] close(3) = 0 [pid 5962] mkdir("./bus", 0777) = 0 [pid 5962] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 237.367699][ T5962] loop5: detected capacity change from 0 to 32768 [ 237.387218][ T5962] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5962) [pid 5962] ioctl(4, LOOP_CLR_FD [pid 5964] <... ioctl resumed>) = 0 [pid 5964] close(4) = 0 [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] <... futex resumed>) = 0 [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = 1 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] <... futex resumed>) = 0 [pid 5964] open("./bus", O_RDONLY [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... open resumed>) = 3 [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] <... futex resumed>) = 0 [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = 1 [pid 5964] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] <... futex resumed>) = 0 [pid 5964] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] <... futex resumed>) = 0 [pid 5964] fallocate(-1, 0, 0, 1048820 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] <... futex resumed>) = 0 [pid 5964] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] <... futex resumed>) = 0 [pid 5964] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5963] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5964] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5964] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] exit_group(0 [pid 5964] <... futex resumed>) = ? [pid 5963] <... exit_group resumed>) = ? [pid 5964] +++ exited with 0 +++ [pid 5963] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, [pid 5966] <... write resumed>) = 16777216 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./92/bus") = 0 [pid 5014] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./92/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./92") = 0 [pid 5014] mkdir("./93", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5966] munmap(0x7fe96bb4a000, 16777216 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5971 ./strace-static-x86_64: Process 5971 attached [pid 5971] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5971] chdir("./93") = 0 [pid 5971] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5971] setpgid(0, 0) = 0 [pid 5971] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5971] write(3, "1000", 4) = 4 [pid 5971] close(3) = 0 [pid 5971] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5966] <... munmap resumed>) = 0 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5966] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5971] <... mmap resumed>) = 0x7fe973f4a000 [pid 5966] <... openat resumed>) = 4 [pid 5971] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5966] ioctl(4, LOOP_SET_FD, 3 [pid 5971] <... mprotect resumed>) = 0 [pid 5971] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5972], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5972 [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5972 attached [pid 5972] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5972] memfd_create("syzkaller", 0) = 3 [pid 5972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5966] <... ioctl resumed>) = 0 [pid 5966] close(3) = 0 [pid 5966] mkdir("./bus", 0777 [pid 5970] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5966] <... mkdir resumed>) = 0 [ 237.753689][ T5966] loop2: detected capacity change from 0 to 32768 [pid 5966] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5966] ioctl(4, LOOP_CLR_FD [pid 5962] <... ioctl resumed>) = 0 [pid 5962] close(4) = 0 [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] creat("./bus", 000 [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [ 237.794652][ T5966] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5966) [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] open("./bus", O_RDONLY [pid 5961] <... futex resumed>) = 0 [pid 5962] <... open resumed>) = 3 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] <... futex resumed>) = 0 [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5962] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5962] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5962] fallocate(-1, 0, 0, 1048820 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5962] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5962] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5961] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5962] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... write resumed>) = 16777216 [pid 5968] munmap(0x7fe96bb4a000, 16777216 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5962] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] exit_group(0 [pid 5962] <... futex resumed>) = ? [pid 5961] <... exit_group resumed>) = ? [pid 5962] +++ exited with 0 +++ [pid 5961] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, [pid 5968] <... munmap resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] getdents64(3, [pid 5968] <... openat resumed>) = 4 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5015] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, [pid 5968] <... ioctl resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, [pid 5968] close(3 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5968] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5968] mkdir("./bus", 0777 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5968] <... mkdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5968] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5015] rmdir("./91/bus") = 0 [pid 5015] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./91/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./91/binderfs" [pid 5968] <... mount resumed>) = -1 EEXIST (File exists) [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5968] ioctl(4, LOOP_CLR_FD [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./91") = 0 [pid 5015] mkdir("./92", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5973 ./strace-static-x86_64: Process 5973 attached [pid 5973] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5973] chdir("./92") = 0 [pid 5973] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5973] setpgid(0, 0) = 0 [pid 5973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5973] write(3, "1000", 4) = 4 [pid 5973] close(3) = 0 [ 237.966208][ T5968] loop1: detected capacity change from 0 to 32768 [ 237.981488][ T5968] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5968) [pid 5973] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5973] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5973] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5974], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5974 [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5974 attached [pid 5974] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5974] memfd_create("syzkaller", 0) = 3 [pid 5974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5966] <... ioctl resumed>) = 0 [pid 5970] <... write resumed>) = 16777216 [pid 5970] munmap(0x7fe96bb4a000, 16777216 [pid 5966] close(4) = 0 [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] creat("./bus", 000 [pid 5965] <... futex resumed>) = 0 [pid 5966] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... munmap resumed>) = 0 [pid 5966] open("./bus", O_RDONLY [pid 5965] <... futex resumed>) = 0 [pid 5970] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5966] <... open resumed>) = 3 [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... openat resumed>) = 4 [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5970] ioctl(4, LOOP_SET_FD, 3 [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... ioctl resumed>) = 0 [pid 5966] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5970] close(3 [pid 5966] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5970] <... close resumed>) = 0 [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] mkdir("./bus", 0777 [pid 5966] <... futex resumed>) = 1 [pid 5965] <... futex resumed>) = 0 [pid 5970] <... mkdir resumed>) = 0 [pid 5966] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... futex resumed>) = 0 [pid 5966] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5970] <... mount resumed>) = -1 EEXIST (File exists) [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] ioctl(4, LOOP_CLR_FD [pid 5966] fallocate(-1, 0, 0, 1048820 [pid 5965] <... futex resumed>) = 0 [pid 5966] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5965] <... futex resumed>) = 0 [pid 5966] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 5965] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5965] <... futex resumed>) = 0 [pid 5966] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5965] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 0 [pid 5965] exit_group(0) = ? [pid 5966] +++ exited with 0 +++ [ 238.296271][ T5970] loop3: detected capacity change from 0 to 32768 [ 238.327409][ T5970] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5970) [pid 5965] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5965, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=40 /* 0.40 s */} --- [pid 5974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] umount2("./90", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./90/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./90/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./90/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./90/bus") = 0 [pid 5012] umount2("./90/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./90/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./90") = 0 [pid 5012] mkdir("./91", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5975 ./strace-static-x86_64: Process 5975 attached [pid 5975] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5975] chdir("./91") = 0 [pid 5975] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5975] setpgid(0, 0) = 0 [pid 5975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5975] write(3, "1000", 4) = 4 [pid 5975] close(3) = 0 [pid 5968] <... ioctl resumed>) = 0 [pid 5975] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5968] close(4 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5975] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5975] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5968] <... close resumed>) = 0 [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... clone resumed>, parent_tid=[5976], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5976 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5975] <... futex resumed>) = 0 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5968] creat("./bus", 000 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5976 attached [pid 5968] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] set_robust_list(0x7fe973f6a9e0, 24 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5968] open("./bus", O_RDONLY [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... set_robust_list resumed>) = 0 [pid 5968] <... open resumed>) = 3 [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] memfd_create("syzkaller", 0 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5976] <... memfd_create resumed>) = 3 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5976] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5968] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5968] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5968] fallocate(-1, 0, 0, 1048820 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5968] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5968] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5967] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5968] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5967] <... futex resumed>) = 0 [pid 5968] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] exit_group(0 [pid 5968] <... futex resumed>) = ? [pid 5967] <... exit_group resumed>) = ? [pid 5968] +++ exited with 0 +++ [pid 5967] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5967, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5011] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./93/bus") = 0 [pid 5011] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./93/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./93") = 0 [pid 5011] mkdir("./94", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5977 ./strace-static-x86_64: Process 5977 attached [pid 5977] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5977] chdir("./94") = 0 [pid 5977] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5977] setpgid(0, 0) = 0 [pid 5977] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5977] write(3, "1000", 4) = 4 [pid 5977] close(3) = 0 [pid 5977] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5977] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5977] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5977] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5978], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5978 [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5978 attached [pid 5978] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5978] memfd_create("syzkaller", 0) = 3 [pid 5978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5970] <... ioctl resumed>) = 0 [pid 5970] close(4) = 0 [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] creat("./bus", 000 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] open("./bus", O_RDONLY [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... open resumed>) = 3 [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] fallocate(-1, 0, 0, 1048820 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5970] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5969] <... futex resumed>) = 0 [pid 5970] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5969] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5970] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5970] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5969] <... futex resumed>) = 0 [pid 5970] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5969] exit_group(0 [pid 5970] <... futex resumed>) = ? [pid 5969] <... exit_group resumed>) = ? [pid 5970] +++ exited with 0 +++ [pid 5969] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5969, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=37 /* 0.37 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./92/bus") = 0 [pid 5013] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./92/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./92") = 0 [pid 5013] mkdir("./93", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5979 ./strace-static-x86_64: Process 5979 attached [pid 5979] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5979] chdir("./93") = 0 [pid 5979] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5979] setpgid(0, 0) = 0 [pid 5979] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5979] write(3, "1000", 4) = 4 [pid 5979] close(3) = 0 [pid 5979] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5979] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5979] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5980], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5980 [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5974] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 5980 attached [pid 5980] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5974] munmap(0x7fe96bb4a000, 16777216 [pid 5980] memfd_create("syzkaller", 0 [pid 5976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5980] <... memfd_create resumed>) = 3 [pid 5980] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5974] <... munmap resumed>) = 0 [pid 5974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5972] <... write resumed>) = 16777216 [pid 5974] <... openat resumed>) = 4 [pid 5972] munmap(0x7fe96bb4a000, 16777216 [pid 5974] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5974] close(3) = 0 [pid 5974] mkdir("./bus", 0777) = 0 [pid 5974] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5972] <... munmap resumed>) = 0 [pid 5972] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5972] ioctl(4, LOOP_SET_FD, 3 [pid 5974] <... mount resumed>) = -1 EEXIST (File exists) [pid 5972] <... ioctl resumed>) = 0 [pid 5974] ioctl(4, LOOP_CLR_FD [pid 5972] close(3) = 0 [pid 5972] mkdir("./bus", 0777) = 0 [ 238.994336][ T5974] loop5: detected capacity change from 0 to 32768 [ 239.012851][ T5974] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5974) [ 239.019852][ T5972] loop4: detected capacity change from 0 to 32768 [pid 5972] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 5978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [ 239.065393][ T5972] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5972) [pid 5972] ioctl(4, LOOP_CLR_FD [pid 5980] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5972] <... ioctl resumed>) = 0 [pid 5972] close(4) = 0 [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5972] creat("./bus", 000 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5972] open("./bus", O_RDONLY [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] <... open resumed>) = 3 [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5976] <... write resumed>) = 16777216 [pid 5972] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] munmap(0x7fe96bb4a000, 16777216 [pid 5972] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5976] <... munmap resumed>) = 0 [pid 5974] <... ioctl resumed>) = 0 [pid 5972] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5972] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5976] <... openat resumed>) = 4 [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] ioctl(4, LOOP_SET_FD, 3 [pid 5972] <... futex resumed>) = 1 [pid 5971] <... futex resumed>) = 0 [pid 5974] close(4 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... ioctl resumed>) = 0 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5971] <... futex resumed>) = 0 [pid 5976] close(3 [pid 5972] fallocate(-1, 0, 0, 1048820 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... close resumed>) = 0 [pid 5972] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5976] mkdir("./bus", 0777 [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... mkdir resumed>) = 0 [pid 5974] <... close resumed>) = 0 [pid 5972] <... futex resumed>) = 1 [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5971] <... futex resumed>) = 0 [pid 5976] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5974] creat("./bus", 000 [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5974] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5973] <... futex resumed>) = 0 [pid 5972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... futex resumed>) = 0 [pid 5973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5974] open("./bus", O_RDONLY [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... open resumed>) = 3 [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5972] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5971] <... futex resumed>) = 0 [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5972] <... futex resumed>) = 0 [pid 5971] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... mount resumed>) = -1 EEXIST (File exists) [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5972] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5971] <... futex resumed>) = 0 [pid 5976] ioctl(4, LOOP_CLR_FD [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5972] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5971] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5972] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5974] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5972] <... futex resumed>) = 0 [pid 5971] exit_group(0 [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] <... exit_group resumed>) = ? [pid 5974] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5972] +++ exited with 0 +++ [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5971] +++ exited with 0 +++ [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5971, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 5974] fallocate(-1, 0, 0, 1048820 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] <... write resumed>) = 16777216 [pid 5974] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [ 239.490028][ T5976] loop2: detected capacity change from 0 to 32768 [ 239.519361][ T5976] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5976) [pid 5014] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5974] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] munmap(0x7fe96bb4a000, 16777216 [pid 5974] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5973] <... futex resumed>) = 0 [pid 5014] fstat(3, [pid 5974] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5973] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5974] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5974] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getdents64(3, [pid 5974] <... futex resumed>) = 1 [pid 5973] <... futex resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5973] exit_group(0 [pid 5974] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5973] <... exit_group resumed>) = ? [pid 5014] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5974] <... futex resumed>) = ? [pid 5974] +++ exited with 0 +++ [pid 5973] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5973, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5014] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5978] <... munmap resumed>) = 0 [pid 5014] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5978] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5015] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 4 [pid 5015] fstat(3, [pid 5014] fstat(4, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, [pid 5014] getdents64(4, [pid 5978] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5978] <... ioctl resumed>) = 0 [pid 5978] close(3 [pid 5015] lstat("./92/bus", [pid 5014] close(4 [pid 5978] <... close resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... close resumed>) = 0 [pid 5978] mkdir("./bus", 0777 [pid 5014] rmdir("./93/bus" [pid 5015] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] <... mkdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 239.582760][ T5978] loop1: detected capacity change from 0 to 32768 [pid 5978] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5015] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./92/bus") = 0 [pid 5014] lstat("./93/binderfs", [pid 5015] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./93/binderfs" [pid 5015] lstat("./92/binderfs", [pid 5014] <... unlink resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] getdents64(3, [pid 5015] unlink("./92/binderfs" [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5014] close(3 [pid 5015] getdents64(3, [pid 5014] <... close resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] rmdir("./93" [pid 5015] close(3 [pid 5014] <... rmdir resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5014] mkdir("./94", 0777 [pid 5015] rmdir("./92") = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5015] mkdir("./93", 0777 [pid 5014] <... openat resumed>) = 3 [pid 5015] <... mkdir resumed>) = 0 [pid 5978] <... mount resumed>) = -1 EEXIST (File exists) [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5978] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5014] close(3 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... close resumed>) = 0 [pid 5015] close(3 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5982 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5981 ./strace-static-x86_64: Process 5981 attached ./strace-static-x86_64: Process 5982 attached [pid 5981] set_robust_list(0x5555561c25e0, 24 [pid 5982] set_robust_list(0x5555561c25e0, 24 [pid 5981] <... set_robust_list resumed>) = 0 [pid 5982] <... set_robust_list resumed>) = 0 [ 239.628793][ T5978] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5978) [pid 5981] chdir("./94" [pid 5982] chdir("./93" [pid 5981] <... chdir resumed>) = 0 [pid 5982] <... chdir resumed>) = 0 [pid 5981] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5981] <... prctl resumed>) = 0 [pid 5982] <... prctl resumed>) = 0 [pid 5981] setpgid(0, 0 [pid 5982] setpgid(0, 0 [pid 5981] <... setpgid resumed>) = 0 [pid 5982] <... setpgid resumed>) = 0 [pid 5982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5981] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5982] <... openat resumed>) = 3 [pid 5981] <... openat resumed>) = 3 [pid 5982] write(3, "1000", 4 [pid 5981] write(3, "1000", 4 [pid 5982] <... write resumed>) = 4 [pid 5981] <... write resumed>) = 4 [pid 5982] close(3 [pid 5981] close(3 [pid 5982] <... close resumed>) = 0 [pid 5981] <... close resumed>) = 0 [pid 5982] symlink("/dev/binderfs", "./binderfs" [pid 5981] symlink("/dev/binderfs", "./binderfs" [pid 5982] <... symlink resumed>) = 0 [pid 5981] <... symlink resumed>) = 0 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5982] <... futex resumed>) = 0 [pid 5981] <... futex resumed>) = 0 [pid 5982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5981] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5982] <... mmap resumed>) = 0x7fe973f4a000 [pid 5981] <... mmap resumed>) = 0x7fe973f4a000 [pid 5982] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5981] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5982] <... mprotect resumed>) = 0 [pid 5981] <... mprotect resumed>) = 0 [pid 5982] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5981] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5982] <... clone resumed>, parent_tid=[5983], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5983 [pid 5981] <... clone resumed>, parent_tid=[5984], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5984 [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5982] <... futex resumed>) = 0 [pid 5981] <... futex resumed>) = 0 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5984 attached [pid 5984] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5984] memfd_create("syzkaller", 0 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5984] <... memfd_create resumed>) = 3 [pid 5984] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5983 attached ) = 0x7fe96bb4a000 [pid 5983] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5983] memfd_create("syzkaller", 0) = 3 [pid 5983] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5976] <... ioctl resumed>) = 0 [pid 5976] close(4 [pid 5980] <... write resumed>) = 16777216 [pid 5976] <... close resumed>) = 0 [pid 5980] munmap(0x7fe96bb4a000, 16777216 [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... munmap resumed>) = 0 [pid 5976] <... futex resumed>) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5980] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5976] creat("./bus", 000 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5980] <... openat resumed>) = 4 [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5980] ioctl(4, LOOP_SET_FD, 3 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... ioctl resumed>) = 0 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5980] close(3 [pid 5976] open("./bus", O_RDONLY [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... close resumed>) = 0 [pid 5976] <... open resumed>) = 3 [pid 5980] mkdir("./bus", 0777 [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... mkdir resumed>) = 0 [pid 5976] <... futex resumed>) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5980] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5976] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5976] fallocate(-1, 0, 0, 1048820 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] <... futex resumed>) = 0 [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = 0 [pid 5975] <... futex resumed>) = 1 [pid 5980] <... mount resumed>) = -1 EEXIST (File exists) [pid 5976] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] ioctl(4, LOOP_CLR_FD [pid 5976] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5983] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 239.957166][ T5980] loop3: detected capacity change from 0 to 32768 [ 239.990440][ T5980] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5980) [pid 5975] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5975] <... futex resumed>) = 0 [pid 5976] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5975] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5976] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5976] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5975] <... futex resumed>) = 0 [pid 5976] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5975] exit_group(0 [pid 5976] <... futex resumed>) = ? [pid 5975] <... exit_group resumed>) = ? [pid 5976] +++ exited with 0 +++ [pid 5975] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5975, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 5012] umount2("./91", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./91/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./91/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./91/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5978] <... ioctl resumed>) = 0 [pid 5012] rmdir("./91/bus" [pid 5978] close(4 [pid 5012] <... rmdir resumed>) = 0 [pid 5978] <... close resumed>) = 0 [pid 5012] umount2("./91/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5978] <... futex resumed>) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5012] lstat("./91/binderfs", [pid 5978] creat("./bus", 000 [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5978] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5977] <... futex resumed>) = 0 [pid 5012] unlink("./91/binderfs" [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... futex resumed>) = 0 [pid 5977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... unlink resumed>) = 0 [pid 5978] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 5978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5977] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5978] open("./bus", O_RDONLY [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] close(3 [pid 5978] <... open resumed>) = 3 [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... close resumed>) = 0 [pid 5978] <... futex resumed>) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5012] rmdir("./91" [pid 5978] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5978] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5977] <... futex resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5978] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] mkdir("./92", 0777 [pid 5978] <... futex resumed>) = 0 [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5977] <... futex resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5978] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... openat resumed>) = 3 [pid 5978] <... futex resumed>) = 0 [pid 5978] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5977] <... futex resumed>) = 1 [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5978] <... futex resumed>) = 0 [pid 5012] close(3 [pid 5984] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5978] fallocate(-1, 0, 0, 1048820 [pid 5012] <... close resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5978] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5985 [pid 5977] <... futex resumed>) = 0 [pid 5978] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5978] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5977] <... futex resumed>) = 0 [pid 5978] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5977] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5978] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5978] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5985 attached ) = 1 [pid 5977] <... futex resumed>) = 0 [pid 5978] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5977] exit_group(0 [pid 5985] set_robust_list(0x5555561c25e0, 24 [pid 5978] <... futex resumed>) = ? [pid 5977] <... exit_group resumed>) = ? [pid 5985] <... set_robust_list resumed>) = 0 [pid 5978] +++ exited with 0 +++ [pid 5977] +++ exited with 0 +++ [pid 5985] chdir("./92" [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5977, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=37 /* 0.37 s */} --- [pid 5985] <... chdir resumed>) = 0 [pid 5011] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5985] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5985] <... prctl resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5985] setpgid(0, 0 [pid 5011] <... openat resumed>) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5985] <... setpgid resumed>) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5985] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5011] close(4 [pid 5985] <... openat resumed>) = 3 [pid 5011] <... close resumed>) = 0 [pid 5985] write(3, "1000", 4 [pid 5011] rmdir("./94/bus" [pid 5985] <... write resumed>) = 4 [pid 5011] <... rmdir resumed>) = 0 [pid 5985] close(3 [pid 5011] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5985] <... close resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5985] symlink("/dev/binderfs", "./binderfs" [pid 5011] lstat("./94/binderfs", [pid 5985] <... symlink resumed>) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5985] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] unlink("./94/binderfs" [pid 5985] <... futex resumed>) = 0 [pid 5011] <... unlink resumed>) = 0 [pid 5985] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5011] getdents64(3, [pid 5985] <... mmap resumed>) = 0x7fe973f4a000 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5985] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5011] close(3 [pid 5985] <... mprotect resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5985] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5011] rmdir("./94") = 0 [pid 5985] <... clone resumed>, parent_tid=[5986], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5986 [pid 5011] mkdir("./95", 0777 [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... mkdir resumed>) = 0 [pid 5985] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5986 attached [pid 5011] close(3 [pid 5986] set_robust_list(0x7fe973f6a9e0, 24 [pid 5011] <... close resumed>) = 0 [pid 5986] <... set_robust_list resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5987 attached [pid 5986] memfd_create("syzkaller", 0 [pid 5987] set_robust_list(0x5555561c25e0, 24 [pid 5986] <... memfd_create resumed>) = 3 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5987 [pid 5987] <... set_robust_list resumed>) = 0 [pid 5986] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5987] chdir("./95" [pid 5986] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5987] <... chdir resumed>) = 0 [pid 5987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5987] setpgid(0, 0) = 0 [pid 5987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5987] write(3, "1000", 4) = 4 [pid 5987] close(3) = 0 [pid 5987] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5987] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5987] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5988], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5988 [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5988 attached [pid 5988] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5988] memfd_create("syzkaller", 0) = 3 [pid 5988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5980] <... ioctl resumed>) = 0 [pid 5980] close(4) = 0 [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] <... futex resumed>) = 0 [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = 0 [pid 5979] <... futex resumed>) = 1 [pid 5980] creat("./bus", 000 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] open("./bus", O_RDONLY [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... open resumed>) = 3 [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] fallocate(-1, 0, 0, 1048820 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5980] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5979] <... futex resumed>) = 0 [pid 5980] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5979] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5980] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5980] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5979] <... futex resumed>) = 0 [pid 5980] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5979] exit_group(0 [pid 5980] <... futex resumed>) = ? [pid 5979] <... exit_group resumed>) = ? [pid 5980] +++ exited with 0 +++ [pid 5979] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5979, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=42 /* 0.42 s */} --- [pid 5013] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./93/bus") = 0 [pid 5013] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./93/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./93") = 0 [pid 5013] mkdir("./94", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5983] <... write resumed>) = 16777216 [pid 5013] <... close resumed>) = 0 [pid 5983] munmap(0x7fe96bb4a000, 16777216 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5989 ./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5989] chdir("./94") = 0 [pid 5989] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5989] setpgid(0, 0) = 0 [pid 5989] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5983] <... munmap resumed>) = 0 [pid 5989] write(3, "1000", 4) = 4 [pid 5983] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5989] close(3 [pid 5983] <... openat resumed>) = 4 [pid 5989] <... close resumed>) = 0 [pid 5983] ioctl(4, LOOP_SET_FD, 3 [pid 5989] symlink("/dev/binderfs", "./binderfs" [pid 5983] <... ioctl resumed>) = 0 [pid 5989] <... symlink resumed>) = 0 [pid 5983] close(3 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... close resumed>) = 0 [pid 5989] <... futex resumed>) = 0 [pid 5983] mkdir("./bus", 0777 [pid 5989] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5983] <... mkdir resumed>) = 0 [pid 5989] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5983] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5989] <... mprotect resumed>) = 0 [pid 5989] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5990], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5990 [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5990] memfd_create("syzkaller", 0) = 3 [pid 5990] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5983] <... mount resumed>) = -1 EEXIST (File exists) [ 240.607922][ T5983] loop5: detected capacity change from 0 to 32768 [ 240.626170][ T5983] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5983) [pid 5983] ioctl(4, LOOP_CLR_FD [pid 5988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5984] <... write resumed>) = 16777216 [pid 5984] munmap(0x7fe96bb4a000, 16777216 [pid 5986] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5984] <... munmap resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5984] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5984] close(3) = 0 [pid 5984] mkdir("./bus", 0777) = 0 [pid 5984] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 240.781123][ T5984] loop4: detected capacity change from 0 to 32768 [ 240.797470][ T5984] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5984) [pid 5984] ioctl(4, LOOP_CLR_FD [pid 5983] <... ioctl resumed>) = 0 [pid 5983] close(4) = 0 [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] <... futex resumed>) = 0 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] <... futex resumed>) = 0 [pid 5983] open("./bus", O_RDONLY [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] <... open resumed>) = 3 [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] <... futex resumed>) = 0 [pid 5983] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] <... futex resumed>) = 0 [pid 5983] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] <... futex resumed>) = 0 [pid 5983] fallocate(-1, 0, 0, 1048820 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5982] <... futex resumed>) = 0 [pid 5983] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5982] <... futex resumed>) = 0 [pid 5983] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5982] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5983] <... futex resumed>) = 0 [pid 5982] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5983] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5982] <... futex resumed>) = 0 [pid 5983] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5982] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5983] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5982] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5983] <... futex resumed>) = 0 [pid 5982] exit_group(0) = ? [pid 5983] +++ exited with 0 +++ [pid 5982] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5982, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./93/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5990] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./93/bus") = 0 [pid 5015] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./93/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./93/binderfs" [pid 5984] <... ioctl resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5984] close(4 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./93") = 0 [pid 5015] mkdir("./94", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5984] <... close resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] close(3 [pid 5984] <... futex resumed>) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5015] <... close resumed>) = 0 [pid 5984] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5981] <... futex resumed>) = 0 [pid 5984] creat("./bus", 000 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 5991 [pid 5984] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5984] open("./bus", O_RDONLY [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5991 attached [pid 5984] <... open resumed>) = 3 [pid 5991] set_robust_list(0x5555561c25e0, 24 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5991] <... set_robust_list resumed>) = 0 [pid 5984] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] chdir("./94" [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5981] <... futex resumed>) = 0 [pid 5991] <... chdir resumed>) = 0 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5991] setpgid(0, 0) = 0 [pid 5991] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5984] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5991] <... openat resumed>) = 3 [pid 5984] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5991] write(3, "1000", 4 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... write resumed>) = 4 [pid 5984] <... futex resumed>) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5991] close(3 [pid 5984] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... close resumed>) = 0 [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5981] <... futex resumed>) = 0 [pid 5991] symlink("/dev/binderfs", "./binderfs" [pid 5984] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] <... symlink resumed>) = 0 [pid 5984] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5991] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5991] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... mmap resumed>) = 0x7fe973f4a000 [pid 5981] <... futex resumed>) = 0 [pid 5991] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] <... mprotect resumed>) = 0 [pid 5991] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5984] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5991] <... clone resumed>, parent_tid=[5993], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5993 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5991] <... futex resumed>) = 0 [pid 5984] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5984] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5981] <... futex resumed>) = 0 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5993 attached [pid 5984] <... futex resumed>) = 0 [pid 5981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] set_robust_list(0x7fe973f6a9e0, 24 [pid 5984] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5981] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... set_robust_list resumed>) = 0 [pid 5984] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5981] <... futex resumed>) = 0 [pid 5993] memfd_create("syzkaller", 0 [pid 5984] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5981] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... memfd_create resumed>) = 3 [pid 5988] <... write resumed>) = 16777216 [pid 5984] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5984] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5984] <... futex resumed>) = 1 [pid 5981] <... futex resumed>) = 0 [pid 5988] munmap(0x7fe96bb4a000, 16777216 [pid 5984] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5981] exit_group(0 [pid 5984] <... futex resumed>) = ? [pid 5981] <... exit_group resumed>) = ? [pid 5984] +++ exited with 0 +++ [pid 5981] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5981, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=42 /* 0.42 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5988] <... munmap resumed>) = 0 [pid 5988] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5988] <... openat resumed>) = 4 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5988] ioctl(4, LOOP_SET_FD, 3 [pid 5014] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, [pid 5988] <... ioctl resumed>) = 0 [pid 5988] close(3 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5988] <... close resumed>) = 0 [pid 5014] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5988] mkdir("./bus", 0777 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./94/bus", [pid 5988] <... mkdir resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5988] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5988] <... mount resumed>) = -1 EEXIST (File exists) [pid 5014] close(4 [pid 5988] ioctl(4, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./94/bus") = 0 [pid 5014] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./94/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./94") = 0 [pid 5014] mkdir("./95", 0777) = 0 [ 241.289465][ T5988] loop1: detected capacity change from 0 to 32768 [ 241.304495][ T5988] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (5988) [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5995 ./strace-static-x86_64: Process 5995 attached [pid 5995] set_robust_list(0x5555561c25e0, 24) = 0 [pid 5995] chdir("./95") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0 [pid 5986] <... write resumed>) = 16777216 [pid 5995] <... setpgid resumed>) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5986] munmap(0x7fe96bb4a000, 16777216 [pid 5995] write(3, "1000", 4) = 4 [pid 5995] close(3 [pid 5986] <... munmap resumed>) = 0 [pid 5995] <... close resumed>) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5995] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5995] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5996], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 5996 [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5986] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5996] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5986] <... openat resumed>) = 4 [pid 5986] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5986] close(3) = 0 [pid 5986] mkdir("./bus", 0777) = 0 [pid 5986] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 241.457263][ T5986] loop2: detected capacity change from 0 to 32768 [ 241.483078][ T5986] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (5986) [pid 5986] ioctl(4, LOOP_CLR_FD [pid 5990] <... write resumed>) = 16777216 [pid 5990] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5990] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5990] ioctl(4, LOOP_SET_FD, 3 [pid 5988] <... ioctl resumed>) = 0 [pid 5990] <... ioctl resumed>) = 0 [pid 5988] close(4 [pid 5990] close(3 [pid 5988] <... close resumed>) = 0 [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] <... close resumed>) = 0 [pid 5988] <... futex resumed>) = 1 [pid 5990] mkdir("./bus", 0777 [pid 5987] <... futex resumed>) = 0 [pid 5990] <... mkdir resumed>) = 0 [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] creat("./bus", 000 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] <... mount resumed>) = -1 EEXIST (File exists) [pid 5988] <... futex resumed>) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5990] ioctl(4, LOOP_CLR_FD [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] open("./bus", O_RDONLY [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... open resumed>) = 3 [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... open resumed>) = -1 EISDIR (Is a directory) [ 241.699557][ T5990] loop3: detected capacity change from 0 to 32768 [ 241.737189][ T5990] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (5990) [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] fallocate(-1, 0, 0, 1048820 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5987] <... futex resumed>) = 0 [pid 5988] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5987] <... futex resumed>) = 0 [pid 5988] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5987] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5988] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5987] <... futex resumed>) = 0 [pid 5988] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5987] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5988] <... futex resumed>) = 0 [pid 5987] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5988] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5987] exit_group(0 [pid 5988] <... futex resumed>) = ? [pid 5987] <... exit_group resumed>) = ? [pid 5986] <... ioctl resumed>) = 0 [pid 5988] +++ exited with 0 +++ [pid 5987] +++ exited with 0 +++ [pid 5986] close(4 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5987, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=37 /* 0.37 s */} --- [pid 5011] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5986] <... close resumed>) = 0 [pid 5011] getdents64(4, [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5986] <... futex resumed>) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5011] getdents64(4, [pid 5986] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] <... futex resumed>) = 0 [pid 5011] close(4 [pid 5986] creat("./bus", 000 [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... close resumed>) = 0 [pid 5986] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5011] rmdir("./95/bus" [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... rmdir resumed>) = 0 [pid 5986] <... futex resumed>) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5011] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5986] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] <... futex resumed>) = 0 [pid 5011] lstat("./95/binderfs", [pid 5986] open("./bus", O_RDONLY [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5986] <... open resumed>) = 3 [pid 5011] unlink("./95/binderfs" [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... unlink resumed>) = 0 [pid 5986] <... futex resumed>) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5011] getdents64(3, [pid 5986] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] <... futex resumed>) = 0 [pid 5011] close(3 [pid 5986] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... close resumed>) = 0 [pid 5986] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5011] rmdir("./95" [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... rmdir resumed>) = 0 [pid 5986] <... futex resumed>) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5011] mkdir("./96", 0777 [pid 5986] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... mkdir resumed>) = 0 [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5986] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 3 [pid 5986] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5986] <... futex resumed>) = 1 [pid 5985] <... futex resumed>) = 0 [pid 5011] close(3 [pid 5986] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 5999 [pid 5986] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5985] <... futex resumed>) = 0 [pid 5986] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5986] <... futex resumed>) = 0 [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5985] <... futex resumed>) = 0 [pid 5986] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5986] <... futex resumed>) = 0 [pid 5985] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5986] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5985] <... futex resumed>) = 0 [pid 5986] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5985] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5986] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5986] <... futex resumed>) = 0 [pid 5985] exit_group(0) = ? [pid 5986] +++ exited with 0 +++ [pid 5985] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5985, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=44 /* 0.44 s */} --- ./strace-static-x86_64: Process 5999 attached [pid 5012] umount2("./92", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5999] set_robust_list(0x5555561c25e0, 24 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5999] <... set_robust_list resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./92", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5999] chdir("./96" [pid 5012] <... openat resumed>) = 3 [pid 5999] <... chdir resumed>) = 0 [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./92/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./92/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./92/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5012] <... openat resumed>) = 4 [pid 5999] <... prctl resumed>) = 0 [pid 5012] fstat(4, [pid 5999] setpgid(0, 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5999] <... setpgid resumed>) = 0 [pid 5012] getdents64(4, [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, [pid 5999] <... openat resumed>) = 3 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./92/bus" [pid 5999] write(3, "1000", 4 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] umount2("./92/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5999] <... write resumed>) = 4 [pid 5012] lstat("./92/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./92/binderfs" [pid 5999] close(3 [pid 5012] <... unlink resumed>) = 0 [pid 5999] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 5999] symlink("/dev/binderfs", "./binderfs" [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3 [pid 5999] <... symlink resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./92" [pid 5999] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... rmdir resumed>) = 0 [pid 5999] <... futex resumed>) = 0 [pid 5012] mkdir("./93", 0777 [pid 5999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5999] <... mmap resumed>) = 0x7fe973f4a000 [pid 5990] <... ioctl resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5999] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6000 ./strace-static-x86_64: Process 6000 attached [pid 6000] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6000] chdir("./93" [pid 5999] <... mprotect resumed>) = 0 [pid 5990] close(4 [pid 6000] <... chdir resumed>) = 0 [pid 6000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5999] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6000] setpgid(0, 0 [pid 5990] <... close resumed>) = 0 [pid 6000] <... setpgid resumed>) = 0 [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5999] <... clone resumed>, parent_tid=[6001], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6001 [pid 5990] <... futex resumed>) = 1 [pid 5989] <... futex resumed>) = 0 [pid 6000] <... openat resumed>) = 3 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] write(3, "1000", 4 [pid 5999] <... futex resumed>) = 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 6000] <... write resumed>) = 4 [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5990] creat("./bus", 000 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6001 attached [pid 6000] close(3 [pid 5990] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6001] set_robust_list(0x7fe973f6a9e0, 24 [pid 6000] <... close resumed>) = 0 [pid 6001] <... set_robust_list resumed>) = 0 [pid 6000] symlink("/dev/binderfs", "./binderfs" [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] memfd_create("syzkaller", 0 [pid 6000] <... symlink resumed>) = 0 [pid 5990] <... futex resumed>) = 1 [pid 5989] <... futex resumed>) = 0 [pid 6001] <... memfd_create resumed>) = 3 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6000] <... futex resumed>) = 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 6001] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5990] open("./bus", O_RDONLY [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] <... mmap resumed>) = 0x7fe973f4a000 [pid 5990] <... open resumed>) = 3 [pid 6000] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] <... mprotect resumed>) = 0 [pid 5990] <... futex resumed>) = 1 [pid 5989] <... futex resumed>) = 0 [pid 6000] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 6000] <... clone resumed>, parent_tid=[6002], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6002 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6000] <... futex resumed>) = 0 [pid 5990] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5989] <... futex resumed>) = 0 [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6002 attached [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 5990] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6002] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] memfd_create("syzkaller", 0 [pid 5990] <... futex resumed>) = 1 [pid 5989] <... futex resumed>) = 0 [pid 6002] <... memfd_create resumed>) = 3 [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] <... futex resumed>) = 0 [pid 6002] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5990] fallocate(-1, 0, 0, 1048820 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5990] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... futex resumed>) = 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5989] <... futex resumed>) = 0 [pid 5990] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5989] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5990] <... futex resumed>) = 0 [pid 5989] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5989] <... futex resumed>) = 0 [pid 5989] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5990] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5990] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5989] <... futex resumed>) = 0 [pid 5989] exit_group(0) = ? [pid 5990] +++ exited with 0 +++ [pid 5989] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5989, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./94/bus") = 0 [pid 5013] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./94/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./94") = 0 [pid 5013] mkdir("./95", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6003 ./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6003] chdir("./95") = 0 [pid 6003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6003] setpgid(0, 0) = 0 [pid 6003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6003] write(3, "1000", 4) = 4 [pid 6003] close(3) = 0 [pid 6003] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6003] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6003] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6004], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6004 [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6004 attached [pid 6004] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6004] memfd_create("syzkaller", 0) = 3 [pid 6004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5993] <... write resumed>) = 16777216 [pid 5993] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5993] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6001] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5993] <... openat resumed>) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3 [pid 5996] <... write resumed>) = 16777216 [pid 5996] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 5993] <... ioctl resumed>) = 0 [pid 5996] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5993] close(3) = 0 [pid 5996] <... openat resumed>) = 4 [pid 5993] mkdir("./bus", 0777 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5993] <... mkdir resumed>) = 0 [pid 5996] <... ioctl resumed>) = 0 [ 242.500950][ T5993] loop5: detected capacity change from 0 to 32768 [ 242.538060][ T5996] loop4: detected capacity change from 0 to 32768 [pid 5993] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5996] close(3 [pid 5993] <... mount resumed>) = -1 EEXIST (File exists) [pid 5996] <... close resumed>) = 0 [pid 5993] ioctl(4, LOOP_CLR_FD [pid 5996] mkdir("./bus", 0777) = 0 [pid 5996] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5996] <... mount resumed>) = -1 EEXIST (File exists) [ 242.547909][ T5993] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (5993) [ 242.588487][ T5996] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (5996) [pid 5996] ioctl(4, LOOP_CLR_FD [pid 5993] <... ioctl resumed>) = 0 [pid 5993] close(4) = 0 [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = 1 [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5993] creat("./bus", 000 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] <... futex resumed>) = 0 [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDONLY [pid 5991] <... futex resumed>) = 0 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... open resumed>) = 3 [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = 1 [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5991] <... futex resumed>) = 0 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] <... futex resumed>) = 0 [pid 5993] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5991] <... futex resumed>) = 0 [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5991] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] fallocate(-1, 0, 0, 1048820 [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5991] <... futex resumed>) = 0 [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5991] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] <... futex resumed>) = 0 [pid 5993] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] <... futex resumed>) = 0 [pid 5993] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5991] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] <... futex resumed>) = 0 [pid 5993] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5991] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5993] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] <... futex resumed>) = 0 [pid 5993] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5991] exit_group(0 [pid 5993] <... futex resumed>) = ? [pid 5991] <... exit_group resumed>) = ? [pid 5993] +++ exited with 0 +++ [pid 5991] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5991, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=43 /* 0.43 s */} --- [pid 5015] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6002] <... write resumed>) = 16777216 [pid 5015] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6002] munmap(0x7fe96bb4a000, 16777216 [pid 5996] <... ioctl resumed>) = 0 [pid 5015] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./94/bus") = 0 [pid 5015] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./94/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5996] close(4 [pid 5015] rmdir("./94" [pid 5996] <... close resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./95", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6007 ./strace-static-x86_64: Process 6007 attached [pid 6007] set_robust_list(0x5555561c25e0, 24 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... set_robust_list resumed>) = 0 [pid 5996] <... futex resumed>) = 1 [pid 5995] <... futex resumed>) = 0 [pid 6007] chdir("./95" [pid 5996] creat("./bus", 000 [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... chdir resumed>) = 0 [pid 5996] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6007] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5996] <... futex resumed>) = 0 [pid 6007] <... prctl resumed>) = 0 [pid 5996] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6007] setpgid(0, 0 [pid 5995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... setpgid resumed>) = 0 [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6002] <... munmap resumed>) = 0 [pid 5996] <... futex resumed>) = 0 [pid 5995] <... futex resumed>) = 1 [pid 6007] <... openat resumed>) = 3 [pid 6002] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5996] open("./bus", O_RDONLY [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6007] write(3, "1000", 4 [pid 5996] <... open resumed>) = 3 [pid 6007] <... write resumed>) = 4 [pid 6007] close(3 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... close resumed>) = 0 [pid 5996] <... futex resumed>) = 1 [pid 5995] <... futex resumed>) = 0 [pid 6007] symlink("/dev/binderfs", "./binderfs" [pid 5996] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... symlink resumed>) = 0 [pid 5996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5995] <... futex resumed>) = 0 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... openat resumed>) = 4 [pid 5996] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6007] <... futex resumed>) = 0 [pid 5996] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6002] ioctl(4, LOOP_SET_FD, 3 [pid 6007] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... mmap resumed>) = 0x7fe973f4a000 [pid 6002] <... ioctl resumed>) = 0 [pid 5996] <... futex resumed>) = 1 [pid 5995] <... futex resumed>) = 0 [pid 6007] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5996] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] <... mprotect resumed>) = 0 [pid 5996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5995] <... futex resumed>) = 0 [pid 6007] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5996] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6007] <... clone resumed>, parent_tid=[6008], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6008 [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6008 attached [pid 6008] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5996] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5996] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] memfd_create("syzkaller", 0 [pid 5996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5995] <... futex resumed>) = 0 [pid 6008] <... memfd_create resumed>) = 3 [pid 5996] fallocate(-1, 0, 0, 1048820 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5996] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6008] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5996] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5996] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5995] <... futex resumed>) = 0 [pid 5996] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] close(3 [pid 5996] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6002] <... close resumed>) = 0 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] mkdir("./bus", 0777 [pid 5996] <... futex resumed>) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6002] <... mkdir resumed>) = 0 [pid 5996] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5996] <... futex resumed>) = 1 [pid 5995] <... futex resumed>) = 0 [pid 5995] exit_group(0) = ? [ 243.068727][ T6002] loop2: detected capacity change from 0 to 32768 [pid 6001] <... write resumed>) = 16777216 [pid 5996] +++ exited with 0 +++ [pid 5995] +++ exited with 0 +++ [pid 6001] munmap(0x7fe96bb4a000, 16777216 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=38 /* 0.38 s */} --- [pid 5014] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./95/bus") = 0 [pid 5014] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6002] <... mount resumed>) = -1 EEXIST (File exists) [pid 6001] <... munmap resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6001] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] unlink("./95/binderfs" [pid 6002] ioctl(4, LOOP_CLR_FD [pid 6001] <... openat resumed>) = 4 [pid 5014] <... unlink resumed>) = 0 [pid 6001] ioctl(4, LOOP_SET_FD, 3 [pid 5014] getdents64(3, [pid 6001] <... ioctl resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./95") = 0 [pid 5014] mkdir("./96", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6009 ./strace-static-x86_64: Process 6009 attached [pid 6009] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6009] chdir("./96" [pid 6001] close(3 [pid 6009] <... chdir resumed>) = 0 [pid 6001] <... close resumed>) = 0 [pid 6009] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6001] mkdir("./bus", 0777 [pid 6009] <... prctl resumed>) = 0 [pid 6001] <... mkdir resumed>) = 0 [pid 6009] setpgid(0, 0 [ 243.127453][ T6002] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6002) [ 243.167033][ T6001] loop1: detected capacity change from 0 to 32768 [pid 6001] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6009] <... setpgid resumed>) = 0 [pid 6009] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6009] write(3, "1000", 4) = 4 [pid 6009] close(3) = 0 [pid 6009] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6009] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6009] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6010], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6010 [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6001] <... mount resumed>) = -1 EEXIST (File exists) [pid 6001] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6010 attached [pid 6010] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6010] memfd_create("syzkaller", 0) = 3 [pid 6010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 243.200359][ T6001] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6001) [pid 6004] <... write resumed>) = 16777216 [pid 6004] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6004] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6004] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6004] close(3) = 0 [pid 6004] mkdir("./bus", 0777) = 0 [pid 6004] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 243.307635][ T6004] loop3: detected capacity change from 0 to 32768 [ 243.335442][ T6004] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6004) [pid 6004] ioctl(4, LOOP_CLR_FD [pid 6008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6001] <... ioctl resumed>) = 0 [pid 6001] close(4) = 0 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... futex resumed>) = 0 [pid 6001] <... futex resumed>) = 1 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] creat("./bus", 000 [pid 5999] <... futex resumed>) = 0 [pid 6001] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... futex resumed>) = 0 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6001] open("./bus", O_RDONLY) = 3 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5999] <... futex resumed>) = 0 [pid 6002] <... ioctl resumed>) = 0 [pid 6001] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] close(4 [pid 5999] <... futex resumed>) = 0 [pid 6002] <... close resumed>) = 0 [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6002] <... futex resumed>) = 1 [pid 6000] <... futex resumed>) = 0 [pid 6002] creat("./bus", 000 [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6000] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... futex resumed>) = 0 [pid 6000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] <... futex resumed>) = 0 [pid 6002] open("./bus", O_RDONLY [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... open resumed>) = 3 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6001] <... futex resumed>) = 1 [pid 6000] <... futex resumed>) = 0 [pid 5999] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] <... futex resumed>) = 0 [pid 6002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... futex resumed>) = 0 [pid 6001] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6002] <... futex resumed>) = 1 [pid 6000] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] <... futex resumed>) = 0 [pid 6002] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6000] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6000] <... futex resumed>) = 0 [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] fallocate(-1, 0, 0, 1048820 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6001] <... futex resumed>) = 0 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] fallocate(-1, 0, 0, 1048820 [pid 5999] <... futex resumed>) = 0 [pid 6002] <... futex resumed>) = 1 [pid 6000] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] <... futex resumed>) = 0 [pid 5999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6001] <... futex resumed>) = 0 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6001] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5999] <... futex resumed>) = 0 [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6001] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... futex resumed>) = 1 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] <... futex resumed>) = 0 [pid 5999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6001] <... futex resumed>) = 0 [pid 6000] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6001] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6000] <... futex resumed>) = 0 [pid 5999] <... futex resumed>) = 0 [pid 6002] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6001] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6000] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5999] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6002] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6001] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6002] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6001] <... futex resumed>) = 0 [pid 6000] <... futex resumed>) = 0 [pid 5999] exit_group(0 [pid 6002] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6000] exit_group(0 [pid 5999] <... exit_group resumed>) = ? [pid 6002] <... futex resumed>) = ? [pid 6001] +++ exited with 0 +++ [pid 6000] <... exit_group resumed>) = ? [pid 6002] +++ exited with 0 +++ [pid 6000] +++ exited with 0 +++ [pid 5999] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6000, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=36 /* 0.36 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...> [pid 5011] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... restart_syscall resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] umount2("./93", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] fstat(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] openat(AT_FDCWD, "./93", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] getdents64(3, [pid 5012] <... openat resumed>) = 3 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] fstat(3, [pid 5011] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(3, [pid 5011] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] lstat("./93/bus", [pid 5011] close(4 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... close resumed>) = 0 [pid 5012] umount2("./93/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] rmdir("./96/bus" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./93/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 4 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] fstat(4, [pid 5011] lstat("./96/binderfs", [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] getdents64(4, [pid 5011] unlink("./96/binderfs" [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... unlink resumed>) = 0 [pid 5012] getdents64(4, [pid 5011] getdents64(3, [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 5011] close(3 [pid 5012] <... close resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5012] rmdir("./93/bus" [pid 5011] rmdir("./96" [pid 5012] <... rmdir resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5012] umount2("./93/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] mkdir("./97", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... mkdir resumed>) = 0 [pid 5012] lstat("./93/binderfs", [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... openat resumed>) = 3 [pid 5012] unlink("./93/binderfs" [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5012] <... unlink resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] getdents64(3, [pid 5011] close(3 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... close resumed>) = 0 [pid 5012] close(3 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./93" [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6011 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./94", 0777) = 0 ./strace-static-x86_64: Process 6011 attached [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6011] set_robust_list(0x5555561c25e0, 24 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] close(3 [pid 6011] <... set_robust_list resumed>) = 0 [pid 6011] chdir("./97" [pid 5012] <... close resumed>) = 0 [pid 6011] <... chdir resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6011] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6012 [pid 6011] setpgid(0, 0) = 0 [pid 6011] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6004] <... ioctl resumed>) = 0 [pid 6011] write(3, "1000", 4 [pid 6004] close(4 [pid 6011] <... write resumed>) = 4 [pid 6011] close(3 [pid 6004] <... close resumed>) = 0 [pid 6011] <... close resumed>) = 0 [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6012 attached [pid 6011] symlink("/dev/binderfs", "./binderfs" [pid 6012] set_robust_list(0x5555561c25e0, 24 [pid 6011] <... symlink resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6012] <... set_robust_list resumed>) = 0 [pid 6011] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] creat("./bus", 000 [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] chdir("./94" [pid 6011] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = 0 [pid 6004] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6012] <... chdir resumed>) = 0 [pid 6011] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6012] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6011] <... mmap resumed>) = 0x7fe973f4a000 [pid 6012] <... prctl resumed>) = 0 [pid 6011] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6012] setpgid(0, 0 [pid 6011] <... mprotect resumed>) = 0 [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] <... setpgid resumed>) = 0 [pid 6011] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6004] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6004] open("./bus", O_RDONLY [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] <... openat resumed>) = 3 [pid 6011] <... clone resumed>, parent_tid=[6013], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6013 [pid 6004] <... open resumed>) = 3 [pid 6003] <... futex resumed>) = 0 [pid 6012] write(3, "1000", 4 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6012] <... write resumed>) = 4 [pid 6011] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 0 [pid 6003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] close(3 [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6013 attached [pid 6012] <... close resumed>) = 0 [pid 6004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 6013] set_robust_list(0x7fe973f6a9e0, 24 [pid 6012] symlink("/dev/binderfs", "./binderfs" [pid 6004] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] <... set_robust_list resumed>) = 0 [pid 6012] <... symlink resumed>) = 0 [pid 6004] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6013] memfd_create("syzkaller", 0 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] <... memfd_create resumed>) = 3 [pid 6012] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6013] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6012] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6012] <... mmap resumed>) = 0x7fe973f4a000 [pid 6004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 6012] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6004] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6012] <... mprotect resumed>) = 0 [pid 6004] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6012] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6012] <... clone resumed>, parent_tid=[6014], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6014 [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 6012] <... futex resumed>) = 0 [pid 6004] fallocate(-1, 0, 0, 1048820 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6004] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] <... futex resumed>) = 0 [pid 6004] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6014 attached [pid 6004] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6004] <... futex resumed>) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] memfd_create("syzkaller", 0 [pid 6003] <... futex resumed>) = 0 [pid 6004] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6003] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6004] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6014] <... memfd_create resumed>) = 3 [pid 6014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6004] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6014] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6004] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6003] <... futex resumed>) = 0 [pid 6004] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6003] exit_group(0 [pid 6004] <... futex resumed>) = ? [pid 6003] <... exit_group resumed>) = ? [pid 6004] +++ exited with 0 +++ [pid 6003] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6003, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./95/bus") = 0 [pid 5013] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./95/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./95") = 0 [pid 5013] mkdir("./96", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6015 ./strace-static-x86_64: Process 6015 attached [pid 6015] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6015] chdir("./96") = 0 [pid 6015] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6015] setpgid(0, 0) = 0 [pid 6015] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6015] write(3, "1000", 4) = 4 [pid 6015] close(3) = 0 [pid 6015] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6015] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6015] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6015] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6016], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6016 [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6016 attached [pid 6016] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6016] memfd_create("syzkaller", 0) = 3 [pid 6016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6008] <... write resumed>) = 16777216 [pid 6008] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6008] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6008] close(3) = 0 [pid 6008] mkdir("./bus", 0777) = 0 [pid 6010] <... write resumed>) = 16777216 [pid 6008] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6010] munmap(0x7fe96bb4a000, 16777216 [pid 6013] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6010] <... munmap resumed>) = 0 [pid 6014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6010] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6008] <... mount resumed>) = -1 EEXIST (File exists) [pid 6008] ioctl(4, LOOP_CLR_FD [pid 6010] <... openat resumed>) = 4 [ 244.187713][ T6008] loop5: detected capacity change from 0 to 32768 [ 244.221138][ T6008] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6008) [pid 6010] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6010] close(3) = 0 [pid 6010] mkdir("./bus", 0777) = 0 [ 244.254624][ T6010] loop4: detected capacity change from 0 to 32768 [pid 6010] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 244.311065][ T6010] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6010) [pid 6010] ioctl(4, LOOP_CLR_FD [pid 6016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6008] <... ioctl resumed>) = 0 [pid 6008] close(4) = 0 [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] creat("./bus", 000 [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... futex resumed>) = 0 [pid 6007] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] open("./bus", O_RDONLY [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... open resumed>) = 3 [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] fallocate(-1, 0, 0, 1048820 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6007] <... futex resumed>) = 0 [pid 6008] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6007] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6008] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6008] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6007] <... futex resumed>) = 0 [pid 6008] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6007] exit_group(0 [pid 6008] <... futex resumed>) = ? [pid 6007] <... exit_group resumed>) = ? [pid 6008] +++ exited with 0 +++ [pid 6007] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6007, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=49 /* 0.49 s */} --- [pid 5015] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./95/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./95/bus") = 0 [pid 5015] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./95/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./95") = 0 [pid 5015] mkdir("./96", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6010] <... ioctl resumed>) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6017 ./strace-static-x86_64: Process 6017 attached [pid 6017] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6017] chdir("./96" [pid 6010] close(4 [pid 6017] <... chdir resumed>) = 0 [pid 6017] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6017] setpgid(0, 0) = 0 [pid 6017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6010] <... close resumed>) = 0 [pid 6017] <... openat resumed>) = 3 [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] write(3, "1000", 4 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6017] <... write resumed>) = 4 [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] close(3 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6017] <... close resumed>) = 0 [pid 6010] creat("./bus", 000 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] symlink("/dev/binderfs", "./binderfs" [pid 6010] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6017] <... symlink resumed>) = 0 [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6017] <... futex resumed>) = 0 [pid 6010] open("./bus", O_RDONLY [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6010] <... open resumed>) = 3 [pid 6009] <... futex resumed>) = 0 [pid 6017] <... mmap resumed>) = 0x7fe973f4a000 [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6010] <... futex resumed>) = 0 [pid 6009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... mprotect resumed>) = 0 [pid 6010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6010] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6009] <... futex resumed>) = 0 [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6017] <... clone resumed>, parent_tid=[6018], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6018 [pid 6010] <... futex resumed>) = 0 [pid 6009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... write resumed>) = 16777216 [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6017] <... futex resumed>) = 0 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6010] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6018 attached [pid 6018] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6018] memfd_create("syzkaller", 0) = 3 [pid 6018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6010] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6014] munmap(0x7fe96bb4a000, 16777216 [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6010] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... munmap resumed>) = 0 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6014] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... openat resumed>) = 4 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6014] ioctl(4, LOOP_SET_FD, 3 [pid 6010] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... ioctl resumed>) = 0 [pid 6010] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] close(3 [pid 6010] <... futex resumed>) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6014] <... close resumed>) = 0 [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] mkdir("./bus", 0777 [pid 6010] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6009] <... futex resumed>) = 0 [pid 6010] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6009] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... mkdir resumed>) = 0 [pid 6010] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6014] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6010] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6009] <... futex resumed>) = 0 [pid 6010] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6009] exit_group(0 [pid 6013] <... write resumed>) = 16777216 [pid 6013] munmap(0x7fe96bb4a000, 16777216 [pid 6010] <... futex resumed>) = ? [pid 6009] <... exit_group resumed>) = ? [pid 6010] +++ exited with 0 +++ [pid 6009] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6009, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=41 /* 0.41 s */} --- [pid 5014] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, [pid 6016] <... write resumed>) = 16777216 [pid 6014] <... mount resumed>) = -1 EEXIST (File exists) [pid 6013] <... munmap resumed>) = 0 [pid 6016] munmap(0x7fe96bb4a000, 16777216 [pid 6014] ioctl(4, LOOP_CLR_FD [pid 6016] <... munmap resumed>) = 0 [pid 6013] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6013] <... openat resumed>) = 4 [pid 5014] getdents64(3, [ 244.837332][ T6014] loop2: detected capacity change from 0 to 32768 [ 244.853627][ T6014] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6014) [pid 6013] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6016] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5014] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6013] <... ioctl resumed>) = 0 [pid 6013] close(3 [pid 5014] lstat("./96/bus", [pid 6013] <... close resumed>) = 0 [pid 6013] mkdir("./bus", 0777 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6013] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6013] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./96/bus") = 0 [pid 6016] <... ioctl resumed>) = 0 [pid 6016] close(3) = 0 [pid 6016] mkdir("./bus", 0777 [pid 5014] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./96/binderfs", [pid 6016] <... mkdir resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./96/binderfs" [pid 6016] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] <... unlink resumed>) = 0 [pid 5014] getdents64(3, [pid 6013] <... mount resumed>) = -1 EEXIST (File exists) [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 6013] ioctl(4, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [ 244.895451][ T6013] loop1: detected capacity change from 0 to 32768 [ 244.904373][ T6016] loop3: detected capacity change from 0 to 32768 [ 244.919762][ T6013] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6013) [pid 5014] rmdir("./96") = 0 [pid 5014] mkdir("./97", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6019 ./strace-static-x86_64: Process 6019 attached [pid 6016] <... mount resumed>) = -1 EEXIST (File exists) [pid 6016] ioctl(4, LOOP_CLR_FD [pid 6019] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6019] chdir("./97") = 0 [pid 6019] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6019] setpgid(0, 0) = 0 [pid 6019] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 244.957474][ T6016] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6016) [pid 6019] write(3, "1000", 4) = 4 [pid 6019] close(3) = 0 [pid 6019] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6019] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6019] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6020], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6020 [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6020] memfd_create("syzkaller", 0) = 3 [pid 6020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6014] <... ioctl resumed>) = 0 [pid 6014] close(4) = 0 [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] <... futex resumed>) = 0 [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6014] <... futex resumed>) = 0 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = 0 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = 1 [pid 6014] open("./bus", O_RDONLY) = 3 [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6012] <... futex resumed>) = 0 [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... futex resumed>) = 0 [pid 6012] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] <... futex resumed>) = 0 [pid 6014] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] <... futex resumed>) = 0 [pid 6014] fallocate(-1, 0, 0, 1048820 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] <... futex resumed>) = 0 [pid 6014] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6014] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6012] <... futex resumed>) = 0 [pid 6014] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6012] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6014] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6014] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6012] <... futex resumed>) = 0 [pid 6014] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6012] exit_group(0 [pid 6014] <... futex resumed>) = ? [pid 6012] <... exit_group resumed>) = ? [pid 6014] +++ exited with 0 +++ [pid 6012] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6012, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=34 /* 0.34 s */} --- [pid 5012] umount2("./94", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./94", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./94/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./94/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./94/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./94/bus") = 0 [pid 5012] umount2("./94/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./94/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./94/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./94") = 0 [pid 5012] mkdir("./95", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6021 [pid 6013] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6021 attached [pid 6021] set_robust_list(0x5555561c25e0, 24 [pid 6013] close(4 [pid 6021] <... set_robust_list resumed>) = 0 [pid 6016] <... ioctl resumed>) = 0 [pid 6013] <... close resumed>) = 0 [pid 6021] chdir("./95" [pid 6016] close(4 [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... chdir resumed>) = 0 [pid 6016] <... close resumed>) = 0 [pid 6013] <... futex resumed>) = 1 [pid 6011] <... futex resumed>) = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... prctl resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6011] <... futex resumed>) = 0 [pid 6021] setpgid(0, 0 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] creat("./bus", 000 [pid 6021] <... setpgid resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 6013] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6016] creat("./bus", 000 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... openat resumed>) = 3 [pid 6016] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] write(3, "1000", 4 [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] open("./bus", O_RDONLY [pid 6011] <... futex resumed>) = 0 [pid 6021] <... write resumed>) = 4 [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] <... open resumed>) = 3 [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] close(3 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... close resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] symlink("/dev/binderfs", "./binderfs" [pid 6016] open("./bus", O_RDONLY [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6011] <... futex resumed>) = 0 [pid 6021] <... symlink resumed>) = 0 [pid 6016] <... open resumed>) = 3 [pid 6013] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6011] <... futex resumed>) = 0 [pid 6021] <... mmap resumed>) = 0x7fe973f4a000 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 6013] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6016] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... mprotect resumed>) = 0 [pid 6016] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] fallocate(-1, 0, 0, 1048820 [pid 6011] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6022 attached [pid 6021] <... clone resumed>, parent_tid=[6022], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6022 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] set_robust_list(0x7fe973f6a9e0, 24 [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... set_robust_list resumed>) = 0 [pid 6021] <... futex resumed>) = 0 [pid 6016] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6011] <... futex resumed>) = 0 [pid 6022] memfd_create("syzkaller", 0 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6016] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6013] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] <... memfd_create resumed>) = 3 [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] <... futex resumed>) = 0 [pid 6011] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6013] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6011] <... futex resumed>) = 0 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 6013] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6011] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] fallocate(-1, 0, 0, 1048820 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6013] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6016] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6013] <... futex resumed>) = 0 [pid 6011] exit_group(0 [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6011] <... exit_group resumed>) = ? [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6013] +++ exited with 0 +++ [pid 6011] +++ exited with 0 +++ [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6011, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=37 /* 0.37 s */} --- [pid 6018] <... write resumed>) = 16777216 [pid 6016] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 6018] munmap(0x7fe96bb4a000, 16777216 [pid 6016] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5011] <... restart_syscall resumed>) = 0 [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6016] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6015] <... futex resumed>) = 0 [pid 5011] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6016] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6015] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6016] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6016] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6016] <... futex resumed>) = 1 [pid 6015] <... futex resumed>) = 0 [pid 6016] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6015] exit_group(0 [pid 5011] <... openat resumed>) = 3 [pid 6016] <... futex resumed>) = ? [pid 6015] <... exit_group resumed>) = ? [pid 5011] fstat(3, [pid 6016] +++ exited with 0 +++ [pid 6015] +++ exited with 0 +++ [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6018] <... munmap resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6015, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5011] getdents64(3, [pid 6018] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6018] ioctl(4, LOOP_SET_FD, 3 [pid 5013] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6018] close(3 [pid 5013] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] lstat("./97/bus", [pid 6018] <... close resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6018] mkdir("./bus", 0777 [pid 5013] fstat(3, [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] <... mkdir resumed>) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6018] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] getdents64(3, [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./96/bus") = 0 [pid 5011] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] <... openat resumed>) = 4 [pid 5013] lstat("./96/binderfs", [pid 5011] fstat(4, [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./96/binderfs" [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6018] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] <... unlink resumed>) = 0 [pid 5011] getdents64(4, [pid 5013] getdents64(3, [pid 6018] ioctl(4, LOOP_CLR_FD [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] close(3 [pid 5011] getdents64(4, [pid 5013] <... close resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] rmdir("./96" [pid 5011] close(4 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./97", 0777 [pid 5011] <... close resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5011] rmdir("./97/bus" [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5011] <... rmdir resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5011] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6023 ./strace-static-x86_64: Process 6023 attached [pid 5011] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./97/binderfs") = 0 [pid 5011] getdents64(3, [pid 6023] set_robust_list(0x5555561c25e0, 24 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6023] <... set_robust_list resumed>) = 0 [pid 5011] close(3 [pid 6023] chdir("./97") = 0 [pid 5011] <... close resumed>) = 0 [pid 6023] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5011] rmdir("./97" [pid 6023] <... prctl resumed>) = 0 [pid 6023] setpgid(0, 0 [pid 5011] <... rmdir resumed>) = 0 [pid 6023] <... setpgid resumed>) = 0 [pid 5011] mkdir("./98", 0777 [ 245.559198][ T6018] loop5: detected capacity change from 0 to 32768 [ 245.585792][ T6018] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6018) [pid 6023] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5011] <... mkdir resumed>) = 0 [pid 6023] write(3, "1000", 4 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6023] <... write resumed>) = 4 [pid 5011] <... openat resumed>) = 3 [pid 6023] close(3 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 6023] <... close resumed>) = 0 [pid 6023] symlink("/dev/binderfs", "./binderfs" [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6023] <... symlink resumed>) = 0 [pid 5011] close(3 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... close resumed>) = 0 [pid 6023] <... futex resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6023] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6023] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6024 [pid 6023] <... mprotect resumed>) = 0 [pid 6023] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6025], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6025 [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6024 attached [pid 6024] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6024] chdir("./98") = 0 [pid 6024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6024] setpgid(0, 0) = 0 [pid 6024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6024] write(3, "1000", 4./strace-static-x86_64: Process 6025 attached ) = 4 [pid 6024] close(3 [pid 6025] set_robust_list(0x7fe973f6a9e0, 24 [pid 6024] <... close resumed>) = 0 [pid 6025] <... set_robust_list resumed>) = 0 [pid 6024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6025] memfd_create("syzkaller", 0 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6025] <... memfd_create resumed>) = 3 [pid 6024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6024] <... mmap resumed>) = 0x7fe973f4a000 [pid 6025] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6024] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6024] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6026], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6026 [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6026 attached [pid 6026] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6026] memfd_create("syzkaller", 0) = 3 [pid 6026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6018] <... ioctl resumed>) = 0 [pid 6018] close(4) = 0 [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] creat("./bus", 000 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] open("./bus", O_RDONLY [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... open resumed>) = 3 [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] fallocate(-1, 0, 0, 1048820 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6018] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6018] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6017] <... futex resumed>) = 0 [pid 6018] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6017] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6018] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6018] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6017] <... futex resumed>) = 0 [pid 6018] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6017] exit_group(0 [pid 6018] <... futex resumed>) = ? [pid 6017] <... exit_group resumed>) = ? [pid 6018] +++ exited with 0 +++ [pid 6017] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6017, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} --- [pid 5015] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./96/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./96/bus") = 0 [pid 5015] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./96/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./96/binderfs" [pid 6026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./96") = 0 [pid 5015] mkdir("./97", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6027 [pid 6020] <... write resumed>) = 16777216 [pid 6020] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 6027 attached [pid 6027] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6027] chdir("./97") = 0 [pid 6027] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6027] setpgid(0, 0) = 0 [pid 6027] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6027] write(3, "1000", 4) = 4 [pid 6027] close(3) = 0 [pid 6027] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6027] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6027] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6027] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6028], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6028 [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6020] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6028 attached [pid 6020] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6028] set_robust_list(0x7fe973f6a9e0, 24 [pid 6020] <... openat resumed>) = 4 [pid 6028] <... set_robust_list resumed>) = 0 [pid 6020] ioctl(4, LOOP_SET_FD, 3 [pid 6028] memfd_create("syzkaller", 0) = 3 [pid 6028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6020] <... ioctl resumed>) = 0 [pid 6020] close(3) = 0 [pid 6020] mkdir("./bus", 0777) = 0 [pid 6020] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6022] <... write resumed>) = 16777216 [pid 6022] munmap(0x7fe96bb4a000, 16777216 [pid 6020] <... mount resumed>) = -1 EEXIST (File exists) [ 246.273039][ T6020] loop4: detected capacity change from 0 to 32768 [ 246.307281][ T6020] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6020) [pid 6020] ioctl(4, LOOP_CLR_FD [pid 6022] <... munmap resumed>) = 0 [pid 6022] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6022] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6022] close(3) = 0 [pid 6022] mkdir("./bus", 0777) = 0 [pid 6022] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 246.398245][ T6022] loop2: detected capacity change from 0 to 32768 [ 246.414611][ T6022] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6022) [pid 6022] ioctl(4, LOOP_CLR_FD [pid 6025] <... write resumed>) = 16777216 [pid 6025] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6025] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6025] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6025] close(3) = 0 [pid 6025] mkdir("./bus", 0777) = 0 [pid 6025] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6020] <... ioctl resumed>) = 0 [pid 6020] close(4 [pid 6028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6025] <... mount resumed>) = -1 EEXIST (File exists) [pid 6020] <... close resumed>) = 0 [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6019] <... futex resumed>) = 0 [pid 6025] ioctl(4, LOOP_CLR_FD [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] creat("./bus", 000 [pid 6019] <... futex resumed>) = 0 [pid 6020] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6020] <... futex resumed>) = 0 [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6020] open("./bus", O_RDONLY [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... open resumed>) = 3 [ 246.674760][ T6025] loop3: detected capacity change from 0 to 32768 [ 246.694735][ T6025] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6025) [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6019] <... futex resumed>) = 0 [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6019] <... futex resumed>) = 0 [pid 6020] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6019] <... futex resumed>) = 0 [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6019] <... futex resumed>) = 0 [pid 6022] <... ioctl resumed>) = 0 [pid 6020] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] close(4 [pid 6020] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6022] <... close resumed>) = 0 [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = 1 [pid 6019] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6019] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 6020] fallocate(-1, 0, 0, 1048820 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] creat("./bus", 000 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6020] <... futex resumed>) = 0 [pid 6019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6019] <... futex resumed>) = 0 [pid 6026] <... write resumed>) = 16777216 [pid 6022] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 6020] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6022] open("./bus", O_RDONLY [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... open resumed>) = 3 [pid 6020] <... futex resumed>) = 1 [pid 6019] <... futex resumed>) = 0 [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 6020] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6020] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6022] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6019] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 6020] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6019] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 0 [pid 6019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6020] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6019] exit_group(0 [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6020] <... futex resumed>) = ? [pid 6019] <... exit_group resumed>) = ? [pid 6022] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 6020] +++ exited with 0 +++ [pid 6026] munmap(0x7fe96bb4a000, 16777216 [pid 6019] +++ exited with 0 +++ [pid 6022] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6021] <... futex resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6019, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=40 /* 0.40 s */} --- [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 6022] <... futex resumed>) = 0 [pid 6021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] <... restart_syscall resumed>) = 0 [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 6022] fallocate(-1, 0, 0, 1048820 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6022] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6021] <... futex resumed>) = 0 [pid 6022] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5014] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6021] <... futex resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 6022] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] fstat(3, [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] <... futex resumed>) = 0 [pid 6021] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getdents64(3, [pid 6026] <... munmap resumed>) = 0 [pid 6022] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6021] <... futex resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6022] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6021] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... futex resumed>) = 0 [pid 6021] exit_group(0 [pid 5014] lstat("./97/bus", [pid 6021] <... exit_group resumed>) = ? [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] +++ exited with 0 +++ [pid 6026] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6021] +++ exited with 0 +++ [pid 5014] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=38 /* 0.38 s */} --- [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, [pid 5012] umount2("./95", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] openat(AT_FDCWD, "./95", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(4) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5014] rmdir("./97/bus" [pid 5012] fstat(3, [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(3, [pid 5014] lstat("./97/binderfs", [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6026] ioctl(4, LOOP_SET_FD, 3 [pid 5014] unlink("./97/binderfs" [pid 5012] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6026] <... ioctl resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] getdents64(3, [pid 5012] lstat("./95/bus", [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] umount2("./95/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./97" [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./95/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] mkdir("./98", 0777 [pid 5012] <... openat resumed>) = 4 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] fstat(4, [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] getdents64(4, [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] <... close resumed>) = 0 [pid 6026] close(3) = 0 [pid 6026] mkdir("./bus", 0777) = 0 [pid 6026] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6029 [pid 5012] close(4) = 0 [pid 5012] rmdir("./95/bus") = 0 [pid 5012] umount2("./95/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./95/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./95/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./95") = 0 [pid 5012] mkdir("./96", 0777./strace-static-x86_64: Process 6029 attached ) = 0 [pid 6029] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6029] chdir("./98") = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 6029] setpgid(0, 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6029] <... setpgid resumed>) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6029] write(3, "1000", 4 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6030 [pid 6029] <... write resumed>) = 4 [pid 6029] close(3) = 0 ./strace-static-x86_64: Process 6030 attached [pid 6029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6030] set_robust_list(0x5555561c25e0, 24 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... set_robust_list resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6030] chdir("./96" [pid 6029] <... mmap resumed>) = 0x7fe973f4a000 [pid 6030] <... chdir resumed>) = 0 [pid 6029] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] <... mprotect resumed>) = 0 [pid 6030] <... prctl resumed>) = 0 [pid 6029] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6026] <... mount resumed>) = -1 EEXIST (File exists) [pid 6030] setpgid(0, 0 [pid 6026] ioctl(4, LOOP_CLR_FD [pid 6030] <... setpgid resumed>) = 0 [pid 6029] <... clone resumed>, parent_tid=[6031], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6031 [pid 6030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... openat resumed>) = 3 [pid 6029] <... futex resumed>) = 0 [pid 6030] write(3, "1000", 4 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6030] <... write resumed>) = 4 [ 246.877494][ T6026] loop1: detected capacity change from 0 to 32768 [ 246.903254][ T6026] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6026) [pid 6030] close(3) = 0 [pid 6030] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6031 attached ) = 0 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6031] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6030] <... mmap resumed>) = 0x7fe973f4a000 [pid 6031] memfd_create("syzkaller", 0 [pid 6030] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6031] <... memfd_create resumed>) = 3 [pid 6030] <... mprotect resumed>) = 0 [pid 6031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6030] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6031] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6030] <... clone resumed>, parent_tid=[6032], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6032 [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6032 attached [pid 6032] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6032] memfd_create("syzkaller", 0) = 3 [pid 6032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6025] <... ioctl resumed>) = 0 [pid 6025] close(4) = 0 [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] creat("./bus", 000 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] open("./bus", O_RDONLY [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] <... open resumed>) = 3 [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] fallocate(-1, 0, 0, 1048820 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6025] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6025] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... write resumed>) = 16777216 [pid 6025] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6028] munmap(0x7fe96bb4a000, 16777216 [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6023] <... futex resumed>) = 0 [pid 6025] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6025] <... futex resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6025] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6023] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... munmap resumed>) = 0 [pid 6025] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6028] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6025] <... futex resumed>) = 0 [pid 6023] exit_group(0 [pid 6028] <... openat resumed>) = 4 [pid 6023] <... exit_group resumed>) = ? [pid 6028] ioctl(4, LOOP_SET_FD, 3 [pid 6025] +++ exited with 0 +++ [pid 6023] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6023, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=28 /* 0.28 s */} --- [pid 5013] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6028] <... ioctl resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./97/bus", [pid 6028] close(3 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6028] <... close resumed>) = 0 [pid 5013] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6028] mkdir("./bus", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6028] <... mkdir resumed>) = 0 [pid 5013] <... openat resumed>) = 4 [pid 6028] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./97/bus") = 0 [pid 5013] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./97/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./97") = 0 [pid 5013] mkdir("./98", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 6028] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6028] ioctl(4, LOOP_CLR_FD [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6033 ./strace-static-x86_64: Process 6033 attached [pid 6033] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6033] chdir("./98") = 0 [pid 6033] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6033] setpgid(0, 0) = 0 [ 247.266538][ T6028] loop5: detected capacity change from 0 to 32768 [ 247.292502][ T6028] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6028) [pid 6033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6033] write(3, "1000", 4) = 4 [pid 6033] close(3) = 0 [pid 6033] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6033] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6033] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6034], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6034 [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6034 attached [pid 6034] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6034] memfd_create("syzkaller", 0) = 3 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6026] <... ioctl resumed>) = 0 [pid 6026] close(4) = 0 [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] creat("./bus", 000 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] open("./bus", O_RDONLY [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... open resumed>) = 3 [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6026] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] fallocate(-1, 0, 0, 1048820 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6026] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6024] <... futex resumed>) = 0 [pid 6026] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6024] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6026] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6026] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6024] <... futex resumed>) = 0 [pid 6026] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6024] exit_group(0 [pid 6026] <... futex resumed>) = ? [pid 6024] <... exit_group resumed>) = ? [pid 6026] +++ exited with 0 +++ [pid 6024] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6024, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./98/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./98/bus") = 0 [pid 5011] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./98/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./98") = 0 [pid 5011] mkdir("./99", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6035 ./strace-static-x86_64: Process 6035 attached [pid 6035] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6035] chdir("./99") = 0 [pid 6035] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6035] setpgid(0, 0) = 0 [pid 6035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6035] write(3, "1000", 4) = 4 [pid 6035] close(3) = 0 [pid 6035] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6035] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6035] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6036], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6036 [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6036 attached [pid 6036] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6036] memfd_create("syzkaller", 0) = 3 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6028] <... ioctl resumed>) = 0 [pid 6028] close(4) = 0 [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] creat("./bus", 000 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] open("./bus", O_RDONLY [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... open resumed>) = 3 [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] fallocate(-1, 0, 0, 1048820 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6027] <... futex resumed>) = 0 [pid 6028] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6027] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6028] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6027] <... futex resumed>) = 0 [pid 6028] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6027] exit_group(0 [pid 6028] <... futex resumed>) = ? [pid 6027] <... exit_group resumed>) = ? [pid 6028] +++ exited with 0 +++ [pid 6027] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6027, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=44 /* 0.44 s */} --- [pid 5015] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./97/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./97/bus") = 0 [pid 5015] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./97/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./97/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./97") = 0 [pid 5015] mkdir("./98", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6037 ./strace-static-x86_64: Process 6037 attached [pid 6037] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6037] chdir("./98") = 0 [pid 6037] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6037] setpgid(0, 0) = 0 [pid 6037] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6037] write(3, "1000", 4) = 4 [pid 6037] close(3) = 0 [pid 6037] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6037] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6037] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6038], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6038 [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6038 attached [pid 6038] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6038] memfd_create("syzkaller", 0) = 3 [pid 6038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6032] <... write resumed>) = 16777216 [pid 6032] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6032] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6032] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6032] close(3) = 0 [pid 6032] mkdir("./bus", 0777) = 0 [pid 6032] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6031] <... write resumed>) = 16777216 [pid 6031] munmap(0x7fe96bb4a000, 16777216 [pid 6032] <... mount resumed>) = -1 EEXIST (File exists) [pid 6031] <... munmap resumed>) = 0 [pid 6032] ioctl(4, LOOP_CLR_FD [pid 6031] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 248.047686][ T6032] loop2: detected capacity change from 0 to 32768 [ 248.063123][ T6032] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6032) [pid 6031] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6031] close(3) = 0 [pid 6031] mkdir("./bus", 0777) = 0 [pid 6031] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 248.111236][ T6031] loop4: detected capacity change from 0 to 32768 [ 248.125734][ T6031] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6031) [pid 6031] ioctl(4, LOOP_CLR_FD [pid 6038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6034] <... write resumed>) = 16777216 [pid 6034] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6034] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6034] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6032] <... ioctl resumed>) = 0 [pid 6034] close(3) = 0 [pid 6032] close(4 [pid 6034] mkdir("./bus", 0777 [pid 6032] <... close resumed>) = 0 [pid 6034] <... mkdir resumed>) = 0 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... ioctl resumed>) = 0 [pid 6034] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6032] <... futex resumed>) = 1 [pid 6031] close(4 [pid 6030] <... futex resumed>) = 0 [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... close resumed>) = 0 [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] creat("./bus", 000 [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6034] <... mount resumed>) = -1 EEXIST (File exists) [pid 6032] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] ioctl(4, LOOP_CLR_FD [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] creat("./bus", 000 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... creat resumed>) = -1 EISDIR (Is a directory) [ 248.488789][ T6034] loop3: detected capacity change from 0 to 32768 [ 248.524158][ T6034] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6034) [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] open("./bus", O_RDONLY [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... open resumed>) = 3 [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] open("./bus", O_RDONLY [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... open resumed>) = 3 [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] fallocate(-1, 0, 0, 1048820 [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] fallocate(-1, 0, 0, 1048820 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6030] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... futex resumed>) = 0 [pid 6032] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6031] <... futex resumed>) = 1 [pid 6030] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6032] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6032] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6032] <... futex resumed>) = 1 [pid 6031] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6030] <... futex resumed>) = 0 [pid 6029] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6032] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6030] exit_group(0 [pid 6032] <... futex resumed>) = ? [pid 6031] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6030] <... exit_group resumed>) = ? [pid 6032] +++ exited with 0 +++ [pid 6031] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6031] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6030] +++ exited with 0 +++ [pid 6029] exit_group(0 [pid 6031] <... futex resumed>) = ? [pid 6029] <... exit_group resumed>) = ? [pid 6031] +++ exited with 0 +++ [pid 6029] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6030, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=36 /* 0.36 s */} --- [pid 5012] umount2("./96", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5014] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./96", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... openat resumed>) = 3 [pid 5014] <... openat resumed>) = 3 [pid 5012] fstat(3, [pid 5014] fstat(3, [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, [pid 5012] getdents64(3, [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] lstat("./98/bus", [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] lstat("./96/bus", [pid 5014] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] umount2("./96/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... write resumed>) = 16777216 [pid 5014] <... openat resumed>) = 4 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] fstat(4, [pid 5012] openat(AT_FDCWD, "./96/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6036] munmap(0x7fe96bb4a000, 16777216 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, [pid 5012] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, [pid 5012] fstat(4, [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 5014] rmdir("./98/bus" [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./96/bus" [pid 6036] <... munmap resumed>) = 0 [pid 6036] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6036] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./96/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] <... ioctl resumed>) = 0 [pid 5014] lstat("./98/binderfs", [pid 5012] lstat("./96/binderfs", [pid 6036] close(3 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6036] <... close resumed>) = 0 [pid 5014] unlink("./98/binderfs" [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6038] <... write resumed>) = 16777216 [pid 6036] mkdir("./bus", 0777 [pid 5014] <... unlink resumed>) = 0 [pid 5012] unlink("./96/binderfs" [pid 6038] munmap(0x7fe96bb4a000, 16777216 [pid 6036] <... mkdir resumed>) = 0 [pid 5014] getdents64(3, [pid 6036] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./98") = 0 [pid 5014] mkdir("./99", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 6038] <... munmap resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] getdents64(3, [pid 6036] <... mount resumed>) = -1 EEXIST (File exists) [pid 6038] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6036] ioctl(4, LOOP_CLR_FD [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6038] <... openat resumed>) = 4 [pid 5012] close(3 [pid 6038] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6039 [ 248.711935][ T6036] loop1: detected capacity change from 0 to 32768 [ 248.733864][ T6036] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6036) [pid 5012] <... close resumed>) = 0 ./strace-static-x86_64: Process 6039 attached [pid 6038] <... ioctl resumed>) = 0 [pid 5012] rmdir("./96" [pid 6038] close(3 [pid 5012] <... rmdir resumed>) = 0 [pid 6038] <... close resumed>) = 0 [pid 5012] mkdir("./97", 0777) = 0 [pid 6038] mkdir("./bus", 0777 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6038] <... mkdir resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 6039] set_robust_list(0x5555561c25e0, 24 [pid 6038] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6039] <... set_robust_list resumed>) = 0 [pid 6039] chdir("./99" [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6039] <... chdir resumed>) = 0 [pid 6039] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6039] setpgid(0, 0) = 0 [pid 6039] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6039] write(3, "1000", 4) = 4 [pid 6039] close(3) = 0 [pid 6039] symlink("/dev/binderfs", "./binderfs" [pid 5012] close(3 [pid 6039] <... symlink resumed>) = 0 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... mount resumed>) = -1 EEXIST (File exists) [pid 5012] <... close resumed>) = 0 [pid 6039] <... futex resumed>) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6038] ioctl(4, LOOP_CLR_FD [pid 6039] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6039] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6040 [pid 6039] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6041], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6041 [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6040 attached [pid 6040] set_robust_list(0x5555561c25e0, 24./strace-static-x86_64: Process 6041 attached ) = 0 [pid 6041] set_robust_list(0x7fe973f6a9e0, 24 [pid 6040] chdir("./97" [pid 6041] <... set_robust_list resumed>) = 0 [pid 6040] <... chdir resumed>) = 0 [pid 6041] memfd_create("syzkaller", 0 [pid 6040] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6041] <... memfd_create resumed>) = 3 [pid 6040] <... prctl resumed>) = 0 [pid 6041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6040] setpgid(0, 0) = 0 [ 248.767069][ T6038] loop5: detected capacity change from 0 to 32768 [ 248.782738][ T6038] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6038) [pid 6040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6040] write(3, "1000", 4) = 4 [pid 6040] close(3) = 0 [pid 6040] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6040] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6040] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6040] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6042], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6042 [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6042 attached [pid 6042] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6042] memfd_create("syzkaller", 0) = 3 [pid 6042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6034] <... ioctl resumed>) = 0 [pid 6034] close(4) = 0 [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] creat("./bus", 000 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] open("./bus", O_RDONLY [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... open resumed>) = 3 [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] fallocate(-1, 0, 0, 1048820 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6033] <... futex resumed>) = 0 [pid 6034] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6033] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6034] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6033] <... futex resumed>) = 0 [pid 6034] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6033] exit_group(0 [pid 6034] <... futex resumed>) = ? [pid 6033] <... exit_group resumed>) = ? [pid 6034] +++ exited with 0 +++ [pid 6033] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6033, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./98/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./98/bus") = 0 [pid 5013] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./98/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./98") = 0 [pid 5013] mkdir("./99", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6043 ./strace-static-x86_64: Process 6043 attached [pid 6043] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6043] chdir("./99") = 0 [pid 6043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6043] setpgid(0, 0) = 0 [pid 6043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6043] write(3, "1000", 4) = 4 [pid 6043] close(3) = 0 [pid 6043] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6043] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6043] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6044], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6044 [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6036] <... ioctl resumed>) = 0 [pid 6036] close(4./strace-static-x86_64: Process 6044 attached [pid 6044] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6036] <... close resumed>) = 0 [pid 6044] memfd_create("syzkaller", 0 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... memfd_create resumed>) = 3 [pid 6036] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6044] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 6038] <... ioctl resumed>) = 0 [pid 6036] creat("./bus", 000 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6038] close(4 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] open("./bus", O_RDONLY [pid 6038] <... close resumed>) = 0 [pid 6036] <... open resumed>) = 3 [pid 6035] <... futex resumed>) = 0 [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 6042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6038] creat("./bus", 000 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] open("./bus", O_RDONLY [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 6038] <... open resumed>) = 3 [pid 6036] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 6038] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] fallocate(-1, 0, 0, 1048820 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6036] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6035] <... futex resumed>) = 0 [pid 6038] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6036] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] <... futex resumed>) = 0 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6035] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] fallocate(-1, 0, 0, 1048820 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6036] <... futex resumed>) = 0 [pid 6035] <... futex resumed>) = 1 [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6035] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 6036] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6035] <... futex resumed>) = 0 [pid 6038] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] exit_group(0 [pid 6038] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6036] <... futex resumed>) = ? [pid 6035] <... exit_group resumed>) = ? [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] +++ exited with 0 +++ [pid 6035] +++ exited with 0 +++ [pid 6038] <... futex resumed>) = 1 [pid 6037] <... futex resumed>) = 0 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6035, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=42 /* 0.42 s */} --- [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6037] <... futex resumed>) = 0 [pid 6038] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6037] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6038] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5011] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6038] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6037] <... futex resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6038] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6037] exit_group(0 [pid 5011] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6038] <... futex resumed>) = ? [pid 6037] <... exit_group resumed>) = ? [pid 6038] +++ exited with 0 +++ [pid 6037] +++ exited with 0 +++ [pid 5011] <... openat resumed>) = 3 [pid 5011] fstat(3, [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6037, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 5011] getdents64(3, [pid 5015] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... openat resumed>) = 3 [pid 5011] lstat("./99/bus", [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, [pid 5011] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./98/bus", [pid 5011] <... openat resumed>) = 4 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] fstat(4, [pid 5015] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] getdents64(4, [pid 5015] <... openat resumed>) = 4 [pid 5015] fstat(4, [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, [pid 5015] getdents64(4, [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] close(4 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... close resumed>) = 0 [pid 5015] close(4 [pid 5011] rmdir("./99/bus" [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./98/bus" [pid 5011] <... rmdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5011] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./99/binderfs", [pid 5015] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./98/binderfs" [pid 5011] unlink("./99/binderfs" [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5011] <... unlink resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] getdents64(3, [pid 5015] close(3) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] rmdir("./98" [pid 5011] close(3 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./99", 0777 [pid 5011] <... close resumed>) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5011] rmdir("./99" [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5011] <... rmdir resumed>) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] mkdir("./100", 0777 [pid 5015] close(3) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6045 ./strace-static-x86_64: Process 6045 attached [pid 6045] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6045] chdir("./99" [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 6045] <... chdir resumed>) = 0 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 6045] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6045] <... prctl resumed>) = 0 [pid 5011] close(3 [pid 6045] setpgid(0, 0) = 0 [pid 5011] <... close resumed>) = 0 [pid 6045] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6045] <... openat resumed>) = 3 [pid 6045] write(3, "1000", 4) = 4 [pid 6045] close(3 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6046 [pid 6045] <... close resumed>) = 0 [pid 6045] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 6046 attached [pid 6045] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] set_robust_list(0x5555561c25e0, 24 [pid 6045] <... futex resumed>) = 0 [pid 6046] <... set_robust_list resumed>) = 0 [pid 6045] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6046] chdir("./100" [pid 6045] <... mmap resumed>) = 0x7fe973f4a000 [pid 6041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6046] <... chdir resumed>) = 0 [pid 6045] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6046] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6045] <... mprotect resumed>) = 0 [pid 6046] <... prctl resumed>) = 0 [pid 6045] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6046] setpgid(0, 0) = 0 [pid 6045] <... clone resumed>, parent_tid=[6047], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6047 [pid 6046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... openat resumed>) = 3 [pid 6045] <... futex resumed>) = 0 [pid 6046] write(3, "1000", 4 [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6046] <... write resumed>) = 4 ./strace-static-x86_64: Process 6047 attached [pid 6046] close(3 [pid 6047] set_robust_list(0x7fe973f6a9e0, 24 [pid 6046] <... close resumed>) = 0 [pid 6047] <... set_robust_list resumed>) = 0 [pid 6046] symlink("/dev/binderfs", "./binderfs" [pid 6047] memfd_create("syzkaller", 0 [pid 6046] <... symlink resumed>) = 0 [pid 6047] <... memfd_create resumed>) = 3 [pid 6046] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6046] <... futex resumed>) = 0 [pid 6047] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6046] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6046] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6046] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6048], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6048 [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6048 attached [pid 6048] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6048] memfd_create("syzkaller", 0) = 3 [pid 6048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6042] <... write resumed>) = 16777216 [pid 6042] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6042] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6042] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6042] close(3) = 0 [pid 6042] mkdir("./bus", 0777) = 0 [pid 6042] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6042] <... mount resumed>) = -1 EEXIST (File exists) [ 249.819735][ T6042] loop2: detected capacity change from 0 to 32768 [ 249.837777][ T6042] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6042) [pid 6042] ioctl(4, LOOP_CLR_FD [pid 6041] <... write resumed>) = 16777216 [pid 6041] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6041] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6041] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6041] close(3) = 0 [pid 6041] mkdir("./bus", 0777) = 0 [pid 6041] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 6041] ioctl(4, LOOP_CLR_FD [pid 6044] <... write resumed>) = 16777216 [pid 6044] munmap(0x7fe96bb4a000, 16777216) = 0 [ 249.986397][ T6041] loop4: detected capacity change from 0 to 32768 [ 250.000967][ T6041] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6041) [pid 6044] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6044] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6044] close(3) = 0 [pid 6044] mkdir("./bus", 0777) = 0 [pid 6044] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 250.070021][ T6044] loop3: detected capacity change from 0 to 32768 [ 250.107688][ T6044] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6044) [pid 6044] ioctl(4, LOOP_CLR_FD [pid 6042] <... ioctl resumed>) = 0 [pid 6042] close(4) = 0 [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6042] creat("./bus", 000 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6042] open("./bus", O_RDONLY [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... open resumed>) = 3 [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6042] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6042] fallocate(-1, 0, 0, 1048820 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6041] <... ioctl resumed>) = 0 [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] close(4 [pid 6042] <... futex resumed>) = 1 [pid 6040] <... futex resumed>) = 0 [pid 6042] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6040] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... futex resumed>) = 0 [pid 6040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6040] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6041] <... close resumed>) = 0 [pid 6040] <... futex resumed>) = 0 [pid 6042] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6040] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 1 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6040] <... futex resumed>) = 0 [pid 6039] <... futex resumed>) = 0 [pid 6042] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6041] creat("./bus", 000 [pid 6040] exit_group(0 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... futex resumed>) = ? [pid 6041] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6040] <... exit_group resumed>) = ? [pid 6042] +++ exited with 0 +++ [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6040] +++ exited with 0 +++ [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6040, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 6041] open("./bus", O_RDONLY [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] umount2("./97", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] <... open resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./97", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] fstat(3, [pid 6041] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] lstat("./97/bus", [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6039] <... futex resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./97/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6041] fallocate(-1, 0, 0, 1048820 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "./97/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6041] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 4 [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 5012] fstat(4, [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] getdents64(4, [pid 6044] <... ioctl resumed>) = 0 [pid 6041] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6044] close(4 [pid 6041] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] getdents64(4, [pid 6044] <... close resumed>) = 0 [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 5012] close(4 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... close resumed>) = 0 [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6039] <... futex resumed>) = 0 [pid 5012] rmdir("./97/bus" [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6041] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6039] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6044] creat("./bus", 000 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 6044] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6041] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./97/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6041] <... futex resumed>) = 1 [pid 6039] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 6041] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6039] exit_group(0 [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6039] <... exit_group resumed>) = ? [pid 5012] lstat("./97/binderfs", [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6041] <... futex resumed>) = ? [pid 6044] open("./bus", O_RDONLY [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6041] +++ exited with 0 +++ [pid 6039] +++ exited with 0 +++ [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6044] <... open resumed>) = 3 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6039, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5012] unlink("./97/binderfs" [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 6044] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6044] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] close(3 [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5014] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... close resumed>) = 0 [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] rmdir("./97" [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6044] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 6044] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] fstat(3, [pid 5012] mkdir("./98", 0777 [pid 6047] <... write resumed>) = 16777216 [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6047] munmap(0x7fe96bb4a000, 16777216 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5014] getdents64(3, [pid 5012] <... mkdir resumed>) = 0 [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 5014] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] fallocate(-1, 0, 0, 1048820 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 3 [pid 6044] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] lstat("./99/bus", [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5014] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] close(3 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... close resumed>) = 0 [pid 6044] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... openat resumed>) = 4 [pid 6044] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] fstat(4, [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5014] getdents64(4, [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6044] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6043] <... futex resumed>) = 0 [pid 5014] getdents64(4, [pid 6044] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6043] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6044] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5014] close(4 [pid 6044] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... close resumed>) = 0 [pid 6044] <... futex resumed>) = 1 [pid 6043] <... futex resumed>) = 0 [pid 5014] rmdir("./99/bus" [pid 6044] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6043] exit_group(0 [pid 5014] <... rmdir resumed>) = 0 [pid 6044] <... futex resumed>) = ? [pid 6043] <... exit_group resumed>) = ? [pid 5014] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6044] +++ exited with 0 +++ [pid 6043] +++ exited with 0 +++ [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] lstat("./99/binderfs", [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6043, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./99/binderfs") = 0 [pid 5013] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6049 [pid 5014] getdents64(3, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6047] <... munmap resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] close(3 [pid 5013] <... openat resumed>) = 3 [pid 6047] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... close resumed>) = 0 [pid 5013] fstat(3, [pid 6047] <... openat resumed>) = 4 [pid 5014] rmdir("./99" [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6049 attached [pid 6047] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 6049] set_robust_list(0x5555561c25e0, 24 [pid 5014] mkdir("./100", 0777 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6049] <... set_robust_list resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5013] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] chdir("./98" [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] <... chdir resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5013] lstat("./99/bus", [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6049] <... prctl resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6049] setpgid(0, 0 [pid 5014] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6049] <... setpgid resumed>) = 0 [pid 6047] <... ioctl resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... openat resumed>) = 4 [pid 6049] <... openat resumed>) = 3 [pid 5013] fstat(4, [pid 6049] write(3, "1000", 4 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6050 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6047] close(3 [pid 6049] <... write resumed>) = 4 [pid 5013] getdents64(4, [pid 6047] <... close resumed>) = 0 [pid 6049] close(3 [pid 6048] <... write resumed>) = 16777216 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6047] mkdir("./bus", 0777 [pid 6049] <... close resumed>) = 0 [pid 6048] munmap(0x7fe96bb4a000, 16777216 [pid 5013] getdents64(4, [pid 6049] symlink("/dev/binderfs", "./binderfs" [pid 6047] <... mkdir resumed>) = 0 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6049] <... symlink resumed>) = 0 [pid 6047] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] close(4./strace-static-x86_64: Process 6050 attached [pid 6049] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... close resumed>) = 0 [pid 6050] set_robust_list(0x5555561c25e0, 24 [pid 6049] <... futex resumed>) = 0 [pid 5013] rmdir("./99/bus" [pid 6050] <... set_robust_list resumed>) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5013] <... rmdir resumed>) = 0 [pid 6050] chdir("./100" [pid 6049] <... mmap resumed>) = 0x7fe973f4a000 [pid 5013] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6050] <... chdir resumed>) = 0 [pid 6049] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6049] <... mprotect resumed>) = 0 [pid 5013] lstat("./99/binderfs", [pid 6050] <... prctl resumed>) = 0 [pid 6049] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6050] setpgid(0, 0 [pid 5013] unlink("./99/binderfs" [pid 6050] <... setpgid resumed>) = 0 [pid 6049] <... clone resumed>, parent_tid=[6051], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6051 [pid 5013] <... unlink resumed>) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] getdents64(3, [pid 6050] <... openat resumed>) = 3 [pid 6049] <... futex resumed>) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6050] write(3, "1000", 4 [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5013] close(3./strace-static-x86_64: Process 6051 attached [pid 6050] <... write resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 6050] close(3 [pid 5013] rmdir("./99" [pid 6050] <... close resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 6050] symlink("/dev/binderfs", "./binderfs" [pid 5013] mkdir("./100", 0777 [pid 6050] <... symlink resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 6051] set_robust_list(0x7fe973f6a9e0, 24 [pid 6050] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6050] <... futex resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6051] <... set_robust_list resumed>) = 0 [pid 6050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6051] memfd_create("syzkaller", 0 [pid 6050] <... mmap resumed>) = 0x7fe973f4a000 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6050] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5013] close(3 [pid 6051] <... memfd_create resumed>) = 3 [pid 6050] <... mprotect resumed>) = 0 [pid 6048] <... munmap resumed>) = 0 [pid 6047] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] <... close resumed>) = 0 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6048] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6047] ioctl(4, LOOP_CLR_FD [pid 6051] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6048] <... openat resumed>) = 4 [pid 6050] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [ 250.513400][ T6047] loop5: detected capacity change from 0 to 32768 [ 250.539004][ T6047] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6047) [pid 6048] ioctl(4, LOOP_SET_FD, 3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6052 attached [pid 6048] <... ioctl resumed>) = 0 [pid 6048] close(3) = 0 [pid 6048] mkdir("./bus", 0777 [pid 6052] set_robust_list(0x7fe973f6a9e0, 24 [pid 6050] <... clone resumed>, parent_tid=[6052], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6052 [pid 6052] <... set_robust_list resumed>) = 0 [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... mkdir resumed>) = 0 [pid 6048] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6052] memfd_create("syzkaller", 0 [pid 6050] <... futex resumed>) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6053 [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6052] <... memfd_create resumed>) = 3 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 6053 attached [pid 6053] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6053] chdir("./100") = 0 [pid 6053] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6053] setpgid(0, 0) = 0 [pid 6053] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6053] write(3, "1000", 4) = 4 [pid 6053] close(3) = 0 [pid 6053] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 250.586621][ T6048] loop1: detected capacity change from 0 to 32768 [ 250.601180][ T6048] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6048) [pid 6053] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6053] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6053] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6054], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6054 [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6054 attached [pid 6054] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6054] memfd_create("syzkaller", 0) = 3 [pid 6054] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6048] <... mount resumed>) = -1 EEXIST (File exists) [pid 6048] ioctl(4, LOOP_CLR_FD [pid 6047] <... ioctl resumed>) = 0 [pid 6047] close(4) = 0 [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] <... futex resumed>) = 0 [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6047] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... futex resumed>) = 0 [pid 6045] <... futex resumed>) = 1 [pid 6047] open("./bus", O_RDONLY [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... open resumed>) = 3 [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] <... futex resumed>) = 0 [pid 6047] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6045] <... futex resumed>) = 0 [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] <... futex resumed>) = 0 [pid 6047] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] <... futex resumed>) = 0 [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6047] fallocate(-1, 0, 0, 1048820 [pid 6045] <... futex resumed>) = 0 [pid 6047] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] <... futex resumed>) = 0 [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6045] <... futex resumed>) = 0 [pid 6047] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6045] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6045] <... futex resumed>) = 0 [pid 6047] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6045] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6045] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] <... futex resumed>) = 0 [pid 6047] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6045] exit_group(0 [pid 6047] <... futex resumed>) = ? [pid 6045] <... exit_group resumed>) = ? [pid 6047] +++ exited with 0 +++ [pid 6045] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6045, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [pid 5015] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6048] <... ioctl resumed>) = 0 [pid 5015] lstat("./99/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, [pid 6048] close(4 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6048] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6048] <... futex resumed>) = 1 [pid 6046] <... futex resumed>) = 0 [pid 5015] getdents64(4, [pid 6048] creat("./bus", 000 [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6048] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6046] <... futex resumed>) = 0 [pid 5015] close(4 [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... close resumed>) = 0 [pid 6048] <... futex resumed>) = 0 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] rmdir("./99/bus" [pid 6048] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6046] <... futex resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 6048] open("./bus", O_RDONLY [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6048] <... open resumed>) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] lstat("./99/binderfs", [pid 6048] <... futex resumed>) = 1 [pid 6046] <... futex resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6048] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] unlink("./99/binderfs" [pid 6048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6046] <... futex resumed>) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 6048] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5015] getdents64(3, [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6048] <... futex resumed>) = 1 [pid 6046] <... futex resumed>) = 0 [pid 5015] close(3 [pid 6048] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... close resumed>) = 0 [pid 6048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6046] <... futex resumed>) = 0 [pid 5015] rmdir("./99" [pid 6048] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... rmdir resumed>) = 0 [pid 6048] <... futex resumed>) = 0 [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] mkdir("./100", 0777 [pid 6048] fallocate(-1, 0, 0, 1048820 [pid 6046] <... futex resumed>) = 0 [pid 6048] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... mkdir resumed>) = 0 [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6048] <... futex resumed>) = 0 [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... openat resumed>) = 3 [pid 6048] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6046] <... futex resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 6048] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] close(3 [pid 6048] <... futex resumed>) = 0 [pid 6046] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... close resumed>) = 0 [pid 6048] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6046] <... futex resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6048] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6046] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6048] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6048] <... futex resumed>) = 0 [pid 6046] exit_group(0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6055 [pid 6046] <... exit_group resumed>) = ? [pid 6048] +++ exited with 0 +++ ./strace-static-x86_64: Process 6055 attached [pid 6055] set_robust_list(0x5555561c25e0, 24 [pid 6046] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6046, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 6055] <... set_robust_list resumed>) = 0 [pid 6055] chdir("./100") = 0 [pid 5011] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... prctl resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] setpgid(0, 0 [pid 5011] <... openat resumed>) = 3 [pid 6055] <... setpgid resumed>) = 0 [pid 5011] fstat(3, [pid 6055] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6055] <... openat resumed>) = 3 [pid 5011] getdents64(3, [pid 6055] write(3, "1000", 4 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6055] <... write resumed>) = 4 [pid 5011] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] close(3 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... close resumed>) = 0 [pid 5011] lstat("./100/bus", [pid 6055] symlink("/dev/binderfs", "./binderfs" [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6055] <... symlink resumed>) = 0 [pid 5011] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6055] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6055] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6055] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5011] <... openat resumed>) = 4 [pid 6055] <... mmap resumed>) = 0x7fe973f4a000 [pid 5011] fstat(4, [pid 6055] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6055] <... mprotect resumed>) = 0 [pid 5011] getdents64(4, [pid 6055] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, [pid 6055] <... clone resumed>, parent_tid=[6056], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6056 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] close(4 [pid 6055] <... futex resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5011] rmdir("./100/bus") = 0 [pid 5011] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./100/binderfs", ./strace-static-x86_64: Process 6056 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6056] set_robust_list(0x7fe973f6a9e0, 24 [pid 5011] unlink("./100/binderfs" [pid 6056] <... set_robust_list resumed>) = 0 [pid 5011] <... unlink resumed>) = 0 [pid 6056] memfd_create("syzkaller", 0 [pid 5011] getdents64(3, [pid 6056] <... memfd_create resumed>) = 3 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6056] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5011] close(3 [pid 6056] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5011] <... close resumed>) = 0 [pid 5011] rmdir("./100") = 0 [pid 5011] mkdir("./101", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 6054] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6057 ./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6057] chdir("./101") = 0 [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6057] setpgid(0, 0) = 0 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6057] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6057] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6058], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6058] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6058] memfd_create("syzkaller", 0) = 3 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6056] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6051] <... write resumed>) = 16777216 [pid 6051] munmap(0x7fe96bb4a000, 16777216 [pid 6052] <... write resumed>) = 16777216 [pid 6051] <... munmap resumed>) = 0 [pid 6052] munmap(0x7fe96bb4a000, 16777216 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6051] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6051] close(3 [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6052] <... munmap resumed>) = 0 [pid 6051] <... close resumed>) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6051] mkdir("./bus", 0777 [pid 6052] <... openat resumed>) = 4 [pid 6051] <... mkdir resumed>) = 0 [pid 6052] ioctl(4, LOOP_SET_FD, 3 [ 251.599784][ T6051] loop2: detected capacity change from 0 to 32768 [ 251.631849][ T6052] loop4: detected capacity change from 0 to 32768 [pid 6051] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6052] <... ioctl resumed>) = 0 [pid 6052] close(3) = 0 [pid 6052] mkdir("./bus", 0777) = 0 [pid 6052] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6054] <... write resumed>) = 16777216 [pid 6054] munmap(0x7fe96bb4a000, 16777216 [pid 6051] <... mount resumed>) = -1 EEXIST (File exists) [pid 6052] <... mount resumed>) = -1 EEXIST (File exists) [pid 6051] ioctl(4, LOOP_CLR_FD [pid 6052] ioctl(4, LOOP_CLR_FD [pid 6054] <... munmap resumed>) = 0 [pid 6054] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 251.639760][ T6051] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6051) [ 251.665113][ T6052] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6052) [pid 6054] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6054] close(3) = 0 [pid 6054] mkdir("./bus", 0777) = 0 [ 251.707757][ T6054] loop3: detected capacity change from 0 to 32768 [pid 6054] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 251.750593][ T6054] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6054) [pid 6054] ioctl(4, LOOP_CLR_FD [pid 6051] <... ioctl resumed>) = 0 [pid 6051] close(4) = 0 [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = 0 [pid 6051] <... futex resumed>) = 1 [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] creat("./bus", 000 [pid 6049] <... futex resumed>) = 0 [pid 6051] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] open("./bus", O_RDONLY [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... open resumed>) = 3 [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... ioctl resumed>) = 0 [pid 6051] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] fallocate(-1, 0, 0, 1048820 [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6049] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] close(4 [pid 6051] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6052] <... close resumed>) = 0 [pid 6051] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6052] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] exit_group(0 [pid 6052] creat("./bus", 000 [pid 6051] <... futex resumed>) = ? [pid 6050] <... futex resumed>) = 0 [pid 6049] <... exit_group resumed>) = ? [pid 6052] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6051] +++ exited with 0 +++ [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6052] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] +++ exited with 0 +++ [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6050] <... futex resumed>) = 1 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 6052] open("./bus", O_RDONLY [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... open resumed>) = 3 [pid 5012] umount2("./98", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./98", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6052] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 6052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] fstat(3, [pid 6052] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(3, [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6052] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6056] <... write resumed>) = 16777216 [pid 6054] <... ioctl resumed>) = 0 [pid 6052] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] lstat("./98/bus", [pid 6056] munmap(0x7fe96bb4a000, 16777216 [pid 6054] close(4 [pid 6052] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6056] <... munmap resumed>) = 0 [pid 6054] <... close resumed>) = 0 [pid 5012] umount2("./98/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] <... futex resumed>) = 1 [pid 5012] openat(AT_FDCWD, "./98/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] <... openat resumed>) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./98/bus") = 0 [pid 5012] umount2("./98/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./98/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./98/binderfs" [pid 6056] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5012] <... unlink resumed>) = 0 [pid 6056] <... openat resumed>) = 4 [pid 5012] getdents64(3, [pid 6056] ioctl(4, LOOP_SET_FD, 3 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./98") = 0 [pid 5012] mkdir("./99", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6053] <... futex resumed>) = 0 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] close(3 [pid 6050] <... futex resumed>) = 0 [pid 6053] <... futex resumed>) = 1 [pid 6054] <... futex resumed>) = 0 [pid 6052] fallocate(-1, 0, 0, 1048820 [pid 5012] <... close resumed>) = 0 [pid 6054] creat("./bus", 000 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6054] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6059 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 6052] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6050] <... futex resumed>) = 0 [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] <... futex resumed>) = 0 [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] open("./bus", O_RDONLY [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6059 attached [pid 6054] <... open resumed>) = 3 [pid 6052] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6050] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] set_robust_list(0x5555561c25e0, 24 [pid 6056] <... ioctl resumed>) = 0 [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6050] <... futex resumed>) = 0 [pid 6059] <... set_robust_list resumed>) = 0 [pid 6056] close(3 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 6052] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] chdir("./99" [pid 6056] <... close resumed>) = 0 [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... futex resumed>) = 0 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... chdir resumed>) = 0 [pid 6056] mkdir("./bus", 0777 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] <... futex resumed>) = 0 [pid 6052] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] exit_group(0 [pid 6059] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6056] <... mkdir resumed>) = 0 [pid 6054] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... futex resumed>) = ? [pid 6050] <... exit_group resumed>) = ? [pid 6059] <... prctl resumed>) = 0 [pid 6056] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6054] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6052] +++ exited with 0 +++ [pid 6050] +++ exited with 0 +++ [pid 6059] setpgid(0, 0 [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... setpgid resumed>) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} --- [pid 6059] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 6059] <... openat resumed>) = 3 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] <... futex resumed>) = 0 [pid 5014] <... restart_syscall resumed>) = 0 [pid 6059] write(3, "1000", 4 [pid 6054] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6059] <... write resumed>) = 4 [pid 6054] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6059] close(3 [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6059] <... close resumed>) = 0 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6059] symlink("/dev/binderfs", "./binderfs" [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6059] <... symlink resumed>) = 0 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] <... futex resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] fallocate(-1, 0, 0, 1048820 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] fstat(3, [pid 6059] <... futex resumed>) = 0 [pid 6054] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6059] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getdents64(3, [pid 6059] <... mmap resumed>) = 0x7fe973f4a000 [pid 6054] <... futex resumed>) = 1 [pid 6053] <... futex resumed>) = 0 [pid 6059] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6059] <... mprotect resumed>) = 0 [pid 6054] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6053] <... futex resumed>) = 0 [pid 5014] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6059] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6054] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6056] <... mount resumed>) = -1 EEXIST (File exists) [pid 6054] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5014] lstat("./100/bus", [pid 6059] <... clone resumed>, parent_tid=[6060], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6060 [pid 6056] ioctl(4, LOOP_CLR_FD [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6054] <... futex resumed>) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6060 attached [pid 6060] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6060] memfd_create("syzkaller", 0) = 3 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6053] <... futex resumed>) = 0 [pid 5014] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6053] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6054] <... futex resumed>) = 0 [ 252.152681][ T6056] loop5: detected capacity change from 0 to 32768 [ 252.186484][ T6056] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6056) [pid 6053] <... futex resumed>) = 1 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6054] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6053] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6054] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6053] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5014] <... openat resumed>) = 4 [pid 6054] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6053] exit_group(0 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6054] <... futex resumed>) = ? [pid 6053] <... exit_group resumed>) = ? [pid 5014] getdents64(4, [pid 6054] +++ exited with 0 +++ [pid 6053] +++ exited with 0 +++ [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6053, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5013] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./100/bus" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] lstat("./100/binderfs", [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] unlink("./100/binderfs" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... unlink resumed>) = 0 [pid 5014] getdents64(3, [pid 5013] lstat("./100/bus", [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] close(3) = 0 [pid 5013] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] rmdir("./100" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... rmdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] mkdir("./101", 0777 [pid 5013] <... openat resumed>) = 4 [pid 5013] fstat(4, [pid 5014] <... mkdir resumed>) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] <... openat resumed>) = 3 [pid 5013] getdents64(4, [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(4 [pid 5014] close(3 [pid 5013] <... close resumed>) = 0 [pid 6058] <... write resumed>) = 16777216 [pid 5014] <... close resumed>) = 0 [pid 5013] rmdir("./100/bus" [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... rmdir resumed>) = 0 [pid 5013] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6058] munmap(0x7fe96bb4a000, 16777216 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6061 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./100/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./100"./strace-static-x86_64: Process 6061 attached ) = 0 [pid 6061] set_robust_list(0x5555561c25e0, 24 [pid 6058] <... munmap resumed>) = 0 [pid 5013] mkdir("./101", 0777 [pid 6061] <... set_robust_list resumed>) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5013] <... mkdir resumed>) = 0 [pid 6061] chdir("./101" [pid 6058] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6061] <... chdir resumed>) = 0 [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... openat resumed>) = 3 [pid 6061] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6058] <... ioctl resumed>) = 0 [pid 6061] <... prctl resumed>) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6061] setpgid(0, 0) = 0 [pid 5013] close(3 [pid 6061] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... close resumed>) = 0 [pid 6061] <... openat resumed>) = 3 [pid 6058] close(3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6061] write(3, "1000", 4 [pid 6058] <... close resumed>) = 0 [pid 6058] mkdir("./bus", 0777 [pid 6061] <... write resumed>) = 4 [pid 6058] <... mkdir resumed>) = 0 [pid 6061] close(3 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6062 [pid 6061] <... close resumed>) = 0 [pid 6058] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6061] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6061] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6061] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6062 attached [pid 6061] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6062] set_robust_list(0x5555561c25e0, 24 [pid 6058] <... mount resumed>) = -1 EEXIST (File exists) [pid 6062] <... set_robust_list resumed>) = 0 [pid 6061] <... clone resumed>, parent_tid=[6063], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6063 [pid 6058] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6063 attached [pid 6062] chdir("./101" [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6062] <... chdir resumed>) = 0 [pid 6061] <... futex resumed>) = 0 [pid 6062] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6063] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6062] <... prctl resumed>) = 0 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6063] memfd_create("syzkaller", 0 [pid 6062] setpgid(0, 0 [pid 6063] <... memfd_create resumed>) = 3 [pid 6062] <... setpgid resumed>) = 0 [pid 6063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6062] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6062] write(3, "1000", 4) = 4 [ 252.317392][ T6058] loop1: detected capacity change from 0 to 32768 [ 252.343432][ T6058] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6058) [pid 6062] close(3) = 0 [pid 6062] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6062] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6062] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6064], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6064 [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6064 attached [pid 6064] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6064] memfd_create("syzkaller", 0) = 3 [pid 6064] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6056] <... ioctl resumed>) = 0 [pid 6056] close(4) = 0 [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... futex resumed>) = 0 [pid 6056] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] open("./bus", O_RDONLY) = 3 [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6055] <... futex resumed>) = 0 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] fallocate(-1, 0, 0, 1048820 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6055] <... futex resumed>) = 0 [pid 6056] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6055] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6056] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6055] <... futex resumed>) = 0 [pid 6056] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6055] exit_group(0 [pid 6056] <... futex resumed>) = ? [pid 6055] <... exit_group resumed>) = ? [pid 6056] +++ exited with 0 +++ [pid 6055] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6055, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=44 /* 0.44 s */} --- [pid 5015] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./100/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./100/bus") = 0 [pid 5015] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./100/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./100") = 0 [pid 5015] mkdir("./101", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6065 ./strace-static-x86_64: Process 6065 attached [pid 6065] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6065] chdir("./101") = 0 [pid 6065] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6065] setpgid(0, 0) = 0 [pid 6065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6065] write(3, "1000", 4) = 4 [pid 6065] close(3) = 0 [pid 6065] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6065] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6065] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6066], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6066 [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6066 attached [pid 6066] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6066] memfd_create("syzkaller", 0) = 3 [pid 6066] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6058] <... ioctl resumed>) = 0 [pid 6058] close(4) = 0 [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] open("./bus", O_RDONLY) = 3 [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6058] <... futex resumed>) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6058] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6058] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6057] <... futex resumed>) = 0 [pid 6058] fallocate(-1, 0, 0, 1048820 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6058] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6058] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6058] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] exit_group(0 [pid 6058] <... futex resumed>) = ? [pid 6057] <... exit_group resumed>) = ? [pid 6058] +++ exited with 0 +++ [pid 6057] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=42 /* 0.42 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, [pid 6064] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./101/bus") = 0 [pid 5011] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./101/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./101") = 0 [pid 5011] mkdir("./102", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6067 ./strace-static-x86_64: Process 6067 attached [pid 6067] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6067] chdir("./102") = 0 [pid 6067] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6067] setpgid(0, 0) = 0 [pid 6067] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6067] write(3, "1000", 4) = 4 [pid 6067] close(3) = 0 [pid 6067] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6067] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6067] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6068], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6068 [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6068 attached [pid 6068] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6068] memfd_create("syzkaller", 0) = 3 [pid 6068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6060] <... write resumed>) = 16777216 [pid 6060] munmap(0x7fe96bb4a000, 16777216 [pid 6066] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6060] <... munmap resumed>) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6060] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6060] close(3) = 0 [pid 6060] mkdir("./bus", 0777) = 0 [pid 6060] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 253.201013][ T6060] loop2: detected capacity change from 0 to 32768 [ 253.235999][ T6060] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6060) [pid 6060] ioctl(4, LOOP_CLR_FD [pid 6063] <... write resumed>) = 16777216 [pid 6063] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6063] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6063] ioctl(4, LOOP_SET_FD, 3 [pid 6068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6063] <... ioctl resumed>) = 0 [pid 6063] close(3) = 0 [pid 6063] mkdir("./bus", 0777) = 0 [pid 6063] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6064] <... write resumed>) = 16777216 [pid 6064] munmap(0x7fe96bb4a000, 16777216 [pid 6063] <... mount resumed>) = -1 EEXIST (File exists) [ 253.404618][ T6063] loop4: detected capacity change from 0 to 32768 [ 253.439754][ T6063] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6063) [pid 6063] ioctl(4, LOOP_CLR_FD [pid 6064] <... munmap resumed>) = 0 [pid 6064] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6064] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6064] close(3) = 0 [pid 6064] mkdir("./bus", 0777) = 0 [pid 6064] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 253.504177][ T6064] loop3: detected capacity change from 0 to 32768 [ 253.535218][ T6064] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6064) [pid 6064] ioctl(4, LOOP_CLR_FD [pid 6060] <... ioctl resumed>) = 0 [pid 6060] close(4) = 0 [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6060] creat("./bus", 000 [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6059] <... futex resumed>) = 0 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6060] <... futex resumed>) = 0 [pid 6060] open("./bus", O_RDONLY [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... open resumed>) = 3 [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... futex resumed>) = 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... futex resumed>) = 0 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6060] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6059] <... futex resumed>) = 0 [pid 6060] fallocate(-1, 0, 0, 1048820 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6059] <... futex resumed>) = 0 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6059] <... futex resumed>) = 0 [pid 6060] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6059] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6060] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6059] <... futex resumed>) = 0 [pid 6060] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6059] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6059] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6060] <... futex resumed>) = 0 [pid 6059] exit_group(0 [pid 6060] exit_group(0 [pid 6059] <... exit_group resumed>) = ? [pid 6060] <... exit_group resumed>) = ? [pid 6060] +++ exited with 0 +++ [pid 6059] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6059, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=35 /* 0.35 s */} --- [pid 5012] umount2("./99", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./99", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./99/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./99/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./99/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./99/bus") = 0 [pid 5012] umount2("./99/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./99/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./99/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./99") = 0 [pid 6066] <... write resumed>) = 16777216 [pid 5012] mkdir("./100", 0777 [pid 6066] munmap(0x7fe96bb4a000, 16777216 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6069 [pid 6066] <... munmap resumed>) = 0 [pid 6063] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6069 attached [pid 6069] set_robust_list(0x5555561c25e0, 24 [pid 6066] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6063] close(4 [pid 6069] <... set_robust_list resumed>) = 0 [pid 6066] <... openat resumed>) = 4 [pid 6063] <... close resumed>) = 0 [pid 6069] chdir("./100" [pid 6066] ioctl(4, LOOP_SET_FD, 3 [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... chdir resumed>) = 0 [pid 6069] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6066] <... ioctl resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6069] <... prctl resumed>) = 0 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] setpgid(0, 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6069] <... setpgid resumed>) = 0 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6063] creat("./bus", 000 [pid 6069] <... openat resumed>) = 3 [pid 6063] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6069] write(3, "1000", 4 [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... write resumed>) = 4 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6069] close(3 [pid 6066] close(3 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... close resumed>) = 0 [pid 6066] <... close resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6069] symlink("/dev/binderfs", "./binderfs" [pid 6066] mkdir("./bus", 0777 [pid 6063] open("./bus", O_RDONLY [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6069] <... symlink resumed>) = 0 [pid 6066] <... mkdir resumed>) = 0 [pid 6063] <... open resumed>) = 3 [pid 6069] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... mmap resumed>) = 0x7fe973f4a000 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6069] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6069] <... mprotect resumed>) = 0 [pid 6063] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6069] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... clone resumed>, parent_tid=[6070], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6070 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = 0 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6063] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6070 attached [pid 6063] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6070] set_robust_list(0x7fe973f6a9e0, 24 [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... set_robust_list resumed>) = 0 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6070] memfd_create("syzkaller", 0 [pid 6066] <... mount resumed>) = -1 EEXIST (File exists) [pid 6063] fallocate(-1, 0, 0, 1048820 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6070] <... memfd_create resumed>) = 3 [pid 6066] ioctl(4, LOOP_CLR_FD [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6063] <... futex resumed>) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6063] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6061] <... futex resumed>) = 0 [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... futex resumed>) = 0 [pid 6061] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6061] <... futex resumed>) = 0 [pid 6063] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6061] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6063] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [ 253.828804][ T6066] loop5: detected capacity change from 0 to 32768 [ 253.863947][ T6066] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6066) [pid 6063] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6061] <... futex resumed>) = 0 [pid 6063] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6061] exit_group(0 [pid 6063] <... futex resumed>) = ? [pid 6061] <... exit_group resumed>) = ? [pid 6063] +++ exited with 0 +++ [pid 6061] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6061, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=44 /* 0.44 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... ioctl resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./101/bus" [pid 6064] close(4 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6064] <... close resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] lstat("./101/binderfs", [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] unlink("./101/binderfs" [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 5014] <... unlink resumed>) = 0 [pid 6064] creat("./bus", 000 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5014] getdents64(3, [pid 6064] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./101") = 0 [pid 5014] mkdir("./102", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6062] <... futex resumed>) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6071 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6071 attached [pid 6064] open("./bus", O_RDONLY [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] set_robust_list(0x5555561c25e0, 24 [pid 6064] <... open resumed>) = 3 [pid 6071] <... set_robust_list resumed>) = 0 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] chdir("./102" [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6071] <... chdir resumed>) = 0 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6071] <... prctl resumed>) = 0 [pid 6064] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] setpgid(0, 0 [pid 6064] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6071] <... setpgid resumed>) = 0 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6071] <... openat resumed>) = 3 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] write(3, "1000", 4 [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6071] <... write resumed>) = 4 [pid 6064] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] close(3 [pid 6064] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6071] <... close resumed>) = 0 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] symlink("/dev/binderfs", "./binderfs" [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6071] <... symlink resumed>) = 0 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6071] <... futex resumed>) = 0 [pid 6064] fallocate(-1, 0, 0, 1048820 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6064] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6071] <... mmap resumed>) = 0x7fe973f4a000 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6071] <... mprotect resumed>) = 0 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6064] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6071] <... clone resumed>, parent_tid=[6072], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6072 [pid 6064] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = 0 [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6068] <... write resumed>) = 16777216 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6072 attached [pid 6064] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6062] <... futex resumed>) = 0 [pid 6072] set_robust_list(0x7fe973f6a9e0, 24 [pid 6064] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6062] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6072] <... set_robust_list resumed>) = 0 [pid 6068] munmap(0x7fe96bb4a000, 16777216 [pid 6064] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6072] memfd_create("syzkaller", 0 [pid 6064] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6072] <... memfd_create resumed>) = 3 [pid 6064] <... futex resumed>) = 1 [pid 6062] <... futex resumed>) = 0 [pid 6072] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6064] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6062] exit_group(0 [pid 6072] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6064] <... futex resumed>) = ? [pid 6062] <... exit_group resumed>) = ? [pid 6064] +++ exited with 0 +++ [pid 6062] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6062, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 6068] <... munmap resumed>) = 0 [pid 5013] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6068] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5013] fstat(4, [pid 6068] <... openat resumed>) = 4 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6068] ioctl(4, LOOP_SET_FD, 3 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./101/bus") = 0 [pid 5013] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./101/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./101") = 0 [pid 5013] mkdir("./102", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6068] <... ioctl resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6068] close(3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6068] <... close resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6068] mkdir("./bus", 0777 [pid 5013] close(3 [pid 6068] <... mkdir resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 6068] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6073 ./strace-static-x86_64: Process 6073 attached [pid 6073] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6073] chdir("./102") = 0 [pid 6073] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6073] setpgid(0, 0) = 0 [pid 6073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6073] write(3, "1000", 4) = 4 [pid 6073] close(3) = 0 [pid 6073] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6073] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6073] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6074], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6074 [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6068] <... mount resumed>) = -1 EEXIST (File exists) [ 254.104177][ T6068] loop1: detected capacity change from 0 to 32768 [ 254.137448][ T6068] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6068) [pid 6068] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6074 attached [pid 6074] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6074] memfd_create("syzkaller", 0) = 3 [pid 6074] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6066] <... ioctl resumed>) = 0 [pid 6066] close(4) = 0 [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] creat("./bus", 000 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6066] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] open("./bus", O_RDONLY [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... open resumed>) = 3 [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] fallocate(-1, 0, 0, 1048820 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6065] <... futex resumed>) = 0 [pid 6066] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6065] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6066] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6066] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6065] <... futex resumed>) = 0 [pid 6066] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6065] exit_group(0 [pid 6066] <... futex resumed>) = ? [pid 6065] <... exit_group resumed>) = ? [pid 6066] +++ exited with 0 +++ [pid 6065] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6065, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./101/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./101/bus") = 0 [pid 5015] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./101/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./101/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./101") = 0 [pid 5015] mkdir("./102", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6075 ./strace-static-x86_64: Process 6075 attached [pid 6075] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6075] chdir("./102") = 0 [pid 6075] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6075] setpgid(0, 0) = 0 [pid 6075] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6075] write(3, "1000", 4) = 4 [pid 6075] close(3) = 0 [pid 6075] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6075] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6075] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6076], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6076 [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6076 attached [pid 6076] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6076] memfd_create("syzkaller", 0) = 3 [pid 6076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6072] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6068] <... ioctl resumed>) = 0 [pid 6074] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6068] close(4) = 0 [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] creat("./bus", 000 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] open("./bus", O_RDONLY [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... open resumed>) = 3 [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] fallocate(-1, 0, 0, 1048820 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6067] <... futex resumed>) = 0 [pid 6068] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6067] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6068] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6068] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6067] <... futex resumed>) = 0 [pid 6068] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6067] exit_group(0 [pid 6068] <... futex resumed>) = ? [pid 6067] <... exit_group resumed>) = ? [pid 6068] +++ exited with 0 +++ [pid 6067] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6067, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=43 /* 0.43 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./102/bus") = 0 [pid 5011] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./102/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./102") = 0 [pid 5011] mkdir("./103", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6077 ./strace-static-x86_64: Process 6077 attached [pid 6077] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6077] chdir("./103") = 0 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6077] setpgid(0, 0) = 0 [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6077] write(3, "1000", 4) = 4 [pid 6077] close(3) = 0 [pid 6077] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6077] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6077] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6078], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6078 [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6078 attached [pid 6078] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6078] memfd_create("syzkaller", 0) = 3 [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6070] <... write resumed>) = 16777216 [pid 6070] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6070] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6070] close(3) = 0 [pid 6070] mkdir("./bus", 0777) = 0 [ 254.929561][ T6070] loop2: detected capacity change from 0 to 32768 [pid 6070] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 254.969770][ T6070] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6070) [pid 6070] ioctl(4, LOOP_CLR_FD [pid 6072] <... write resumed>) = 16777216 [pid 6072] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6072] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6072] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6072] close(3) = 0 [pid 6072] mkdir("./bus", 0777) = 0 [pid 6072] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 6072] ioctl(4, LOOP_CLR_FD [pid 6074] <... write resumed>) = 16777216 [ 255.108248][ T6072] loop4: detected capacity change from 0 to 32768 [ 255.128307][ T6072] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6072) [pid 6074] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6074] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6074] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6074] close(3) = 0 [pid 6074] mkdir("./bus", 0777) = 0 [pid 6074] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6074] <... mount resumed>) = -1 EEXIST (File exists) [pid 6070] <... ioctl resumed>) = 0 [pid 6074] ioctl(4, LOOP_CLR_FD [ 255.219479][ T6074] loop3: detected capacity change from 0 to 32768 [ 255.251631][ T6074] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6074) [pid 6070] close(4) = 0 [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6069] <... futex resumed>) = 0 [pid 6070] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6069] <... futex resumed>) = 0 [pid 6070] creat("./bus", 000 [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6069] <... futex resumed>) = 0 [pid 6070] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6069] <... futex resumed>) = 0 [pid 6070] open("./bus", O_RDONLY [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] <... open resumed>) = 3 [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6069] <... futex resumed>) = 0 [pid 6070] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6069] <... futex resumed>) = 0 [pid 6070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6069] <... futex resumed>) = 0 [pid 6070] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6070] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6069] <... futex resumed>) = 0 [pid 6070] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6070] <... futex resumed>) = 0 [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] fallocate(-1, 0, 0, 1048820 [pid 6069] <... futex resumed>) = 0 [pid 6070] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6070] <... futex resumed>) = 0 [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6069] <... futex resumed>) = 0 [pid 6070] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6070] <... futex resumed>) = 0 [pid 6069] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6069] <... futex resumed>) = 0 [pid 6070] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6069] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6069] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6070] <... futex resumed>) = 0 [pid 6069] exit_group(0) = ? [pid 6070] +++ exited with 0 +++ [pid 6069] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6069, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5012] umount2("./100", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./100", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./100/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./100/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./100/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6072] <... ioctl resumed>) = 0 [pid 5012] fstat(4, [pid 6072] close(4 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6072] <... close resumed>) = 0 [pid 5012] getdents64(4, [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 5012] getdents64(4, [pid 6072] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 5012] close(4 [pid 6072] creat("./bus", 000 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... close resumed>) = 0 [pid 6072] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5012] rmdir("./100/bus" [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] umount2("./100/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./100/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./100/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./100") = 0 [pid 5012] mkdir("./101", 0777 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 6072] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 6072] open("./bus", O_RDONLY [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6072] <... open resumed>) = 3 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] close(3 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 6072] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6072] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6071] <... futex resumed>) = 0 [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6079 [pid 6072] <... futex resumed>) = 0 [pid 6071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6072] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6072] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6079 attached [pid 6072] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6079] set_robust_list(0x5555561c25e0, 24 [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... set_robust_list resumed>) = 0 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6079] chdir("./101" [pid 6072] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... chdir resumed>) = 0 [pid 6072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6079] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6072] fallocate(-1, 0, 0, 1048820 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... prctl resumed>) = 0 [pid 6072] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6079] setpgid(0, 0 [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... setpgid resumed>) = 0 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6079] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6072] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6072] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6071] <... futex resumed>) = 0 [pid 6072] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6072] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] <... openat resumed>) = 3 [pid 6072] <... futex resumed>) = 1 [pid 6071] <... futex resumed>) = 0 [pid 6071] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6072] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6079] write(3, "1000", 4 [pid 6071] <... futex resumed>) = 0 [pid 6079] <... write resumed>) = 4 [pid 6072] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6071] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] close(3 [pid 6072] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... close resumed>) = 0 [pid 6072] <... futex resumed>) = 0 [pid 6071] exit_group(0 [pid 6079] symlink("/dev/binderfs", "./binderfs" [pid 6076] <... write resumed>) = 16777216 [pid 6071] <... exit_group resumed>) = ? [pid 6079] <... symlink resumed>) = 0 [pid 6072] +++ exited with 0 +++ [pid 6071] +++ exited with 0 +++ [pid 6079] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] munmap(0x7fe96bb4a000, 16777216 [pid 6079] <... futex resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6071, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 6079] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 6079] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] <... restart_syscall resumed>) = 0 [pid 6079] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6079] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6079] <... clone resumed>, parent_tid=[6080], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6080 [pid 5014] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 6079] <... futex resumed>) = 0 [pid 5014] fstat(3, [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6076] <... munmap resumed>) = 0 [pid 5014] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6076] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] <... openat resumed>) = 4 [pid 5014] lstat("./102/bus", [pid 6076] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 6080 attached [pid 6080] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6080] memfd_create("syzkaller", 0) = 3 [pid 6080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6076] <... ioctl resumed>) = 0 [pid 5014] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6076] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6076] mkdir("./bus", 0777 [pid 5014] <... openat resumed>) = 4 [pid 6076] <... mkdir resumed>) = 0 [pid 5014] fstat(4, [pid 6076] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./102/bus") = 0 [pid 5014] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6076] <... mount resumed>) = -1 EEXIST (File exists) [pid 5014] unlink("./102/binderfs" [pid 6076] ioctl(4, LOOP_CLR_FD [pid 5014] <... unlink resumed>) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./102") = 0 [pid 5014] mkdir("./103", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [ 255.539689][ T6076] loop5: detected capacity change from 0 to 32768 [ 255.562909][ T6076] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6076) [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6081 ./strace-static-x86_64: Process 6081 attached [pid 6081] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6074] <... ioctl resumed>) = 0 [pid 6081] chdir("./103" [pid 6074] close(4 [pid 6081] <... chdir resumed>) = 0 [pid 6074] <... close resumed>) = 0 [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... prctl resumed>) = 0 [pid 6074] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6081] setpgid(0, 0 [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] creat("./bus", 000 [pid 6081] <... setpgid resumed>) = 0 [pid 6073] <... futex resumed>) = 0 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6074] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6081] <... openat resumed>) = 3 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] write(3, "1000", 4 [pid 6074] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6081] <... write resumed>) = 4 [pid 6074] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] close(3 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6081] <... close resumed>) = 0 [pid 6074] open("./bus", O_RDONLY [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6081] symlink("/dev/binderfs", "./binderfs" [pid 6074] <... open resumed>) = 3 [pid 6081] <... symlink resumed>) = 0 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6081] <... futex resumed>) = 0 [pid 6074] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6081] <... mmap resumed>) = 0x7fe973f4a000 [pid 6074] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6081] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6074] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6081] <... mprotect resumed>) = 0 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6074] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6074] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... clone resumed>, parent_tid=[6082], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6082 [pid 6074] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6073] <... futex resumed>) = 0 [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6082 attached [pid 6081] <... futex resumed>) = 0 [pid 6074] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] set_robust_list(0x7fe973f6a9e0, 24 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6074] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... set_robust_list resumed>) = 0 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6074] fallocate(-1, 0, 0, 1048820 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] memfd_create("syzkaller", 0 [pid 6074] <... futex resumed>) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6082] <... memfd_create resumed>) = 3 [pid 6074] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6074] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6073] <... futex resumed>) = 0 [pid 6082] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... futex resumed>) = 0 [pid 6073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6074] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6074] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6073] <... futex resumed>) = 0 [pid 6074] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6073] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6074] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6074] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6073] <... futex resumed>) = 0 [pid 6074] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6073] exit_group(0) = ? [pid 6074] <... futex resumed>) = ? [pid 6074] +++ exited with 0 +++ [pid 6073] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6073, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./102/bus") = 0 [pid 5013] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./102/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./102") = 0 [pid 5013] mkdir("./103", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6083 ./strace-static-x86_64: Process 6083 attached [pid 6083] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6083] chdir("./103") = 0 [pid 6083] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6083] setpgid(0, 0) = 0 [pid 6083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6083] write(3, "1000", 4) = 4 [pid 6083] close(3) = 0 [pid 6083] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6083] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6083] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6084], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6084 [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6084 attached [pid 6084] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6084] memfd_create("syzkaller", 0) = 3 [pid 6084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6078] <... write resumed>) = 16777216 [pid 6078] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6078] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6078] ioctl(4, LOOP_SET_FD, 3 [pid 6076] <... ioctl resumed>) = 0 [pid 6076] close(4 [pid 6078] <... ioctl resumed>) = 0 [pid 6078] close(3) = 0 [pid 6076] <... close resumed>) = 0 [pid 6078] mkdir("./bus", 0777) = 0 [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6076] <... futex resumed>) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] creat("./bus", 000 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] open("./bus", O_RDONLY [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... open resumed>) = 3 [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [ 255.997836][ T6078] loop1: detected capacity change from 0 to 32768 [ 256.033186][ T6078] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6078) [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] fallocate(-1, 0, 0, 1048820 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... mount resumed>) = -1 EEXIST (File exists) [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6078] ioctl(4, LOOP_CLR_FD [pid 6076] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6075] <... futex resumed>) = 0 [pid 6076] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6075] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6076] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6075] <... futex resumed>) = 0 [pid 6076] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6075] exit_group(0 [pid 6076] <... futex resumed>) = ? [pid 6075] <... exit_group resumed>) = ? [pid 6076] +++ exited with 0 +++ [pid 6075] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6075, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./102/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./102/bus") = 0 [pid 5015] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./102/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./102") = 0 [pid 5015] mkdir("./103", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6085 ./strace-static-x86_64: Process 6085 attached [pid 6085] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6085] chdir("./103") = 0 [pid 6085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6085] setpgid(0, 0) = 0 [pid 6085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6085] write(3, "1000", 4) = 4 [pid 6085] close(3) = 0 [pid 6085] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6085] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6085] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6086], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6086 [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6086 attached [pid 6086] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6086] memfd_create("syzkaller", 0) = 3 [pid 6086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6078] <... ioctl resumed>) = 0 [pid 6078] close(4) = 0 [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... futex resumed>) = 0 [pid 6077] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] open("./bus", O_RDONLY [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... open resumed>) = 3 [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] fallocate(-1, 0, 0, 1048820 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6077] <... futex resumed>) = 0 [pid 6078] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6077] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6078] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6077] exit_group(0 [pid 6078] <... futex resumed>) = ? [pid 6077] <... exit_group resumed>) = ? [pid 6078] +++ exited with 0 +++ [pid 6077] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./103/bus") = 0 [pid 6082] <... write resumed>) = 16777216 [pid 5011] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./103/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./103") = 0 [pid 5011] mkdir("./104", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 6082] munmap(0x7fe96bb4a000, 16777216 [pid 6080] <... write resumed>) = 16777216 [pid 5011] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6087 [pid 6080] munmap(0x7fe96bb4a000, 16777216 [pid 6086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6080] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6087 attached [pid 6082] <... munmap resumed>) = 0 [pid 6080] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6087] set_robust_list(0x5555561c25e0, 24 [pid 6082] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6087] <... set_robust_list resumed>) = 0 [pid 6082] <... openat resumed>) = 4 [pid 6080] <... openat resumed>) = 4 [pid 6087] chdir("./104" [pid 6082] ioctl(4, LOOP_SET_FD, 3 [pid 6080] ioctl(4, LOOP_SET_FD, 3 [pid 6087] <... chdir resumed>) = 0 [pid 6082] <... ioctl resumed>) = 0 [pid 6082] close(3 [pid 6087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6087] setpgid(0, 0 [pid 6080] <... ioctl resumed>) = 0 [pid 6087] <... setpgid resumed>) = 0 [pid 6080] close(3 [pid 6087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6080] <... close resumed>) = 0 [pid 6087] write(3, "1000", 4 [pid 6080] mkdir("./bus", 0777 [pid 6087] <... write resumed>) = 4 [pid 6082] <... close resumed>) = 0 [pid 6087] close(3) = 0 [pid 6082] mkdir("./bus", 0777 [pid 6080] <... mkdir resumed>) = 0 [pid 6087] symlink("/dev/binderfs", "./binderfs" [pid 6082] <... mkdir resumed>) = 0 [pid 6080] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6087] <... symlink resumed>) = 0 [pid 6082] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [ 256.638190][ T6082] loop4: detected capacity change from 0 to 32768 [ 256.645314][ T6080] loop2: detected capacity change from 0 to 32768 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6087] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6087] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6087] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6088], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6088 [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6080] <... mount resumed>) = -1 EEXIST (File exists) [pid 6080] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6088 attached [pid 6088] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6088] memfd_create("syzkaller", 0) = 3 [pid 6088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6082] <... mount resumed>) = -1 EEXIST (File exists) [ 256.679171][ T6080] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6080) [ 256.701592][ T6082] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6082) [pid 6082] ioctl(4, LOOP_CLR_FD [pid 6084] <... write resumed>) = 16777216 [pid 6084] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6084] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6084] close(3) = 0 [pid 6084] mkdir("./bus", 0777) = 0 [pid 6084] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6086] <... write resumed>) = 16777216 [pid 6086] munmap(0x7fe96bb4a000, 16777216 [pid 6084] <... mount resumed>) = -1 EEXIST (File exists) [pid 6084] ioctl(4, LOOP_CLR_FD [pid 6086] <... munmap resumed>) = 0 [pid 6086] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 257.016883][ T6084] loop3: detected capacity change from 0 to 32768 [ 257.037538][ T6084] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6084) [pid 6086] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6086] close(3) = 0 [pid 6086] mkdir("./bus", 0777) = 0 [pid 6086] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6088] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6086] <... mount resumed>) = -1 EEXIST (File exists) [pid 6082] <... ioctl resumed>) = 0 [pid 6080] <... ioctl resumed>) = 0 [pid 6086] ioctl(4, LOOP_CLR_FD [pid 6082] close(4 [pid 6080] close(4 [pid 6082] <... close resumed>) = 0 [pid 6080] <... close resumed>) = 0 [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 257.097441][ T6086] loop5: detected capacity change from 0 to 32768 [ 257.111789][ T6086] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6086) [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... futex resumed>) = 0 [pid 6082] creat("./bus", 000 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] creat("./bus", 000 [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6080] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] open("./bus", O_RDONLY [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... futex resumed>) = 0 [pid 6082] <... open resumed>) = 3 [pid 6080] open("./bus", O_RDONLY [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... open resumed>) = 3 [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... futex resumed>) = 0 [pid 6082] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6080] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... futex resumed>) = 0 [pid 6082] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6080] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] fallocate(-1, 0, 0, 1048820 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6079] <... futex resumed>) = 0 [pid 6082] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6080] fallocate(-1, 0, 0, 1048820 [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 1 [pid 6079] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6079] <... futex resumed>) = 0 [pid 6082] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6080] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6079] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6081] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6079] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6081] <... futex resumed>) = 0 [pid 6080] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6082] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6081] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6080] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6080] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6079] exit_group(0 [pid 6082] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6080] <... futex resumed>) = ? [pid 6079] <... exit_group resumed>) = ? [pid 6082] <... futex resumed>) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6081] exit_group(0) = ? [pid 6080] +++ exited with 0 +++ [pid 6079] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6079, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=31 /* 0.31 s */} --- [pid 5012] umount2("./101", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6082] +++ exited with 0 +++ [pid 6081] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=38 /* 0.38 s */} --- [pid 5012] openat(AT_FDCWD, "./101", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, [pid 5014] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] getdents64(3, [pid 5014] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] <... openat resumed>) = 3 [pid 5012] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] fstat(3, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] lstat("./101/bus", [pid 5014] getdents64(3, [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./101/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./101/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 4 [pid 5014] lstat("./103/bus", [pid 5012] fstat(4, [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] getdents64(4, [pid 5014] <... openat resumed>) = 4 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] fstat(4, [pid 5012] close(4) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] rmdir("./101/bus" [pid 5014] getdents64(4, [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./101/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] lstat("./101/binderfs", [pid 5014] close(4 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] <... close resumed>) = 0 [pid 5012] unlink("./101/binderfs" [pid 5014] rmdir("./103/bus" [pid 5012] <... unlink resumed>) = 0 [pid 5012] getdents64(3, [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5014] lstat("./103/binderfs", [pid 5012] rmdir("./101" [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] unlink("./103/binderfs" [pid 5012] mkdir("./102", 0777 [pid 5014] <... unlink resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... openat resumed>) = 3 [pid 5014] close(3 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] <... close resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] rmdir("./103" [pid 5012] close(3 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 5014] mkdir("./104", 0777 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6089 [pid 5014] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6089 attached [pid 5014] ioctl(3, LOOP_CLR_FD [pid 6089] set_robust_list(0x5555561c25e0, 24 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6089] <... set_robust_list resumed>) = 0 [pid 5014] close(3 [pid 6089] chdir("./102" [pid 5014] <... close resumed>) = 0 [pid 6089] <... chdir resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6090 [pid 6089] setpgid(0, 0) = 0 [pid 6089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6089] write(3, "1000", 4./strace-static-x86_64: Process 6090 attached ) = 4 [pid 6089] close(3 [pid 6090] set_robust_list(0x5555561c25e0, 24 [pid 6089] <... close resumed>) = 0 [pid 6090] <... set_robust_list resumed>) = 0 [pid 6089] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6090] chdir("./104" [pid 6089] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... chdir resumed>) = 0 [pid 6089] <... futex resumed>) = 0 [pid 6090] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6090] <... prctl resumed>) = 0 [pid 6089] <... mmap resumed>) = 0x7fe973f4a000 [pid 6090] setpgid(0, 0 [pid 6089] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6090] <... setpgid resumed>) = 0 [pid 6089] <... mprotect resumed>) = 0 [pid 6090] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6089] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6090] <... openat resumed>) = 3 [pid 6090] write(3, "1000", 4 [pid 6089] <... clone resumed>, parent_tid=[6091], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6091 [pid 6090] <... write resumed>) = 4 [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] close(3 [pid 6089] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6091 attached [pid 6090] <... close resumed>) = 0 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6091] set_robust_list(0x7fe973f6a9e0, 24 [pid 6090] symlink("/dev/binderfs", "./binderfs" [pid 6091] <... set_robust_list resumed>) = 0 [pid 6090] <... symlink resumed>) = 0 [pid 6091] memfd_create("syzkaller", 0 [pid 6090] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... memfd_create resumed>) = 3 [pid 6090] <... futex resumed>) = 0 [pid 6091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6090] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6091] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6090] <... mmap resumed>) = 0x7fe973f4a000 [pid 6090] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6090] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6092], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6092 [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6092] memfd_create("syzkaller", 0) = 3 [pid 6092] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6086] <... ioctl resumed>) = 0 [pid 6086] close(4) = 0 [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6086] creat("./bus", 000 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6086] open("./bus", O_RDONLY [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... open resumed>) = 3 [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6086] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... write resumed>) = 16777216 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6086] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] munmap(0x7fe96bb4a000, 16777216 [pid 6086] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6086] fallocate(-1, 0, 0, 1048820 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6086] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6084] <... ioctl resumed>) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] close(4 [pid 6088] <... munmap resumed>) = 0 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6084] <... close resumed>) = 0 [pid 6086] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6086] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6084] <... futex resumed>) = 1 [pid 6083] <... futex resumed>) = 0 [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6086] <... futex resumed>) = 1 [pid 6085] <... futex resumed>) = 0 [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] <... futex resumed>) = 0 [pid 6088] <... openat resumed>) = 4 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6084] creat("./bus", 000 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] ioctl(4, LOOP_SET_FD, 3 [pid 6086] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6085] <... futex resumed>) = 0 [pid 6084] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6086] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6086] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6086] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6085] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6085] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6084] <... futex resumed>) = 1 [pid 6083] <... futex resumed>) = 0 [pid 6085] exit_group(0 [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... ioctl resumed>) = 0 [pid 6086] <... futex resumed>) = ? [pid 6085] <... exit_group resumed>) = ? [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] <... futex resumed>) = 0 [pid 6088] close(3 [pid 6086] +++ exited with 0 +++ [pid 6085] +++ exited with 0 +++ [pid 6084] open("./bus", O_RDONLY [pid 6088] <... close resumed>) = 0 [pid 6084] <... open resumed>) = 3 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] mkdir("./bus", 0777 [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6085, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=35 /* 0.35 s */} --- [pid 6084] <... futex resumed>) = 0 [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 6088] <... mkdir resumed>) = 0 [pid 6084] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6083] <... futex resumed>) = 0 [pid 5015] <... restart_syscall resumed>) = 0 [pid 6088] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6084] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6084] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 3 [pid 6084] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] fstat(3, [pid 6084] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6083] <... futex resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] getdents64(3, [pid 6084] <... futex resumed>) = 0 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] fallocate(-1, 0, 0, 1048820 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] lstat("./103/bus", [pid 6084] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] <... futex resumed>) = 1 [pid 6083] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6088] <... mount resumed>) = -1 EEXIST (File exists) [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6088] ioctl(4, LOOP_CLR_FD [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] <... futex resumed>) = 0 [pid 5015] <... openat resumed>) = 4 [pid 6084] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] fstat(4, [pid 6084] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] getdents64(4, [pid 6084] <... futex resumed>) = 1 [pid 6083] <... futex resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] getdents64(4, [pid 6084] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6083] <... futex resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6084] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6083] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] close(4 [pid 6084] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5015] <... close resumed>) = 0 [pid 6084] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] rmdir("./103/bus" [pid 6084] <... futex resumed>) = 1 [pid 6083] <... futex resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 6084] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6083] exit_group(0 [pid 5015] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6084] <... futex resumed>) = ? [pid 6083] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6084] +++ exited with 0 +++ [pid 5015] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./103/binderfs" [pid 6083] +++ exited with 0 +++ [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6083, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=41 /* 0.41 s */} --- [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 5015] close(3 [pid 5013] <... restart_syscall resumed>) = 0 [pid 5015] <... close resumed>) = 0 [ 257.571551][ T6088] loop1: detected capacity change from 0 to 32768 [ 257.597675][ T6088] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6088) [pid 5015] rmdir("./103") = 0 [pid 5013] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] mkdir("./104", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] <... openat resumed>) = 3 [pid 5015] <... openat resumed>) = 3 [pid 5013] fstat(3, [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] getdents64(3, [pid 5015] close(3 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] <... close resumed>) = 0 [pid 5013] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./103/bus", [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6093 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./103/bus") = 0 [pid 5013] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./103/binderfs") = 0 ./strace-static-x86_64: Process 6093 attached [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./103" [pid 6093] set_robust_list(0x5555561c25e0, 24 [pid 5013] <... rmdir resumed>) = 0 [pid 6093] <... set_robust_list resumed>) = 0 [pid 5013] mkdir("./104", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6093] chdir("./104" [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6093] <... chdir resumed>) = 0 [pid 5013] close(3 [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... close resumed>) = 0 [pid 6093] <... prctl resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6093] setpgid(0, 0) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6094 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6094 attached ) = 3 [pid 6094] set_robust_list(0x5555561c25e0, 24 [pid 6093] write(3, "1000", 4 [pid 6094] <... set_robust_list resumed>) = 0 [pid 6094] chdir("./104") = 0 [pid 6093] <... write resumed>) = 4 [pid 6094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6094] setpgid(0, 0) = 0 [pid 6094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6093] close(3 [pid 6094] <... openat resumed>) = 3 [pid 6093] <... close resumed>) = 0 [pid 6094] write(3, "1000", 4 [pid 6093] symlink("/dev/binderfs", "./binderfs" [pid 6094] <... write resumed>) = 4 [pid 6094] close(3 [pid 6093] <... symlink resumed>) = 0 [pid 6094] <... close resumed>) = 0 [pid 6093] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] symlink("/dev/binderfs", "./binderfs" [pid 6093] <... futex resumed>) = 0 [pid 6094] <... symlink resumed>) = 0 [pid 6093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] <... mmap resumed>) = 0x7fe973f4a000 [pid 6094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6093] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6094] <... mmap resumed>) = 0x7fe973f4a000 [pid 6094] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6093] <... mprotect resumed>) = 0 [pid 6094] <... mprotect resumed>) = 0 [pid 6094] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6093] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6095 attached [pid 6091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6095] set_robust_list(0x7fe973f6a9e0, 24 [pid 6094] <... clone resumed>, parent_tid=[6095], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6095 [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6095] <... set_robust_list resumed>) = 0 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6093] <... clone resumed>, parent_tid=[6096], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6096 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] memfd_create("syzkaller", 0 [pid 6093] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6095] <... memfd_create resumed>) = 3 [pid 6095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6096] memfd_create("syzkaller", 0) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6092] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6088] <... ioctl resumed>) = 0 [pid 6088] close(4) = 0 [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6088] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 0 [pid 6088] creat("./bus", 000 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6088] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 0 [pid 6088] open("./bus", O_RDONLY [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] <... open resumed>) = 3 [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6087] <... futex resumed>) = 0 [pid 6088] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6087] <... futex resumed>) = 0 [pid 6088] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] <... futex resumed>) = 0 [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6087] <... futex resumed>) = 0 [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] <... futex resumed>) = 0 [pid 6087] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6088] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6087] <... futex resumed>) = 0 [pid 6088] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6087] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6088] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6087] <... futex resumed>) = 0 [pid 6088] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6087] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6088] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6087] <... futex resumed>) = 0 [pid 6088] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] exit_group(0 [pid 6088] <... futex resumed>) = ? [pid 6087] <... exit_group resumed>) = ? [pid 6088] +++ exited with 0 +++ [pid 6087] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6087, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./104/bus") = 0 [pid 5011] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./104/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./104") = 0 [pid 5011] mkdir("./105", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6097 ./strace-static-x86_64: Process 6097 attached [pid 6097] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6097] chdir("./105") = 0 [pid 6097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6097] setpgid(0, 0) = 0 [pid 6097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6097] write(3, "1000", 4) = 4 [pid 6097] close(3) = 0 [pid 6097] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6097] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6097] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6098], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6098 [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6098 attached [pid 6098] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6098] memfd_create("syzkaller", 0) = 3 [pid 6098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6091] <... write resumed>) = 16777216 [pid 6091] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6091] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6091] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6091] close(3) = 0 [pid 6091] mkdir("./bus", 0777) = 0 [pid 6091] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 258.368554][ T6091] loop2: detected capacity change from 0 to 32768 [ 258.401559][ T6091] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6091) [pid 6091] ioctl(4, LOOP_CLR_FD [pid 6092] <... write resumed>) = 16777216 [pid 6092] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6092] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6092] <... openat resumed>) = 4 [pid 6092] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6092] close(3) = 0 [pid 6092] mkdir("./bus", 0777) = 0 [pid 6092] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 258.566448][ T6092] loop4: detected capacity change from 0 to 32768 [ 258.582645][ T6092] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6092) [pid 6092] ioctl(4, LOOP_CLR_FD [pid 6095] <... write resumed>) = 16777216 [pid 6095] munmap(0x7fe96bb4a000, 16777216 [pid 6096] <... write resumed>) = 16777216 [pid 6096] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6095] <... munmap resumed>) = 0 [pid 6091] <... ioctl resumed>) = 0 [pid 6095] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6095] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6091] close(4 [pid 6095] close(3 [pid 6091] <... close resumed>) = 0 [pid 6096] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6095] <... close resumed>) = 0 [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... openat resumed>) = 4 [pid 6095] mkdir("./bus", 0777 [pid 6091] <... futex resumed>) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6096] ioctl(4, LOOP_SET_FD, 3 [pid 6095] <... mkdir resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... ioctl resumed>) = 0 [pid 6095] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [ 258.790300][ T6095] loop3: detected capacity change from 0 to 32768 [ 258.828143][ T6096] loop5: detected capacity change from 0 to 32768 [pid 6091] creat("./bus", 000 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] close(3) = 0 [pid 6096] mkdir("./bus", 0777) = 0 [pid 6091] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6096] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [pid 6095] <... mount resumed>) = -1 EEXIST (File exists) [pid 6091] open("./bus", O_RDONLY [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6095] ioctl(4, LOOP_CLR_FD [pid 6091] <... open resumed>) = 3 [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [pid 6091] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [pid 6091] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [pid 6091] fallocate(-1, 0, 0, 1048820 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6091] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6089] <... futex resumed>) = 0 [pid 6098] <... write resumed>) = 16777216 [pid 6096] <... mount resumed>) = -1 EEXIST (File exists) [pid 6091] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] munmap(0x7fe96bb4a000, 16777216 [pid 6096] ioctl(4, LOOP_CLR_FD [pid 6091] <... write resumed>) = -1 EBADF (Bad file descriptor) [ 258.839946][ T6095] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6095) [ 258.863464][ T6096] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6096) [pid 6098] <... munmap resumed>) = 0 [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6091] <... futex resumed>) = 1 [pid 6098] <... openat resumed>) = 4 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6098] ioctl(4, LOOP_SET_FD, 3 [pid 6089] <... futex resumed>) = 0 [pid 6098] <... ioctl resumed>) = 0 [pid 6098] close(3) = 0 [pid 6098] mkdir("./bus", 0777) = 0 [pid 6098] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6089] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6091] <... futex resumed>) = 0 [pid 6091] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6091] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6089] <... futex resumed>) = 0 [pid 6091] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6089] exit_group(0 [pid 6091] <... futex resumed>) = ? [pid 6089] <... exit_group resumed>) = ? [pid 6091] +++ exited with 0 +++ [pid 6089] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6089, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 6092] <... ioctl resumed>) = 0 [pid 5012] umount2("./102", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] close(4) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./102", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6092] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 6092] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5012] fstat(3, [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] <... futex resumed>) = 0 [pid 6092] creat("./bus", 000 [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] getdents64(3, [pid 6092] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6092] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 6092] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] open("./bus", O_RDONLY [pid 6090] <... futex resumed>) = 0 [pid 6092] <... open resumed>) = 3 [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] <... futex resumed>) = 0 [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6090] <... futex resumed>) = 0 [pid 5012] lstat("./102/bus", [pid 6092] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6092] <... futex resumed>) = 0 [pid 5012] umount2("./102/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "./102/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6092] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... openat resumed>) = 4 [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] fstat(4, [pid 6092] <... futex resumed>) = 1 [pid 6090] <... futex resumed>) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] fallocate(-1, 0, 0, 1048820 [pid 6090] <... futex resumed>) = 0 [pid 5012] getdents64(4, [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6090] <... futex resumed>) = 0 [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(4, [pid 6092] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6090] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6092] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] close(4 [pid 6092] <... futex resumed>) = 0 [pid 6090] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6090] <... futex resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 6098] <... mount resumed>) = -1 EEXIST (File exists) [pid 6092] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6090] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 258.930790][ T6098] loop1: detected capacity change from 0 to 32768 [ 258.964552][ T6098] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6098) [pid 5012] rmdir("./102/bus" [pid 6092] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6098] ioctl(4, LOOP_CLR_FD [pid 6092] <... futex resumed>) = 0 [pid 6090] exit_group(0 [pid 5012] <... rmdir resumed>) = 0 [pid 6090] <... exit_group resumed>) = ? [pid 5012] umount2("./102/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6092] +++ exited with 0 +++ [pid 6090] +++ exited with 0 +++ [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6090, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] lstat("./102/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./102/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] rmdir("./102" [pid 5014] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] fstat(3, [pid 5012] mkdir("./103", 0777 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... openat resumed>) = 3 [pid 5014] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] lstat("./104/bus", [pid 5012] close(3 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... close resumed>) = 0 [pid 5014] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6099 [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 ./strace-static-x86_64: Process 6099 attached [pid 5014] rmdir("./104/bus" [pid 6099] set_robust_list(0x5555561c25e0, 24 [pid 5014] <... rmdir resumed>) = 0 [pid 6099] <... set_robust_list resumed>) = 0 [pid 5014] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6099] chdir("./103" [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6099] <... chdir resumed>) = 0 [pid 5014] lstat("./104/binderfs", [pid 6099] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6099] <... prctl resumed>) = 0 [pid 5014] unlink("./104/binderfs" [pid 6099] setpgid(0, 0 [pid 5014] <... unlink resumed>) = 0 [pid 6099] <... setpgid resumed>) = 0 [pid 5014] getdents64(3, [pid 6099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6099] <... openat resumed>) = 3 [pid 5014] close(3 [pid 6099] write(3, "1000", 4 [pid 5014] <... close resumed>) = 0 [pid 6099] <... write resumed>) = 4 [pid 5014] rmdir("./104" [pid 6099] close(3 [pid 5014] <... rmdir resumed>) = 0 [pid 6099] <... close resumed>) = 0 [pid 5014] mkdir("./105", 0777 [pid 6099] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... mkdir resumed>) = 0 [pid 6099] <... symlink resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6099] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 6099] <... futex resumed>) = 0 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 6099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6099] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] close(3 [pid 6099] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] <... close resumed>) = 0 [pid 6099] <... mprotect resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6099] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6100 [pid 6099] <... clone resumed>, parent_tid=[6101], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6101 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6100 attached ./strace-static-x86_64: Process 6101 attached [pid 6100] set_robust_list(0x5555561c25e0, 24 [pid 6101] set_robust_list(0x7fe973f6a9e0, 24 [pid 6100] <... set_robust_list resumed>) = 0 [pid 6101] <... set_robust_list resumed>) = 0 [pid 6100] chdir("./105" [pid 6101] memfd_create("syzkaller", 0 [pid 6100] <... chdir resumed>) = 0 [pid 6101] <... memfd_create resumed>) = 3 [pid 6100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6100] <... prctl resumed>) = 0 [pid 6101] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6100] setpgid(0, 0) = 0 [pid 6100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6100] write(3, "1000", 4) = 4 [pid 6100] close(3) = 0 [pid 6100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6100] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6100] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6102], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6102 [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6102 attached [pid 6102] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6102] memfd_create("syzkaller", 0) = 3 [pid 6102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6095] <... ioctl resumed>) = 0 [pid 6095] close(4) = 0 [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6095] creat("./bus", 000 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6095] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6096] <... ioctl resumed>) = 0 [pid 6095] open("./bus", O_RDONLY [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] close(4 [pid 6095] <... open resumed>) = 3 [pid 6096] <... close resumed>) = 0 [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6096] <... futex resumed>) = 1 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... ioctl resumed>) = 0 [pid 6096] creat("./bus", 000 [pid 6095] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6098] close(4 [pid 6096] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... close resumed>) = 0 [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 1 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6096] open("./bus", O_RDONLY [pid 6095] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] creat("./bus", 000 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... open resumed>) = 3 [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 1 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] fallocate(-1, 0, 0, 1048820 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6095] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] open("./bus", O_RDONLY [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... open resumed>) = 3 [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 1 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6096] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6095] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 1 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] <... futex resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6095] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6094] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = 0 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6096] fallocate(-1, 0, 0, 1048820 [pid 6095] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6098] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6095] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] <... futex resumed>) = 1 [pid 6094] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 0 [pid 6095] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] exit_group(0 [pid 6098] <... futex resumed>) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6095] <... futex resumed>) = ? [pid 6094] <... exit_group resumed>) = ? [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6095] +++ exited with 0 +++ [pid 6094] +++ exited with 0 +++ [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6098] fallocate(-1, 0, 0, 1048820 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6098] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6094, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 6098] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6097] <... futex resumed>) = 0 [pid 6098] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6097] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6098] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6098] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6097] <... futex resumed>) = 0 [pid 6098] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6097] exit_group(0 [pid 6098] <... futex resumed>) = ? [pid 6097] <... exit_group resumed>) = ? [pid 6098] +++ exited with 0 +++ [pid 6097] +++ exited with 0 +++ [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... futex resumed>) = 0 [pid 6093] <... futex resumed>) = 1 [pid 6096] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6097, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 5013] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 6093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... restart_syscall resumed>) = 0 [pid 6093] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6096] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6093] <... futex resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6096] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6093] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] fstat(3, [pid 5011] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] <... futex resumed>) = 0 [pid 6093] exit_group(0 [pid 6096] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6096] <... futex resumed>) = ? [pid 6093] <... exit_group resumed>) = ? [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6096] +++ exited with 0 +++ [pid 6093] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=32 /* 0.32 s */} --- [pid 5011] <... openat resumed>) = 3 [pid 5013] getdents64(3, [pid 5011] fstat(3, [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] getdents64(3, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] lstat("./105/bus", [pid 5015] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 4 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] fstat(3, [pid 5013] fstat(4, [pid 5011] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(3, [pid 5011] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] getdents64(4, [pid 5015] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... openat resumed>) = 4 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./104/bus", [pid 5013] getdents64(4, [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] close(4 [pid 5011] getdents64(4, [pid 5013] <... close resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] rmdir("./104/bus") = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] getdents64(4, [pid 5013] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] <... openat resumed>) = 4 [pid 5011] close(4 [pid 5015] fstat(4, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... close resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] rmdir("./105/bus" [pid 5015] getdents64(4, [pid 5011] <... rmdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] lstat("./104/binderfs", [pid 5011] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] close(4 [pid 5013] unlink("./104/binderfs" [pid 5011] lstat("./105/binderfs", [pid 5015] <... close resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5015] rmdir("./104/bus" [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] getdents64(3, [pid 5011] unlink("./105/binderfs" [pid 5015] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... unlink resumed>) = 0 [pid 5013] close(3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5015] lstat("./104/binderfs", [pid 5013] rmdir("./104" [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5015] unlink("./104/binderfs" [pid 5011] close(3 [pid 5013] mkdir("./105", 0777 [pid 5015] <... unlink resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] <... mkdir resumed>) = 0 [pid 5011] rmdir("./105" [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] <... rmdir resumed>) = 0 [pid 5015] close(3 [pid 5011] mkdir("./106", 0777 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./104" [pid 5011] <... mkdir resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5015] mkdir("./105", 0777 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] <... openat resumed>) = 3 [pid 5013] close(3 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5013] <... close resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... mkdir resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] close(3 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6104 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6103 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6105 ./strace-static-x86_64: Process 6104 attached ./strace-static-x86_64: Process 6103 attached [pid 6103] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6103] chdir("./105"./strace-static-x86_64: Process 6105 attached [pid 6104] set_robust_list(0x5555561c25e0, 24 [pid 6103] <... chdir resumed>) = 0 [pid 6104] <... set_robust_list resumed>) = 0 [pid 6103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6103] setpgid(0, 0) = 0 [pid 6103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6104] chdir("./105") = 0 [pid 6103] <... openat resumed>) = 3 [pid 6105] set_robust_list(0x5555561c25e0, 24 [pid 6102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6103] write(3, "1000", 4) = 4 [pid 6103] close(3) = 0 [pid 6104] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6103] symlink("/dev/binderfs", "./binderfs" [pid 6105] <... set_robust_list resumed>) = 0 [pid 6103] <... symlink resumed>) = 0 [pid 6105] chdir("./106" [pid 6104] <... prctl resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6103] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6104] setpgid(0, 0 [pid 6103] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6105] <... chdir resumed>) = 0 [pid 6104] <... setpgid resumed>) = 0 [pid 6103] <... mprotect resumed>) = 0 [pid 6105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6105] setpgid(0, 0) = 0 [pid 6104] <... openat resumed>) = 3 [pid 6103] <... clone resumed>, parent_tid=[6106], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6106 [pid 6105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] write(3, "1000", 4 [pid 6103] <... futex resumed>) = 0 [pid 6105] <... openat resumed>) = 3 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6105] write(3, "1000", 4 [pid 6104] <... write resumed>) = 4 [pid 6105] <... write resumed>) = 4 [pid 6104] close(3 [pid 6105] close(3) = 0 [pid 6104] <... close resumed>) = 0 [pid 6105] symlink("/dev/binderfs", "./binderfs" [pid 6104] symlink("/dev/binderfs", "./binderfs" [pid 6105] <... symlink resumed>) = 0 [pid 6104] <... symlink resumed>) = 0 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 6105] <... futex resumed>) = 0 [pid 6104] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6104] <... mmap resumed>) = 0x7fe973f4a000 [pid 6105] <... mmap resumed>) = 0x7fe973f4a000 [pid 6104] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6105] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6104] <... mprotect resumed>) = 0 [pid 6105] <... mprotect resumed>) = 0 [pid 6104] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6105] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6104] <... clone resumed>, parent_tid=[6107], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6107 [pid 6105] <... clone resumed>, parent_tid=[6108], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6108 [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6108 attached [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 6108] set_robust_list(0x7fe973f6a9e0, 24 [pid 6105] <... futex resumed>) = 0 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6107 attached [pid 6108] <... set_robust_list resumed>) = 0 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6106 attached [pid 6107] set_robust_list(0x7fe973f6a9e0, 24 [pid 6108] memfd_create("syzkaller", 0 [pid 6107] <... set_robust_list resumed>) = 0 [pid 6106] set_robust_list(0x7fe973f6a9e0, 24 [pid 6108] <... memfd_create resumed>) = 3 [pid 6107] memfd_create("syzkaller", 0 [pid 6106] <... set_robust_list resumed>) = 0 [pid 6108] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6107] <... memfd_create resumed>) = 3 [pid 6106] memfd_create("syzkaller", 0 [pid 6108] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6106] <... memfd_create resumed>) = 3 [pid 6107] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6106] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6101] <... write resumed>) = 16777216 [pid 6101] munmap(0x7fe96bb4a000, 16777216 [pid 6106] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6101] <... munmap resumed>) = 0 [pid 6101] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6101] ioctl(4, LOOP_SET_FD, 3 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6101] <... ioctl resumed>) = 0 [pid 6108] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6101] close(3) = 0 [pid 6101] mkdir("./bus", 0777) = 0 [pid 6101] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 260.056513][ T6101] loop2: detected capacity change from 0 to 32768 [ 260.089057][ T6101] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6101) [pid 6101] ioctl(4, LOOP_CLR_FD [pid 6102] <... write resumed>) = 16777216 [pid 6102] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6102] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6102] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6102] close(3) = 0 [pid 6102] mkdir("./bus", 0777) = 0 [pid 6102] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 260.204118][ T6102] loop4: detected capacity change from 0 to 32768 [ 260.222747][ T6102] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6102) [pid 6102] ioctl(4, LOOP_CLR_FD [pid 6101] <... ioctl resumed>) = 0 [pid 6101] close(4) = 0 [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6101] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6099] <... futex resumed>) = 0 [pid 6101] creat("./bus", 000 [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] open("./bus", O_RDONLY) = 3 [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6099] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6101] <... futex resumed>) = 0 [pid 6101] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6099] <... futex resumed>) = 0 [pid 6101] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6099] <... futex resumed>) = 0 [pid 6101] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] fallocate(-1, 0, 0, 1048820 [pid 6099] <... futex resumed>) = 0 [pid 6101] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6099] <... futex resumed>) = 0 [pid 6101] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6099] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6101] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6099] <... futex resumed>) = 0 [pid 6101] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6099] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6101] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6101] <... futex resumed>) = 0 [pid 6099] exit_group(0) = ? [pid 6101] +++ exited with 0 +++ [pid 6099] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6099, si_uid=0, si_status=0, si_utime=11 /* 0.11 s */, si_stime=37 /* 0.37 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./103", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./103", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./103/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./103/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./103/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6108] <... write resumed>) = 16777216 [pid 6102] <... ioctl resumed>) = 0 [pid 5012] fstat(4, [pid 6108] munmap(0x7fe96bb4a000, 16777216 [pid 6102] close(4 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./103/bus") = 0 [pid 5012] umount2("./103/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./103/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./103/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./103" [pid 6102] <... close resumed>) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./104", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6109 [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6100] <... futex resumed>) = 0 [pid 6108] <... munmap resumed>) = 0 [pid 6102] creat("./bus", 000 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6109 attached [pid 6108] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6102] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6109] set_robust_list(0x5555561c25e0, 24 [pid 6108] <... openat resumed>) = 4 [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... set_robust_list resumed>) = 0 [pid 6108] ioctl(4, LOOP_SET_FD, 3 [pid 6102] <... futex resumed>) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6109] chdir("./104" [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... chdir resumed>) = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6109] setpgid(0, 0) = 0 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6109] write(3, "1000", 4 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6109] <... write resumed>) = 4 [pid 6100] <... futex resumed>) = 0 [pid 6109] close(3 [pid 6102] open("./bus", O_RDONLY [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] <... close resumed>) = 0 [pid 6102] <... open resumed>) = 3 [pid 6109] symlink("/dev/binderfs", "./binderfs" [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... symlink resumed>) = 0 [pid 6102] <... futex resumed>) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6100] <... futex resumed>) = 0 [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] <... mmap resumed>) = 0x7fe973f4a000 [pid 6102] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6109] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... mprotect resumed>) = 0 [pid 6102] <... futex resumed>) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6109] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6108] <... ioctl resumed>) = 0 [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] close(3 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6100] <... futex resumed>) = 0 [pid 6109] <... clone resumed>, parent_tid=[6110], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6110 [pid 6108] <... close resumed>) = 0 [pid 6102] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] mkdir("./bus", 0777 [pid 6102] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6109] <... futex resumed>) = 0 [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6110 attached [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6108] <... mkdir resumed>) = 0 [pid 6102] <... futex resumed>) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6110] set_robust_list(0x7fe973f6a9e0, 24 [pid 6108] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6100] <... futex resumed>) = 0 [ 260.614063][ T6108] loop1: detected capacity change from 0 to 32768 [pid 6110] memfd_create("syzkaller", 0 [pid 6106] <... write resumed>) = 16777216 [pid 6102] fallocate(-1, 0, 0, 1048820 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] <... memfd_create resumed>) = 3 [pid 6110] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6102] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6100] <... futex resumed>) = 0 [pid 6102] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6108] <... mount resumed>) = -1 EEXIST (File exists) [pid 6107] <... write resumed>) = 16777216 [pid 6106] munmap(0x7fe96bb4a000, 16777216 [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] ioctl(4, LOOP_CLR_FD [pid 6107] munmap(0x7fe96bb4a000, 16777216 [pid 6102] <... futex resumed>) = 1 [pid 6100] <... futex resumed>) = 0 [pid 6102] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6100] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6107] <... munmap resumed>) = 0 [pid 6102] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6100] <... futex resumed>) = 0 [pid 6102] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6100] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6102] <... futex resumed>) = 0 [pid 6100] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6107] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6106] <... munmap resumed>) = 0 [pid 6102] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6100] exit_group(0 [pid 6107] <... openat resumed>) = 4 [pid 6106] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6102] <... futex resumed>) = ? [pid 6100] <... exit_group resumed>) = ? [pid 6107] ioctl(4, LOOP_SET_FD, 3 [pid 6106] <... openat resumed>) = 4 [pid 6102] +++ exited with 0 +++ [pid 6100] +++ exited with 0 +++ [ 260.656756][ T6108] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6108) [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6100, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=43 /* 0.43 s */} --- [pid 5014] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6107] <... ioctl resumed>) = 0 [pid 6106] ioctl(4, LOOP_SET_FD, 3 [pid 5014] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6107] close(3 [pid 5014] lstat("./105/bus", [pid 6107] <... close resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] mkdir("./bus", 0777 [pid 5014] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... mkdir resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6106] <... ioctl resumed>) = 0 [pid 5014] <... openat resumed>) = 4 [pid 6106] close(3 [pid 5014] fstat(4, [pid 6106] <... close resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6106] mkdir("./bus", 0777 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6106] <... mkdir resumed>) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./105/bus") = 0 [pid 5014] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./105/binderfs") = 0 [pid 6106] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./105") = 0 [pid 5014] mkdir("./106", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6111 [pid 6107] <... mount resumed>) = -1 EEXIST (File exists) [ 260.707941][ T6107] loop3: detected capacity change from 0 to 32768 [ 260.716891][ T6106] loop5: detected capacity change from 0 to 32768 [ 260.724860][ T6107] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6107) ./strace-static-x86_64: Process 6111 attached [pid 6111] set_robust_list(0x5555561c25e0, 24 [pid 6107] ioctl(4, LOOP_CLR_FD [pid 6111] <... set_robust_list resumed>) = 0 [pid 6111] chdir("./106") = 0 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6111] setpgid(0, 0) = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6111] write(3, "1000", 4) = 4 [pid 6111] close(3) = 0 [pid 6111] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6111] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6111] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6112], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6112 [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6112 attached [pid 6112] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6112] memfd_create("syzkaller", 0) = 3 [pid 6112] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6106] <... mount resumed>) = -1 EEXIST (File exists) [ 260.769627][ T6106] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6106) [pid 6106] ioctl(4, LOOP_CLR_FD [pid 6108] <... ioctl resumed>) = 0 [pid 6110] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6108] close(4) = 0 [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6108] creat("./bus", 000 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6108] open("./bus", O_RDONLY [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] <... open resumed>) = 3 [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6108] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6108] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6105] <... futex resumed>) = 0 [pid 6108] fallocate(-1, 0, 0, 1048820 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... ioctl resumed>) = 0 [pid 6108] <... futex resumed>) = 1 [pid 6106] close(4 [pid 6105] <... futex resumed>) = 0 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... close resumed>) = 0 [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] <... futex resumed>) = 0 [pid 6108] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6106] <... futex resumed>) = 1 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 6108] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 6108] <... futex resumed>) = 1 [pid 6106] creat("./bus", 000 [pid 6105] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] <... ioctl resumed>) = 0 [pid 6106] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6105] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] <... futex resumed>) = 0 [pid 6108] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6106] <... futex resumed>) = 1 [pid 6105] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 6108] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6107] close(4 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 6108] <... futex resumed>) = 1 [pid 6107] <... close resumed>) = 0 [pid 6106] open("./bus", O_RDONLY [pid 6105] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6107] <... futex resumed>) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6107] creat("./bus", 000 [pid 6106] <... open resumed>) = 3 [pid 6105] exit_group(0 [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6108] <... futex resumed>) = ? [pid 6107] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6105] <... exit_group resumed>) = ? [pid 6104] <... futex resumed>) = 0 [pid 6108] +++ exited with 0 +++ [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 1 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 0 [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6105] +++ exited with 0 +++ [pid 6104] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6103] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 1 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6105, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=39 /* 0.39 s */} --- [pid 6107] open("./bus", O_RDONLY [pid 6106] <... futex resumed>) = 0 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 6112] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6107] <... open resumed>) = 3 [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... restart_syscall resumed>) = 0 [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 1 [pid 6106] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6104] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6106] <... futex resumed>) = 1 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... openat resumed>) = 3 [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 5011] fstat(3, [pid 6107] <... futex resumed>) = 1 [pid 6106] fallocate(-1, 0, 0, 1048820 [pid 6104] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] getdents64(3, [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6107] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6106] <... futex resumed>) = 1 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 5011] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 5011] lstat("./106/bus", [pid 6107] <... futex resumed>) = 1 [pid 6106] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6104] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6107] fallocate(-1, 0, 0, 1048820 [pid 6106] <... futex resumed>) = 1 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6107] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... openat resumed>) = 4 [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6103] <... futex resumed>) = 0 [pid 5011] fstat(4, [pid 6107] <... futex resumed>) = 1 [pid 6106] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6104] <... futex resumed>) = 0 [pid 6103] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] getdents64(4, [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6106] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6104] <... futex resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6107] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6106] <... futex resumed>) = 1 [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6103] <... futex resumed>) = 0 [pid 5011] getdents64(4, [pid 6107] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6106] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6103] exit_group(0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = ? [pid 6103] <... exit_group resumed>) = ? [pid 5011] close(4 [pid 6107] <... futex resumed>) = 1 [pid 6106] +++ exited with 0 +++ [pid 6104] <... futex resumed>) = 0 [pid 6103] +++ exited with 0 +++ [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6104] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... close resumed>) = 0 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6103, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 6107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6104] <... futex resumed>) = 0 [pid 5011] rmdir("./106/bus" [pid 6107] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6104] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... rmdir resumed>) = 0 [pid 6107] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6107] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] <... futex resumed>) = 1 [pid 6104] <... futex resumed>) = 0 [pid 6107] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5015] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6104] exit_group(0 [pid 6107] <... futex resumed>) = ? [pid 6104] <... exit_group resumed>) = ? [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./106/binderfs", [pid 6107] +++ exited with 0 +++ [pid 6104] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6104, si_uid=0, si_status=0, si_utime=12 /* 0.12 s */, si_stime=44 /* 0.44 s */} --- [pid 5015] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] <... openat resumed>) = 3 [pid 5011] unlink("./106/binderfs" [pid 5015] fstat(3, [pid 5011] <... unlink resumed>) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, [pid 5015] getdents64(3, [pid 5013] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5015] lstat("./105/bus", [pid 5013] fstat(3, [pid 5011] close(3 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... close resumed>) = 0 [pid 5015] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(3, [pid 5011] rmdir("./106" [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./105/bus", [pid 5015] fstat(4, [pid 5011] <... rmdir resumed>) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] getdents64(4, [pid 5011] mkdir("./107", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] getdents64(4, [pid 5013] <... openat resumed>) = 4 [pid 5011] <... mkdir resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] close(4 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5013] getdents64(4, [pid 5015] rmdir("./105/bus" [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... openat resumed>) = 3 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(4, [pid 5011] ioctl(3, LOOP_CLR_FD [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./105/binderfs", [pid 5013] close(4 [pid 5011] close(3 [pid 5013] <... close resumed>) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] rmdir("./105/bus" [pid 5011] <... close resumed>) = 0 [pid 5015] unlink("./105/binderfs" [pid 5013] <... rmdir resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6113 [pid 5015] close(3 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] <... close resumed>) = 0 [pid 5013] lstat("./105/binderfs", [pid 5015] rmdir("./105" [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./106", 0777 [pid 5013] unlink("./105/binderfs") = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] rmdir("./105") = 0 [pid 5013] mkdir("./106", 0777 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... mkdir resumed>) = 0 [pid 5015] close(3 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6114 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6115 ./strace-static-x86_64: Process 6113 attached [pid 6113] set_robust_list(0x5555561c25e0, 24) = 0 ./strace-static-x86_64: Process 6114 attached [pid 6114] set_robust_list(0x5555561c25e0, 24 [pid 6113] chdir("./107" [pid 6114] <... set_robust_list resumed>) = 0 [pid 6114] chdir("./106" [pid 6113] <... chdir resumed>) = 0 [pid 6114] <... chdir resumed>) = 0 [pid 6114] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6114] setpgid(0, 0) = 0 [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] <... prctl resumed>) = 0 [pid 6113] setpgid(0, 0) = 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6115 attached [pid 6114] <... openat resumed>) = 3 [pid 6113] <... openat resumed>) = 3 [pid 6115] set_robust_list(0x5555561c25e0, 24 [pid 6114] write(3, "1000", 4 [pid 6113] write(3, "1000", 4 [pid 6115] <... set_robust_list resumed>) = 0 [pid 6114] <... write resumed>) = 4 [pid 6115] chdir("./106" [pid 6114] close(3 [pid 6113] <... write resumed>) = 4 [pid 6115] <... chdir resumed>) = 0 [pid 6114] <... close resumed>) = 0 [pid 6113] close(3 [pid 6115] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6114] symlink("/dev/binderfs", "./binderfs" [pid 6115] <... prctl resumed>) = 0 [pid 6114] <... symlink resumed>) = 0 [pid 6113] <... close resumed>) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs" [pid 6115] setpgid(0, 0 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... symlink resumed>) = 0 [pid 6115] <... setpgid resumed>) = 0 [pid 6114] <... futex resumed>) = 0 [pid 6115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] <... openat resumed>) = 3 [pid 6114] <... mmap resumed>) = 0x7fe973f4a000 [pid 6115] write(3, "1000", 4 [pid 6114] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6113] <... futex resumed>) = 0 [pid 6115] <... write resumed>) = 4 [pid 6114] <... mprotect resumed>) = 0 [pid 6115] close(3 [pid 6114] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6115] <... close resumed>) = 0 [pid 6115] symlink("/dev/binderfs", "./binderfs" [pid 6114] <... clone resumed>, parent_tid=[6116], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6116 [pid 6113] <... mmap resumed>) = 0x7fe973f4a000 [pid 6115] <... symlink resumed>) = 0 [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6115] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = 0 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6113] <... mprotect resumed>) = 0 [pid 6115] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6113] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6115] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6115] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6113] <... clone resumed>, parent_tid=[6117], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6117 ./strace-static-x86_64: Process 6116 attached [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] set_robust_list(0x7fe973f6a9e0, 24 [pid 6115] <... clone resumed>, parent_tid=[6118], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6118 [pid 6113] <... futex resumed>) = 0 [pid 6116] <... set_robust_list resumed>) = 0 [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6116] memfd_create("syzkaller", 0 [pid 6115] <... futex resumed>) = 0 [pid 6116] <... memfd_create resumed>) = 3 [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6118 attached ) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 6117 attached [pid 6118] set_robust_list(0x7fe973f6a9e0, 24 [pid 6117] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6118] <... set_robust_list resumed>) = 0 [pid 6118] memfd_create("syzkaller", 0 [pid 6117] memfd_create("syzkaller", 0) = 3 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6118] <... memfd_create resumed>) = 3 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6117] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6110] <... write resumed>) = 16777216 [pid 6110] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6110] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6110] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6110] close(3) = 0 [pid 6110] mkdir("./bus", 0777) = 0 [pid 6110] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 261.617584][ T6110] loop2: detected capacity change from 0 to 32768 [ 261.632284][ T6110] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6110) [pid 6110] ioctl(4, LOOP_CLR_FD [pid 6112] <... write resumed>) = 16777216 [pid 6112] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6112] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6112] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6112] close(3) = 0 [pid 6112] mkdir("./bus", 0777) = 0 [ 261.799747][ T6112] loop4: detected capacity change from 0 to 32768 [pid 6112] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6112] <... mount resumed>) = -1 EEXIST (File exists) [ 261.839657][ T6112] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6112) [pid 6112] ioctl(4, LOOP_CLR_FD [pid 6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6110] <... ioctl resumed>) = 0 [pid 6110] close(4) = 0 [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6110] creat("./bus", 000 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] open("./bus", O_RDONLY [pid 6109] <... futex resumed>) = 0 [pid 6110] <... open resumed>) = 3 [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6109] <... futex resumed>) = 0 [pid 6110] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6109] <... futex resumed>) = 0 [pid 6110] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] fallocate(-1, 0, 0, 1048820 [pid 6109] <... futex resumed>) = 0 [pid 6110] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6109] <... futex resumed>) = 0 [pid 6110] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6109] <... futex resumed>) = 0 [pid 6110] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6109] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6110] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6109] exit_group(0) = ? [pid 6110] +++ exited with 0 +++ [pid 6109] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=37 /* 0.37 s */} --- [pid 5012] umount2("./104", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./104", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./104/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./104/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./104/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./104/bus") = 0 [pid 5012] umount2("./104/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./104/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./104/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./104") = 0 [pid 5012] mkdir("./105", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6119 ./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6119] chdir("./105") = 0 [pid 6119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6119] setpgid(0, 0) = 0 [pid 6119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6119] write(3, "1000", 4) = 4 [pid 6119] close(3) = 0 [pid 6119] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6119] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6119] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6119] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6120], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6120 [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6120 attached [pid 6120] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6120] memfd_create("syzkaller", 0) = 3 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6112] <... ioctl resumed>) = 0 [pid 6112] close(4) = 0 [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] creat("./bus", 000 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] open("./bus", O_RDONLY [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... open resumed>) = 3 [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] fallocate(-1, 0, 0, 1048820 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6112] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6111] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6112] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6112] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6112] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] exit_group(0 [pid 6112] <... futex resumed>) = ? [pid 6111] <... exit_group resumed>) = ? [pid 6112] +++ exited with 0 +++ [pid 6111] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=40 /* 0.40 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./106/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./106/bus") = 0 [pid 5014] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./106/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6117] <... write resumed>) = 16777216 [pid 5014] unlink("./106/binderfs") = 0 [pid 6117] munmap(0x7fe96bb4a000, 16777216 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./106") = 0 [pid 5014] mkdir("./107", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6121 ./strace-static-x86_64: Process 6121 attached [pid 6121] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6117] <... munmap resumed>) = 0 [pid 6121] chdir("./107") = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6117] <... openat resumed>) = 4 [pid 6121] setpgid(0, 0 [pid 6117] ioctl(4, LOOP_SET_FD, 3 [pid 6121] <... setpgid resumed>) = 0 [pid 6121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6121] write(3, "1000", 4) = 4 [pid 6121] close(3) = 0 [pid 6121] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6117] <... ioctl resumed>) = 0 [pid 6121] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6121] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6121] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6121] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6117] close(3) = 0 [pid 6121] <... clone resumed>, parent_tid=[6122], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6122 [pid 6117] mkdir("./bus", 0777 [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6117] <... mkdir resumed>) = 0 [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6118] <... write resumed>) = 16777216 [pid 6117] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,"./strace-static-x86_64: Process 6122 attached [pid 6118] munmap(0x7fe96bb4a000, 16777216 [pid 6122] set_robust_list(0x7fe973f6a9e0, 24 [pid 6117] <... mount resumed>) = -1 EEXIST (File exists) [pid 6122] <... set_robust_list resumed>) = 0 [pid 6122] memfd_create("syzkaller", 0) = 3 [pid 6122] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6117] ioctl(4, LOOP_CLR_FD [pid 6118] <... munmap resumed>) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 262.417903][ T6117] loop1: detected capacity change from 0 to 32768 [ 262.448212][ T6117] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6117) [pid 6118] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6118] close(3) = 0 [pid 6118] mkdir("./bus", 0777) = 0 [pid 6116] <... write resumed>) = 16777216 [pid 6118] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6116] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3 [pid 6118] <... mount resumed>) = -1 EEXIST (File exists) [pid 6118] ioctl(4, LOOP_CLR_FD [pid 6116] <... ioctl resumed>) = 0 [pid 6116] close(3) = 0 [pid 6116] mkdir("./bus", 0777) = 0 [ 262.484024][ T6118] loop3: detected capacity change from 0 to 32768 [ 262.502726][ T6118] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6118) [ 262.518487][ T6116] loop5: detected capacity change from 0 to 32768 [pid 6116] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 262.562083][ T6116] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6116) [pid 6116] ioctl(4, LOOP_CLR_FD [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6117] <... ioctl resumed>) = 0 [pid 6117] close(4) = 0 [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] creat("./bus", 000 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] open("./bus", O_RDONLY [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... open resumed>) = 3 [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] fallocate(-1, 0, 0, 1048820 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6117] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6113] <... futex resumed>) = 0 [pid 6117] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6113] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6116] <... ioctl resumed>) = 0 [pid 6117] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] close(4 [pid 6117] <... futex resumed>) = 1 [pid 6116] <... close resumed>) = 0 [pid 6113] <... futex resumed>) = 0 [pid 6113] exit_group(0 [pid 6117] exit_group(0 [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... exit_group resumed>) = ? [pid 6117] +++ exited with 0 +++ [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] +++ exited with 0 +++ [pid 6116] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6114] <... futex resumed>) = 0 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] <... futex resumed>) = 0 [pid 6116] open("./bus", O_RDONLY [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6116] <... open resumed>) = 3 [pid 5011] fstat(3, [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5011] getdents64(3, [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] <... futex resumed>) = 0 [pid 5011] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6116] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5011] lstat("./107/bus", [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6118] <... ioctl resumed>) = 0 [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5011] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] close(4 [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4 [pid 6118] <... close resumed>) = 0 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6114] <... futex resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] rmdir("./107/bus" [pid 6118] <... futex resumed>) = 1 [pid 6116] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6115] <... futex resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... futex resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] lstat("./107/binderfs", [pid 6118] creat("./bus", 000 [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6118] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5011] unlink("./107/binderfs" [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... unlink resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = 0 [pid 5011] getdents64(3, [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] fallocate(-1, 0, 0, 1048820 [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6116] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6115] <... futex resumed>) = 0 [pid 5011] close(3 [pid 6118] open("./bus", O_RDONLY [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... close resumed>) = 0 [pid 6118] <... open resumed>) = 3 [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5011] rmdir("./107" [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... rmdir resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = 0 [pid 5011] mkdir("./108", 0777 [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... mkdir resumed>) = 0 [pid 6118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6116] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6115] <... futex resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] <... openat resumed>) = 3 [pid 6120] <... write resumed>) = 16777216 [pid 6118] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6116] <... futex resumed>) = 1 [pid 6114] <... futex resumed>) = 0 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 6120] munmap(0x7fe96bb4a000, 16777216 [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... munmap resumed>) = 0 [pid 6118] <... futex resumed>) = 1 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 6114] <... futex resumed>) = 0 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6114] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6116] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6114] <... futex resumed>) = 0 [pid 6116] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6114] exit_group(0 [pid 6116] <... futex resumed>) = ? [pid 6114] <... exit_group resumed>) = ? [pid 6116] +++ exited with 0 +++ [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6114] +++ exited with 0 +++ [pid 5011] close(3 [pid 6120] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6118] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = 1 [pid 5011] <... close resumed>) = 0 [pid 6118] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6114, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=47 /* 0.47 s */} --- [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] restart_syscall(<... resuming interrupted clone ...> [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... restart_syscall resumed>) = 0 [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6123 [pid 6118] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6118] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5015] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6118] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = 1 [pid 6118] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5015] <... openat resumed>) = 3 [pid 6118] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] fstat(3, [pid 6118] <... futex resumed>) = 0 [pid 6115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6115] <... futex resumed>) = 0 [pid 5015] getdents64(3, [pid 6118] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6115] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6118] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5015] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6118] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6115] <... futex resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6115] exit_group(0 [pid 5015] lstat("./106/bus", [pid 6118] <... futex resumed>) = ? [pid 6115] <... exit_group resumed>) = ? [pid 6118] +++ exited with 0 +++ [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6120] <... ioctl resumed>) = 0 [pid 6120] close(3) = 0 [pid 6120] mkdir("./bus", 0777) = 0 [pid 6115] +++ exited with 0 +++ [pid 5015] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6115, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 5015] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6120] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... openat resumed>) = 4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] fstat(4, [pid 5013] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, [pid 5013] <... openat resumed>) = 3 [pid 5013] fstat(3, ./strace-static-x86_64: Process 6123 attached [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6120] <... mount resumed>) = -1 EEXIST (File exists) [pid 6120] ioctl(4, LOOP_CLR_FD [pid 6123] set_robust_list(0x5555561c25e0, 24 [pid 5015] getdents64(4, [pid 5013] getdents64(3, [pid 6123] <... set_robust_list resumed>) = 0 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./106/bus" [pid 5013] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6123] chdir("./108" [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] <... chdir resumed>) = 0 [pid 5015] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] lstat("./106/bus", [pid 6123] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6123] <... prctl resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6123] setpgid(0, 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] <... setpgid resumed>) = 0 [pid 5015] lstat("./106/binderfs", [pid 5013] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... openat resumed>) = 4 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./106/binderfs" [pid 5013] fstat(4, [pid 6123] <... openat resumed>) = 3 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5013] getdents64(4, [pid 6123] write(3, "1000", 4 [pid 5015] getdents64(3, [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6123] <... write resumed>) = 4 [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6123] close(3 [pid 5015] close(3 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] <... close resumed>) = 0 [pid 5013] close(4 [pid 6123] <... close resumed>) = 0 [pid 6123] symlink("/dev/binderfs", "./binderfs" [pid 5015] rmdir("./106" [pid 5013] <... close resumed>) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] rmdir("./106/bus" [pid 6123] <... symlink resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6123] <... futex resumed>) = 0 [pid 5015] mkdir("./107", 0777 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6123] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5013] lstat("./106/binderfs", [pid 6123] <... mmap resumed>) = 0x7fe973f4a000 [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./106/binderfs" [pid 6123] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5013] <... unlink resumed>) = 0 [pid 5013] getdents64(3, [pid 6123] <... mprotect resumed>) = 0 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6123] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] close(3 [pid 5015] <... openat resumed>) = 3 [pid 5013] <... close resumed>) = 0 [pid 6123] <... clone resumed>, parent_tid=[6124], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6124 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] rmdir("./106"./strace-static-x86_64: Process 6124 attached [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... rmdir resumed>) = 0 [pid 6123] <... futex resumed>) = 0 [pid 5015] close(3 [pid 5013] mkdir("./107", 0777 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5015] <... close resumed>) = 0 [ 263.062109][ T6120] loop2: detected capacity change from 0 to 32768 [ 263.100307][ T6120] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6120) [pid 5013] <... mkdir resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6125 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6124] set_robust_list(0x7fe973f6a9e0, 24 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6124] <... set_robust_list resumed>) = 0 [pid 5013] close(3 [pid 6124] memfd_create("syzkaller", 0 [pid 5013] <... close resumed>) = 0 [pid 6124] <... memfd_create resumed>) = 3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6126 ./strace-static-x86_64: Process 6126 attached [pid 6126] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6126] chdir("./107") = 0 [pid 6126] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6126] setpgid(0, 0 [pid 6124] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6126] <... setpgid resumed>) = 0 [pid 6126] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6126] write(3, "1000", 4) = 4 [pid 6126] close(3) = 0 ./strace-static-x86_64: Process 6125 attached [pid 6126] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6126] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6126] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6125] set_robust_list(0x5555561c25e0, 24 [pid 6126] <... clone resumed>, parent_tid=[6127], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6127 [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6127 attached [pid 6127] set_robust_list(0x7fe973f6a9e0, 24 [pid 6125] <... set_robust_list resumed>) = 0 [pid 6125] chdir("./107") = 0 [pid 6125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6127] <... set_robust_list resumed>) = 0 [pid 6125] setpgid(0, 0 [pid 6127] memfd_create("syzkaller", 0 [pid 6125] <... setpgid resumed>) = 0 [pid 6127] <... memfd_create resumed>) = 3 [pid 6125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6125] <... openat resumed>) = 3 [pid 6127] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6125] write(3, "1000", 4) = 4 [pid 6125] close(3) = 0 [pid 6125] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6125] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6125] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6128], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6128 [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6128 attached [pid 6128] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6128] memfd_create("syzkaller", 0) = 3 [pid 6128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6120] <... ioctl resumed>) = 0 [pid 6122] <... write resumed>) = 16777216 [pid 6120] close(4 [pid 6122] munmap(0x7fe96bb4a000, 16777216 [pid 6120] <... close resumed>) = 0 [pid 6122] <... munmap resumed>) = 0 [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6122] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6119] <... futex resumed>) = 0 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] <... openat resumed>) = 4 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6122] ioctl(4, LOOP_SET_FD, 3 [pid 6120] creat("./bus", 000 [pid 6122] <... ioctl resumed>) = 0 [pid 6120] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6122] close(3 [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... close resumed>) = 0 [pid 6120] <... futex resumed>) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6122] mkdir("./bus", 0777 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] <... mkdir resumed>) = 0 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6119] <... futex resumed>) = 0 [pid 6122] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6120] open("./bus", O_RDONLY [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... open resumed>) = 3 [pid 6122] <... mount resumed>) = -1 EEXIST (File exists) [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] ioctl(4, LOOP_CLR_FD [pid 6120] <... futex resumed>) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6119] <... futex resumed>) = 0 [pid 6120] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6119] <... futex resumed>) = 0 [pid 6120] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6119] <... futex resumed>) = 0 [pid 6120] fallocate(-1, 0, 0, 1048820 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [ 263.537010][ T6122] loop4: detected capacity change from 0 to 32768 [ 263.557202][ T6122] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6122) [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6119] <... futex resumed>) = 0 [pid 6120] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6119] <... futex resumed>) = 0 [pid 6120] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6119] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] <... futex resumed>) = 0 [pid 6119] exit_group(0) = ? [pid 6120] +++ exited with 0 +++ [pid 6119] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6119, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./105", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./105", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] <... openat resumed>) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./105/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./105/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./105/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./105/bus") = 0 [pid 5012] umount2("./105/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./105/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./105/binderfs") = 0 [pid 5012] getdents64(3, [pid 6128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./105") = 0 [pid 5012] mkdir("./106", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6129 ./strace-static-x86_64: Process 6129 attached [pid 6129] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6129] chdir("./106") = 0 [pid 6129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6129] setpgid(0, 0) = 0 [pid 6129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6129] write(3, "1000", 4) = 4 [pid 6129] close(3) = 0 [pid 6129] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6129] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6129] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6129] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6130], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6130 [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6130 attached [pid 6130] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6130] memfd_create("syzkaller", 0) = 3 [pid 6130] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6122] <... ioctl resumed>) = 0 [pid 6122] close(4) = 0 [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6124] <... write resumed>) = 16777216 [pid 6122] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] munmap(0x7fe96bb4a000, 16777216 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6124] <... munmap resumed>) = 0 [pid 6122] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6124] <... openat resumed>) = 4 [pid 6122] open("./bus", O_RDONLY [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] ioctl(4, LOOP_SET_FD, 3 [pid 6122] <... open resumed>) = 3 [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6124] <... ioctl resumed>) = 0 [pid 6124] close(3 [pid 6122] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... close resumed>) = 0 [pid 6122] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6121] <... futex resumed>) = 0 [pid 6124] mkdir("./bus", 0777 [pid 6122] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... mkdir resumed>) = 0 [pid 6122] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6124] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6121] <... futex resumed>) = 0 [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6121] <... futex resumed>) = 0 [pid 6122] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6122] <... futex resumed>) = 0 [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] fallocate(-1, 0, 0, 1048820 [pid 6121] <... futex resumed>) = 0 [pid 6122] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... mount resumed>) = -1 EEXIST (File exists) [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6124] ioctl(4, LOOP_CLR_FD [pid 6122] <... futex resumed>) = 0 [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6121] <... futex resumed>) = 0 [pid 6122] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... write resumed>) = 16777216 [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6127] munmap(0x7fe96bb4a000, 16777216 [pid 6122] <... futex resumed>) = 0 [ 264.021336][ T6124] loop1: detected capacity change from 0 to 32768 [ 264.057491][ T6124] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6124) [pid 6121] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6122] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6121] <... futex resumed>) = 0 [pid 6122] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6121] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6122] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6121] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6122] <... futex resumed>) = 0 [pid 6121] exit_group(0 [pid 6122] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6121] <... exit_group resumed>) = ? [pid 6122] <... futex resumed>) = ? [pid 6122] +++ exited with 0 +++ [pid 6121] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6121, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6127] <... munmap resumed>) = 0 [pid 5014] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6127] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6127] <... openat resumed>) = 4 [pid 5014] lstat("./107/bus", [pid 6127] ioctl(4, LOOP_SET_FD, 3 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./107/bus") = 0 [pid 5014] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./107/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./107" [pid 6127] <... ioctl resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 6127] close(3 [pid 5014] mkdir("./108", 0777 [pid 6127] <... close resumed>) = 0 [pid 6127] mkdir("./bus", 0777 [pid 5014] <... mkdir resumed>) = 0 [pid 6127] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6127] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5014] <... openat resumed>) = 3 [ 264.139826][ T6127] loop3: detected capacity change from 0 to 32768 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6131 ./strace-static-x86_64: Process 6131 attached [pid 6131] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6131] chdir("./108") = 0 [pid 6131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6131] setpgid(0, 0) = 0 [pid 6127] <... mount resumed>) = -1 EEXIST (File exists) [pid 6127] ioctl(4, LOOP_CLR_FD [pid 6131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6131] write(3, "1000", 4 [pid 6130] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6131] <... write resumed>) = 4 [pid 6131] close(3) = 0 [pid 6131] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6131] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6131] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6131] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6131] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6132], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6132 [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 264.185192][ T6127] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6127) [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6132 attached [pid 6132] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6132] memfd_create("syzkaller", 0) = 3 [pid 6132] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6128] <... write resumed>) = 16777216 [pid 6128] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6124] <... ioctl resumed>) = 0 [pid 6128] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6124] close(4 [pid 6128] <... openat resumed>) = 4 [pid 6124] <... close resumed>) = 0 [pid 6128] ioctl(4, LOOP_SET_FD, 3 [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] <... futex resumed>) = 0 [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = 0 [pid 6123] <... futex resumed>) = 1 [pid 6128] <... ioctl resumed>) = 0 [pid 6124] creat("./bus", 000 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] close(3 [pid 6124] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6128] <... close resumed>) = 0 [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] mkdir("./bus", 0777 [pid 6124] <... futex resumed>) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... mkdir resumed>) = 0 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6128] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6124] open("./bus", O_RDONLY [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... open resumed>) = 3 [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6124] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6124] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6128] <... mount resumed>) = -1 EEXIST (File exists) [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] ioctl(4, LOOP_CLR_FD [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6124] fallocate(-1, 0, 0, 1048820 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6124] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 264.445253][ T6128] loop5: detected capacity change from 0 to 32768 [ 264.472231][ T6128] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6128) [pid 6123] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6123] <... futex resumed>) = 0 [pid 6124] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6123] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6124] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6124] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6123] <... futex resumed>) = 0 [pid 6124] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6123] exit_group(0 [pid 6124] <... futex resumed>) = ? [pid 6123] <... exit_group resumed>) = ? [pid 6124] +++ exited with 0 +++ [pid 6123] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6123, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./108/bus") = 0 [pid 5011] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./108/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./108") = 0 [pid 5011] mkdir("./109", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6133 ./strace-static-x86_64: Process 6133 attached [pid 6133] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6133] chdir("./109") = 0 [pid 6133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6133] setpgid(0, 0) = 0 [pid 6133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6133] write(3, "1000", 4) = 4 [pid 6133] close(3) = 0 [pid 6133] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6133] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6133] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6134], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6134 [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6127] <... ioctl resumed>) = 0 [pid 6127] close(4) = 0 ./strace-static-x86_64: Process 6134 attached [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] set_robust_list(0x7fe973f6a9e0, 24 [pid 6127] <... futex resumed>) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6134] <... set_robust_list resumed>) = 0 [pid 6127] creat("./bus", 000 [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] memfd_create("syzkaller", 0 [pid 6127] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6126] <... futex resumed>) = 0 [pid 6134] <... memfd_create resumed>) = 3 [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6127] <... futex resumed>) = 0 [pid 6126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6134] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] open("./bus", O_RDONLY [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... open resumed>) = 3 [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] fallocate(-1, 0, 0, 1048820 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6126] <... futex resumed>) = 0 [pid 6127] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6126] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6127] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6127] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6126] <... futex resumed>) = 0 [pid 6127] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6126] exit_group(0 [pid 6127] <... futex resumed>) = ? [pid 6126] <... exit_group resumed>) = ? [pid 6127] +++ exited with 0 +++ [pid 6126] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6126, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./107/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./107/bus") = 0 [pid 5013] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./107/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./107") = 0 [pid 5013] mkdir("./108", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6135 ./strace-static-x86_64: Process 6135 attached [pid 6135] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6135] chdir("./108") = 0 [pid 6135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6135] setpgid(0, 0) = 0 [pid 6135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6135] write(3, "1000", 4) = 4 [pid 6135] close(3) = 0 [pid 6135] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6135] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6135] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6136], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6136 [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6136 attached [pid 6136] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6136] memfd_create("syzkaller", 0) = 3 [pid 6136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6128] <... ioctl resumed>) = 0 [pid 6128] close(4) = 0 [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6130] <... write resumed>) = 16777216 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] munmap(0x7fe96bb4a000, 16777216 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] creat("./bus", 000 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] open("./bus", O_RDONLY [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... open resumed>) = 3 [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... munmap resumed>) = 0 [pid 6128] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6130] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... openat resumed>) = 4 [pid 6128] <... futex resumed>) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6130] ioctl(4, LOOP_SET_FD, 3 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6130] <... ioctl resumed>) = 0 [pid 6128] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] close(3 [pid 6128] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6130] <... close resumed>) = 0 [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] mkdir("./bus", 0777 [pid 6128] <... futex resumed>) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6130] <... mkdir resumed>) = 0 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] fallocate(-1, 0, 0, 1048820 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... mount resumed>) = -1 EEXIST (File exists) [pid 6128] <... futex resumed>) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6130] ioctl(4, LOOP_CLR_FD [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6125] <... futex resumed>) = 0 [pid 6128] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6125] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6128] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6128] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6125] <... futex resumed>) = 0 [pid 6128] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6125] exit_group(0 [pid 6128] <... futex resumed>) = ? [pid 6125] <... exit_group resumed>) = ? [pid 6128] +++ exited with 0 +++ [pid 6125] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6125, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5015] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6132] <... write resumed>) = 16777216 [pid 5015] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6132] munmap(0x7fe96bb4a000, 16777216 [pid 5015] <... openat resumed>) = 3 [ 264.981901][ T6130] loop2: detected capacity change from 0 to 32768 [ 265.008602][ T6130] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6130) [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] <... munmap resumed>) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./107/bus", [pid 6132] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./107/bus") = 0 [pid 6132] <... openat resumed>) = 4 [pid 5015] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] ioctl(4, LOOP_SET_FD, 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./107/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./107") = 0 [pid 5015] mkdir("./108", 0777) = 0 [pid 6132] <... ioctl resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6132] close(3 [pid 5015] <... openat resumed>) = 3 [pid 6132] <... close resumed>) = 0 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6132] mkdir("./bus", 0777 [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6132] <... mkdir resumed>) = 0 [pid 6132] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6137 ./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6137] chdir("./108") = 0 [pid 6137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6137] setpgid(0, 0) = 0 [pid 6137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6137] write(3, "1000", 4) = 4 [pid 6137] close(3) = 0 [pid 6137] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6137] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6134] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6137] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6138], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6138 [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6138 attached [ 265.095582][ T6132] loop4: detected capacity change from 0 to 32768 [ 265.130506][ T6132] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6132) [pid 6138] set_robust_list(0x7fe973f6a9e0, 24 [pid 6132] <... mount resumed>) = -1 EEXIST (File exists) [pid 6138] <... set_robust_list resumed>) = 0 [pid 6138] memfd_create("syzkaller", 0 [pid 6132] ioctl(4, LOOP_CLR_FD [pid 6138] <... memfd_create resumed>) = 3 [pid 6138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6130] <... ioctl resumed>) = 0 [pid 6130] close(4) = 0 [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] creat("./bus", 000 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] open("./bus", O_RDONLY [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... open resumed>) = 3 [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] fallocate(-1, 0, 0, 1048820 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6130] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] <... ioctl resumed>) = 0 [pid 6130] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] close(4 [pid 6130] <... futex resumed>) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6132] <... close resumed>) = 0 [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6129] <... futex resumed>) = 0 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 6130] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6129] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 6130] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6132] creat("./bus", 000 [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6130] <... futex resumed>) = 1 [pid 6129] <... futex resumed>) = 0 [pid 6132] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6130] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6129] exit_group(0 [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6130] <... futex resumed>) = ? [pid 6129] <... exit_group resumed>) = ? [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 6130] +++ exited with 0 +++ [pid 6129] +++ exited with 0 +++ [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6129, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=39 /* 0.39 s */} --- [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 6132] open("./bus", O_RDONLY [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6132] <... open resumed>) = 3 [pid 5012] umount2("./106", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./106", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5012] fstat(3, [pid 6132] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6132] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] getdents64(3, [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5012] lstat("./106/bus", [pid 6132] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6132] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] umount2("./106/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./106/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 4 [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5012] fstat(4, [pid 6132] fallocate(-1, 0, 0, 1048820 [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6132] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] getdents64(4, [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] getdents64(4, [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5012] close(4 [pid 6132] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... close resumed>) = 0 [pid 6132] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] rmdir("./106/bus" [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... rmdir resumed>) = 0 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] umount2("./106/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6132] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6131] <... futex resumed>) = 0 [pid 5012] lstat("./106/binderfs", [pid 6132] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6131] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6132] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] unlink("./106/binderfs" [pid 6132] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... unlink resumed>) = 0 [pid 6132] <... futex resumed>) = 1 [pid 6131] <... futex resumed>) = 0 [pid 5012] getdents64(3, [pid 6132] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6131] exit_group(0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6132] <... futex resumed>) = ? [pid 6131] <... exit_group resumed>) = ? [pid 5012] close(3 [pid 6132] +++ exited with 0 +++ [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./106" [pid 6131] +++ exited with 0 +++ [pid 5012] <... rmdir resumed>) = 0 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6131, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] mkdir("./107", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5014] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] <... openat resumed>) = 3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] <... openat resumed>) = 3 [pid 5012] close(3 [pid 5014] fstat(3, [pid 5012] <... close resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6139 [pid 5014] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6139 attached [pid 5014] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6139] set_robust_list(0x5555561c25e0, 24 [pid 5014] <... openat resumed>) = 4 [pid 6139] <... set_robust_list resumed>) = 0 [pid 5014] fstat(4, [pid 6139] chdir("./107" [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6139] <... chdir resumed>) = 0 [pid 5014] getdents64(4, [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6139] <... prctl resumed>) = 0 [pid 5014] getdents64(4, [pid 6139] setpgid(0, 0 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6139] <... setpgid resumed>) = 0 [pid 5014] close(4 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... close resumed>) = 0 [pid 6139] <... openat resumed>) = 3 [pid 5014] rmdir("./108/bus" [pid 6139] write(3, "1000", 4 [pid 5014] <... rmdir resumed>) = 0 [pid 6139] <... write resumed>) = 4 [pid 5014] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6139] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6139] <... close resumed>) = 0 [pid 5014] lstat("./108/binderfs", [pid 6139] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6139] <... symlink resumed>) = 0 [pid 5014] unlink("./108/binderfs" [pid 6139] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... unlink resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 5014] getdents64(3, [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6139] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] close(3 [pid 6139] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] <... close resumed>) = 0 [pid 6139] <... mprotect resumed>) = 0 [pid 5014] rmdir("./108" [pid 6139] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... rmdir resumed>) = 0 [pid 5014] mkdir("./109", 0777 [pid 6139] <... clone resumed>, parent_tid=[6140], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6140 [pid 5014] <... mkdir resumed>) = 0 [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6139] <... futex resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6140 attached [pid 5014] close(3 [pid 6140] set_robust_list(0x7fe973f6a9e0, 24 [pid 5014] <... close resumed>) = 0 [pid 6140] <... set_robust_list resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6140] memfd_create("syzkaller", 0) = 3 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6141 [pid 6140] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 6141 attached [pid 6141] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6141] chdir("./109") = 0 [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6141] setpgid(0, 0) = 0 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6141] write(3, "1000", 4) = 4 [pid 6141] close(3) = 0 [pid 6141] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6141] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6141] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6142], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6142 [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6134] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 6142 attached [pid 6142] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6134] munmap(0x7fe96bb4a000, 16777216 [pid 6142] memfd_create("syzkaller", 0) = 3 [pid 6142] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6134] <... munmap resumed>) = 0 [pid 6134] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6134] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6134] close(3) = 0 [pid 6134] mkdir("./bus", 0777) = 0 [pid 6134] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6136] <... write resumed>) = 16777216 [pid 6136] munmap(0x7fe96bb4a000, 16777216 [pid 6134] <... mount resumed>) = -1 EEXIST (File exists) [pid 6134] ioctl(4, LOOP_CLR_FD [pid 6136] <... munmap resumed>) = 0 [pid 6136] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [ 265.813168][ T6134] loop1: detected capacity change from 0 to 32768 [ 265.847392][ T6134] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6134) [pid 6136] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6136] close(3) = 0 [pid 6136] mkdir("./bus", 0777) = 0 [pid 6136] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 265.893765][ T6136] loop3: detected capacity change from 0 to 32768 [ 265.921562][ T6136] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6136) [pid 6136] ioctl(4, LOOP_CLR_FD [pid 6138] <... write resumed>) = 16777216 [pid 6138] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6140] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6138] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6138] ioctl(4, LOOP_SET_FD, 3 [pid 6142] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6138] <... ioctl resumed>) = 0 [pid 6138] close(3) = 0 [pid 6138] mkdir("./bus", 0777) = 0 [pid 6138] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 266.164044][ T6138] loop5: detected capacity change from 0 to 32768 [ 266.200905][ T6138] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6138) [pid 6138] ioctl(4, LOOP_CLR_FD [pid 6134] <... ioctl resumed>) = 0 [pid 6134] close(4) = 0 [pid 6136] <... ioctl resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] close(4 [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... close resumed>) = 0 [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] creat("./bus", 000 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] creat("./bus", 000 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] open("./bus", O_RDONLY [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... open resumed>) = 3 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] open("./bus", O_RDONLY [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... open resumed>) = 3 [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] fallocate(-1, 0, 0, 1048820 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] fallocate(-1, 0, 0, 1048820 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6133] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6133] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6135] <... futex resumed>) = 0 [pid 6134] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6135] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6134] <... futex resumed>) = 1 [pid 6133] <... futex resumed>) = 0 [pid 6136] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6134] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6133] exit_group(0 [pid 6136] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6134] <... futex resumed>) = ? [pid 6133] <... exit_group resumed>) = ? [pid 6136] <... futex resumed>) = 1 [pid 6135] <... futex resumed>) = 0 [pid 6134] +++ exited with 0 +++ [pid 6133] +++ exited with 0 +++ [pid 6136] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6135] exit_group(0 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6133, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=42 /* 0.42 s */} --- [pid 6136] <... futex resumed>) = ? [pid 6135] <... exit_group resumed>) = ? [pid 6136] +++ exited with 0 +++ [pid 6135] +++ exited with 0 +++ [pid 5011] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6135, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=36 /* 0.36 s */} --- [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... openat resumed>) = 3 [pid 5013] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] fstat(3, [pid 5013] <... openat resumed>) = 3 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] fstat(3, [pid 5011] getdents64(3, [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] getdents64(3, [pid 5011] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] lstat("./109/bus", [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] lstat("./108/bus", [pid 5011] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... openat resumed>) = 4 [pid 5013] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] fstat(4, [pid 5013] <... openat resumed>) = 4 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] fstat(4, [pid 5011] getdents64(4, [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5011] getdents64(4, [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] getdents64(4, [pid 5011] close(4 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... close resumed>) = 0 [pid 5013] close(4 [pid 5011] rmdir("./109/bus" [pid 5013] <... close resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5013] rmdir("./108/bus" [pid 5011] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./109/binderfs", [pid 5013] <... rmdir resumed>) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] unlink("./109/binderfs" [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... unlink resumed>) = 0 [pid 5013] lstat("./108/binderfs", [pid 5011] getdents64(3, [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] unlink("./108/binderfs" [pid 5011] close(3 [pid 5013] <... unlink resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5013] getdents64(3, [pid 5011] rmdir("./109" [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 5013] close(3 [pid 5011] mkdir("./110", 0777 [pid 6140] <... write resumed>) = 16777216 [pid 5013] <... close resumed>) = 0 [pid 5011] <... mkdir resumed>) = 0 [pid 6140] munmap(0x7fe96bb4a000, 16777216 [pid 5013] rmdir("./108" [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5013] <... rmdir resumed>) = 0 [pid 5011] <... openat resumed>) = 3 [pid 5013] mkdir("./109", 0777 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 5013] <... mkdir resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6143 ./strace-static-x86_64: Process 6143 attached [pid 6140] <... munmap resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6143] set_robust_list(0x5555561c25e0, 24 [pid 6140] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5013] close(3 [pid 6143] <... set_robust_list resumed>) = 0 [pid 6140] <... openat resumed>) = 4 [pid 5013] <... close resumed>) = 0 [pid 6140] ioctl(4, LOOP_SET_FD, 3 [pid 6143] chdir("./110" [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6143] <... chdir resumed>) = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6144 [pid 6143] <... prctl resumed>) = 0 [pid 6143] setpgid(0, 0) = 0 [pid 6140] <... ioctl resumed>) = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6140] close(3 [pid 6143] <... openat resumed>) = 3 [pid 6140] <... close resumed>) = 0 ./strace-static-x86_64: Process 6144 attached [pid 6144] set_robust_list(0x5555561c25e0, 24 [pid 6143] write(3, "1000", 4 [pid 6140] mkdir("./bus", 0777 [pid 6143] <... write resumed>) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] <... mkdir resumed>) = 0 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6143] <... mmap resumed>) = 0x7fe973f4a000 [pid 6143] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6144] <... set_robust_list resumed>) = 0 [pid 6144] chdir("./109") = 0 [pid 6144] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6144] setpgid(0, 0) = 0 [pid 6144] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6144] write(3, "1000", 4 [pid 6143] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6144] <... write resumed>) = 4 [pid 6144] close(3 [pid 6143] <... clone resumed>, parent_tid=[6145], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6145 [pid 6144] <... close resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] symlink("/dev/binderfs", "./binderfs" [pid 6143] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6145 attached [pid 6144] <... symlink resumed>) = 0 [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6145] set_robust_list(0x7fe973f6a9e0, 24 [pid 6144] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... set_robust_list resumed>) = 0 [pid 6144] <... futex resumed>) = 0 [pid 6145] memfd_create("syzkaller", 0 [pid 6144] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6145] <... memfd_create resumed>) = 3 [pid 6144] <... mmap resumed>) = 0x7fe973f4a000 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6144] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6145] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6144] <... mprotect resumed>) = 0 [pid 6140] <... mount resumed>) = -1 EEXIST (File exists) [pid 6144] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] ioctl(4, LOOP_CLR_FD [pid 6144] <... clone resumed>, parent_tid=[6146], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6146 ./strace-static-x86_64: Process 6146 attached [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] set_robust_list(0x7fe973f6a9e0, 24 [pid 6144] <... futex resumed>) = 0 [pid 6146] <... set_robust_list resumed>) = 0 [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6146] memfd_create("syzkaller", 0) = 3 [ 266.548021][ T6140] loop2: detected capacity change from 0 to 32768 [ 266.573607][ T6140] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6140) [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6142] <... write resumed>) = 16777216 [pid 6142] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6142] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6142] ioctl(4, LOOP_SET_FD, 3 [pid 6138] <... ioctl resumed>) = 0 [pid 6138] close(4) = 0 [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6142] <... ioctl resumed>) = 0 [pid 6138] creat("./bus", 000 [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] close(3 [pid 6138] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6137] <... futex resumed>) = 0 [pid 6142] <... close resumed>) = 0 [pid 6142] mkdir("./bus", 0777) = 0 [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6138] <... futex resumed>) = 0 [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 266.689941][ T6142] loop4: detected capacity change from 0 to 32768 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] open("./bus", O_RDONLY [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... open resumed>) = 3 [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... mount resumed>) = -1 EEXIST (File exists) [pid 6138] <... futex resumed>) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6142] ioctl(4, LOOP_CLR_FD [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] fallocate(-1, 0, 0, 1048820 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6137] <... futex resumed>) = 0 [pid 6138] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6137] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6138] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6137] <... futex resumed>) = 0 [pid 6138] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6137] exit_group(0 [pid 6138] <... futex resumed>) = ? [ 266.731898][ T6142] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6142) [pid 6137] <... exit_group resumed>) = ? [pid 6138] +++ exited with 0 +++ [pid 6137] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6137, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=43 /* 0.43 s */} --- [pid 5015] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./108/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./108/bus") = 0 [pid 5015] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./108/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./108/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./108") = 0 [pid 5015] mkdir("./109", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6147 ./strace-static-x86_64: Process 6147 attached [pid 6147] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6147] chdir("./109") = 0 [pid 6147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6147] setpgid(0, 0) = 0 [pid 6147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6147] write(3, "1000", 4) = 4 [pid 6147] close(3) = 0 [pid 6147] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6147] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6147] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6148], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6148 [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6148 attached [pid 6148] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6148] memfd_create("syzkaller", 0) = 3 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6140] <... ioctl resumed>) = 0 [pid 6140] close(4) = 0 [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] creat("./bus", 000 [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] open("./bus", O_RDONLY [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... open resumed>) = 3 [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] fallocate(-1, 0, 0, 1048820 [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6140] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6139] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6140] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6140] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] exit_group(0 [pid 6140] <... futex resumed>) = ? [pid 6139] <... exit_group resumed>) = ? [pid 6140] +++ exited with 0 +++ [pid 6139] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=36 /* 0.36 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./107", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./107", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./107/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./107/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./107/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./107/bus") = 0 [pid 5012] umount2("./107/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./107/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./107/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./107") = 0 [pid 5012] mkdir("./108", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6149 ./strace-static-x86_64: Process 6149 attached [pid 6149] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6149] chdir("./108") = 0 [pid 6149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6149] setpgid(0, 0) = 0 [pid 6149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6149] write(3, "1000", 4) = 4 [pid 6142] <... ioctl resumed>) = 0 [pid 6149] close(3 [pid 6142] close(4) = 0 [pid 6149] <... close resumed>) = 0 [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... futex resumed>) = 1 [pid 6142] creat("./bus", 000 [pid 6149] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6149] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6142] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6149] <... mprotect resumed>) = 0 [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6149] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6142] open("./bus", O_RDONLY [pid 6149] <... clone resumed>, parent_tid=[6150], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6150 [pid 6142] <... open resumed>) = 3 [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] <... futex resumed>) = 0 [pid 6142] <... futex resumed>) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6142] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6141] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6150 attached [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] set_robust_list(0x7fe973f6a9e0, 24 [pid 6142] <... futex resumed>) = 0 [pid 6141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6150] <... set_robust_list resumed>) = 0 [pid 6142] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] memfd_create("syzkaller", 0 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6150] <... memfd_create resumed>) = 3 [pid 6142] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6142] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6150] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6142] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6142] fallocate(-1, 0, 0, 1048820 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6142] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6142] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6142] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6142] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6142] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6141] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6142] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6142] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6142] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] exit_group(0 [pid 6142] <... futex resumed>) = ? [pid 6141] <... exit_group resumed>) = ? [pid 6142] +++ exited with 0 +++ [pid 6141] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=37 /* 0.37 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./109/bus") = 0 [pid 5014] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./109/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./109") = 0 [pid 5014] mkdir("./110", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6151 ./strace-static-x86_64: Process 6151 attached [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6151] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6151] chdir("./110") = 0 [pid 6151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6151] setpgid(0, 0) = 0 [pid 6151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6151] write(3, "1000", 4) = 4 [pid 6151] close(3) = 0 [pid 6151] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6151] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6151] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6152], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6152 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6152 attached [pid 6152] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6152] memfd_create("syzkaller", 0) = 3 [pid 6152] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6146] <... write resumed>) = 16777216 [pid 6146] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6146] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6146] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] close(3) = 0 [pid 6146] mkdir("./bus", 0777 [pid 6145] <... write resumed>) = 16777216 [pid 6146] <... mkdir resumed>) = 0 [pid 6145] munmap(0x7fe96bb4a000, 16777216 [pid 6146] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6150] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6145] <... munmap resumed>) = 0 [pid 6145] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 267.638819][ T6146] loop3: detected capacity change from 0 to 32768 [ 267.671648][ T6146] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6146) [pid 6145] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6146] <... mount resumed>) = -1 EEXIST (File exists) [pid 6146] ioctl(4, LOOP_CLR_FD [pid 6145] close(3) = 0 [pid 6145] mkdir("./bus", 0777) = 0 [pid 6145] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 267.707430][ T6145] loop1: detected capacity change from 0 to 32768 [ 267.729913][ T6145] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6145) [pid 6145] ioctl(4, LOOP_CLR_FD [pid 6152] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6148] <... write resumed>) = 16777216 [pid 6148] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6148] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6148] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6148] close(3) = 0 [pid 6148] mkdir("./bus", 0777) = 0 [pid 6148] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 267.930905][ T6148] loop5: detected capacity change from 0 to 32768 [ 267.968393][ T6148] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6148) [pid 6148] ioctl(4, LOOP_CLR_FD [pid 6146] <... ioctl resumed>) = 0 [pid 6146] close(4) = 0 [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6144] <... futex resumed>) = 0 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] creat("./bus", 000 [pid 6144] <... futex resumed>) = 0 [pid 6146] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... futex resumed>) = 0 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] open("./bus", O_RDONLY [pid 6144] <... futex resumed>) = 0 [pid 6146] <... open resumed>) = 3 [pid 6145] <... ioctl resumed>) = 0 [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... futex resumed>) = 0 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6144] <... futex resumed>) = 0 [pid 6146] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... futex resumed>) = 0 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6144] <... futex resumed>) = 0 [pid 6146] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6145] close(4 [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... close resumed>) = 0 [pid 6144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6145] <... futex resumed>) = 1 [pid 6144] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6146] fallocate(-1, 0, 0, 1048820 [pid 6145] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] creat("./bus", 000 [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] <... futex resumed>) = 1 [pid 6145] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6144] <... futex resumed>) = 0 [pid 6146] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 1 [pid 6144] <... futex resumed>) = 0 [pid 6143] <... futex resumed>) = 0 [pid 6146] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6145] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6145] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] open("./bus", O_RDONLY [pid 6143] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 6145] <... open resumed>) = 3 [pid 6144] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 0 [pid 6144] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6145] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6144] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6143] <... futex resumed>) = 0 [pid 6146] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6145] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... futex resumed>) = 1 [pid 6145] <... futex resumed>) = 0 [pid 6144] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6144] exit_group(0 [pid 6143] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = ? [pid 6145] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6144] <... exit_group resumed>) = ? [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] +++ exited with 0 +++ [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] +++ exited with 0 +++ [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6144, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} --- [pid 6145] fallocate(-1, 0, 0, 1048820 [pid 6143] <... futex resumed>) = 0 [pid 5013] restart_syscall(<... resuming interrupted clone ...> [pid 6145] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... restart_syscall resumed>) = 0 [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6143] <... futex resumed>) = 0 [pid 5013] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6145] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6145] <... futex resumed>) = 0 [pid 6143] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6143] <... futex resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6145] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6143] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] fstat(3, [pid 6145] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6145] <... futex resumed>) = 0 [pid 6143] exit_group(0 [pid 5013] getdents64(3, [pid 6143] <... exit_group resumed>) = ? [pid 6145] +++ exited with 0 +++ [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6143] +++ exited with 0 +++ [pid 5013] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] lstat("./109/bus", [pid 5011] restart_syscall(<... resuming interrupted clone ...> [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... restart_syscall resumed>) = 0 [pid 5013] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5011] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 4 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] fstat(4, [pid 5011] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] <... openat resumed>) = 3 [pid 5013] getdents64(4, [pid 5011] fstat(3, [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, [pid 5011] getdents64(3, [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] close(4 [pid 5011] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... close resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] rmdir("./109/bus" [pid 5011] lstat("./110/bus", [pid 5013] <... rmdir resumed>) = 0 [pid 5011] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5011] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./109/binderfs", [pid 5011] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] <... openat resumed>) = 4 [pid 5013] unlink("./109/binderfs" [pid 5011] fstat(4, [pid 5013] <... unlink resumed>) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, [pid 5011] getdents64(4, [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] close(3 [pid 5011] getdents64(4, [pid 5013] <... close resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] rmdir("./109" [pid 5011] close(4) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5011] rmdir("./110/bus" [pid 5013] mkdir("./110", 0777 [pid 5011] <... rmdir resumed>) = 0 [pid 5011] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... mkdir resumed>) = 0 [pid 5011] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] lstat("./110/binderfs", [pid 5013] <... openat resumed>) = 3 [pid 5011] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5011] unlink("./110/binderfs" [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] <... unlink resumed>) = 0 [pid 5013] close(3 [pid 5011] getdents64(3, [pid 5013] <... close resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./110") = 0 [pid 5011] mkdir("./111", 0777) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6153 [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6154 ./strace-static-x86_64: Process 6153 attached [pid 6150] <... write resumed>) = 16777216 [pid 6153] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6150] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 6154 attached [pid 6153] chdir("./110" [pid 6152] <... write resumed>) = 16777216 [pid 6150] <... munmap resumed>) = 0 [pid 6154] set_robust_list(0x5555561c25e0, 24 [pid 6153] <... chdir resumed>) = 0 [pid 6152] munmap(0x7fe96bb4a000, 16777216 [pid 6150] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6148] <... ioctl resumed>) = 0 [pid 6154] <... set_robust_list resumed>) = 0 [pid 6153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6150] <... openat resumed>) = 4 [pid 6148] close(4 [pid 6154] chdir("./111" [pid 6153] <... prctl resumed>) = 0 [pid 6150] ioctl(4, LOOP_SET_FD, 3 [pid 6148] <... close resumed>) = 0 [pid 6154] <... chdir resumed>) = 0 [pid 6153] setpgid(0, 0 [pid 6150] <... ioctl resumed>) = 0 [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6153] <... setpgid resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6154] <... prctl resumed>) = 0 [pid 6153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] setpgid(0, 0 [pid 6153] <... openat resumed>) = 3 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6154] <... setpgid resumed>) = 0 [pid 6153] write(3, "1000", 4 [pid 6148] creat("./bus", 000 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6153] <... write resumed>) = 4 [pid 6148] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6154] <... openat resumed>) = 3 [pid 6153] close(3 [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] write(3, "1000", 4 [pid 6153] <... close resumed>) = 0 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6154] <... write resumed>) = 4 [pid 6153] symlink("/dev/binderfs", "./binderfs" [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] close(3 [pid 6153] <... symlink resumed>) = 0 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6154] <... close resumed>) = 0 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] open("./bus", O_RDONLY [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] symlink("/dev/binderfs", "./binderfs" [pid 6153] <... futex resumed>) = 0 [pid 6148] <... open resumed>) = 3 [pid 6154] <... symlink resumed>) = 0 [pid 6153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... mmap resumed>) = 0x7fe973f4a000 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6154] <... futex resumed>) = 0 [pid 6153] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6153] <... mprotect resumed>) = 0 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6154] <... mmap resumed>) = 0x7fe973f4a000 [pid 6153] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6148] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6150] close(3 [pid 6148] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6154] <... mprotect resumed>) = 0 [pid 6153] <... clone resumed>, parent_tid=[6155], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6155 [pid 6150] <... close resumed>) = 0 [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] mkdir("./bus", 0777 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6152] <... munmap resumed>) = 0 [pid 6150] <... mkdir resumed>) = 0 [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... clone resumed>, parent_tid=[6156], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6156 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6152] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6150] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... openat resumed>) = 4 [pid 6148] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] <... futex resumed>) = 0 [pid 6148] <... mmap resumed>) = -1 EBADF (Bad file descriptor) ./strace-static-x86_64: Process 6155 attached [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] set_robust_list(0x7fe973f6a9e0, 24 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6156 attached [pid 6155] <... set_robust_list resumed>) = 0 [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] set_robust_list(0x7fe973f6a9e0, 24 [pid 6155] memfd_create("syzkaller", 0 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6156] <... set_robust_list resumed>) = 0 [pid 6155] <... memfd_create resumed>) = 3 [pid 6148] fallocate(-1, 0, 0, 1048820 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] memfd_create("syzkaller", 0 [pid 6155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] <... memfd_create resumed>) = 3 [pid 6155] <... mmap resumed>) = 0x7fe96bb4a000 [ 268.338402][ T6150] loop2: detected capacity change from 0 to 32768 [ 268.363880][ T6150] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6150) [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6152] ioctl(4, LOOP_SET_FD, 3 [pid 6148] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6156] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... ioctl resumed>) = 0 [pid 6150] <... mount resumed>) = -1 EEXIST (File exists) [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6148] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6147] <... futex resumed>) = 0 [pid 6148] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6147] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6148] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6148] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] exit_group(0 [pid 6148] <... futex resumed>) = ? [pid 6147] <... exit_group resumed>) = ? [pid 6152] close(3 [pid 6150] ioctl(4, LOOP_CLR_FD [pid 6148] +++ exited with 0 +++ [pid 6147] +++ exited with 0 +++ [pid 6152] <... close resumed>) = 0 [pid 6152] mkdir("./bus", 0777 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6147, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=43 /* 0.43 s */} --- [pid 6152] <... mkdir resumed>) = 0 [pid 5015] restart_syscall(<... resuming interrupted clone ...> [ 268.386359][ T6152] loop4: detected capacity change from 0 to 32768 [pid 6152] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5015] <... restart_syscall resumed>) = 0 [pid 5015] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] <... mount resumed>) = -1 EEXIST (File exists) [pid 6152] ioctl(4, LOOP_CLR_FD [pid 5015] <... openat resumed>) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./109/bus") = 0 [pid 5015] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./109/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./109") = 0 [pid 5015] mkdir("./110", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6157 [ 268.418568][ T6152] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6152) ./strace-static-x86_64: Process 6157 attached [pid 6157] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6157] chdir("./110") = 0 [pid 6157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6157] setpgid(0, 0) = 0 [pid 6157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6157] write(3, "1000", 4) = 4 [pid 6157] close(3) = 0 [pid 6157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6157] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6157] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6158], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6158 [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6158 attached [pid 6158] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6158] memfd_create("syzkaller", 0) = 3 [pid 6158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6150] <... ioctl resumed>) = 0 [pid 6150] close(4) = 0 [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6150] open("./bus", O_RDONLY [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... open resumed>) = 3 [pid 6149] <... futex resumed>) = 0 [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6150] <... futex resumed>) = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6150] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6149] <... futex resumed>) = 0 [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... futex resumed>) = 0 [pid 6149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] fallocate(-1, 0, 0, 1048820 [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6150] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6149] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... ioctl resumed>) = 0 [pid 6150] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6149] <... futex resumed>) = 0 [pid 6152] close(4 [pid 6150] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6149] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6152] <... close resumed>) = 0 [pid 6150] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6150] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6150] <... futex resumed>) = 1 [pid 6149] <... futex resumed>) = 0 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6149] exit_group(0 [pid 6152] creat("./bus", 000 [pid 6151] <... futex resumed>) = 0 [pid 6149] <... exit_group resumed>) = ? [pid 6152] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6150] +++ exited with 0 +++ [pid 6149] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6149, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=46 /* 0.46 s */} --- [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6152] open("./bus", O_RDONLY [pid 6151] <... futex resumed>) = 0 [pid 6152] <... open resumed>) = 3 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] umount2("./108", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6151] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] <... futex resumed>) = 0 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] openat(AT_FDCWD, "./108", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6151] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 3 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, [pid 6152] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./108/bus", [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6152] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./108/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6151] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6152] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "./108/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6152] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... openat resumed>) = 4 [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] fstat(4, [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(4, [pid 6151] <... futex resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6152] fallocate(-1, 0, 0, 1048820 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4 [pid 6152] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./108/bus" [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... rmdir resumed>) = 0 [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 5012] umount2("./108/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6152] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6151] <... futex resumed>) = 0 [pid 5012] lstat("./108/binderfs", [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./108/binderfs") = 0 [pid 6152] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6152] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5012] close(3) = 0 [pid 5012] rmdir("./108" [pid 6152] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... rmdir resumed>) = 0 [pid 5012] mkdir("./109", 0777 [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6159 [pid 6151] <... futex resumed>) = 0 [pid 6151] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6159 attached [pid 6152] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6152] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6159] set_robust_list(0x5555561c25e0, 24 [pid 6152] <... futex resumed>) = 1 [pid 6151] <... futex resumed>) = 0 [pid 6159] <... set_robust_list resumed>) = 0 [pid 6152] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6151] exit_group(0 [pid 6159] chdir("./109" [pid 6152] <... futex resumed>) = ? [pid 6151] <... exit_group resumed>) = ? [pid 6159] <... chdir resumed>) = 0 [pid 6152] +++ exited with 0 +++ [pid 6151] +++ exited with 0 +++ [pid 6159] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6151, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=42 /* 0.42 s */} --- [pid 6159] <... prctl resumed>) = 0 [pid 6159] setpgid(0, 0) = 0 [pid 5014] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6159] write(3, "1000", 4 [pid 5014] <... openat resumed>) = 3 [pid 6159] <... write resumed>) = 4 [pid 5014] fstat(3, [pid 6159] close(3 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6159] <... close resumed>) = 0 [pid 5014] getdents64(3, [pid 6159] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6159] <... symlink resumed>) = 0 [pid 5014] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] <... futex resumed>) = 0 [pid 5014] lstat("./110/bus", [pid 6159] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6159] <... mmap resumed>) = 0x7fe973f4a000 [pid 5014] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6159] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6159] <... mprotect resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6159] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, [pid 6159] <... clone resumed>, parent_tid=[6160], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6160 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] getdents64(4, [pid 6159] <... futex resumed>) = 0 [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] getdents64(4, ./strace-static-x86_64: Process 6160 attached 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./110/bus" [pid 6160] set_robust_list(0x7fe973f6a9e0, 24 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./110/binderfs", [pid 6160] <... set_robust_list resumed>) = 0 [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6160] memfd_create("syzkaller", 0 [pid 5014] unlink("./110/binderfs" [pid 6160] <... memfd_create resumed>) = 3 [pid 5014] <... unlink resumed>) = 0 [pid 6160] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6160] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5014] close(3) = 0 [pid 5014] rmdir("./110") = 0 [pid 5014] mkdir("./111", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6161 ./strace-static-x86_64: Process 6161 attached [pid 6161] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6161] chdir("./111") = 0 [pid 6161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6161] setpgid(0, 0) = 0 [pid 6161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6161] write(3, "1000", 4) = 4 [pid 6161] close(3) = 0 [pid 6161] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6161] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6161] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6162], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6162 [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6162 attached [pid 6162] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6162] memfd_create("syzkaller", 0) = 3 [pid 6162] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6156] <... write resumed>) = 16777216 [pid 6156] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6155] <... write resumed>) = 16777216 [pid 6155] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6156] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6160] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6155] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6156] <... openat resumed>) = 4 [pid 6156] ioctl(4, LOOP_SET_FD, 3 [pid 6155] <... openat resumed>) = 4 [pid 6156] <... ioctl resumed>) = 0 [pid 6155] ioctl(4, LOOP_SET_FD, 3 [pid 6156] close(3) = 0 [pid 6156] mkdir("./bus", 0777 [pid 6155] <... ioctl resumed>) = 0 [pid 6156] <... mkdir resumed>) = 0 [pid 6155] close(3 [pid 6156] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6155] <... close resumed>) = 0 [pid 6155] mkdir("./bus", 0777) = 0 [ 269.418791][ T6156] loop1: detected capacity change from 0 to 32768 [ 269.433523][ T6155] loop3: detected capacity change from 0 to 32768 [ 269.453683][ T6156] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6156) [pid 6155] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6156] <... mount resumed>) = -1 EEXIST (File exists) [pid 6155] <... mount resumed>) = -1 EEXIST (File exists) [pid 6162] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6156] ioctl(4, LOOP_CLR_FD [ 269.476939][ T6155] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6155) [pid 6155] ioctl(4, LOOP_CLR_FD [pid 6158] <... write resumed>) = 16777216 [pid 6158] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6158] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6158] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6158] close(3) = 0 [pid 6158] mkdir("./bus", 0777) = 0 [pid 6158] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 269.648324][ T6158] loop5: detected capacity change from 0 to 32768 [ 269.677704][ T6158] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6158) [pid 6158] ioctl(4, LOOP_CLR_FD [pid 6156] <... ioctl resumed>) = 0 [pid 6155] <... ioctl resumed>) = 0 [pid 6156] close(4) = 0 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6155] close(4 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... close resumed>) = 0 [pid 6156] <... futex resumed>) = 1 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] open("./bus", O_RDONLY [pid 6155] <... futex resumed>) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6156] <... open resumed>) = 3 [pid 6155] creat("./bus", 000 [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6156] <... futex resumed>) = 1 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6155] <... futex resumed>) = 1 [pid 6153] <... futex resumed>) = 0 [pid 6156] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6155] open("./bus", O_RDONLY [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... open resumed>) = 3 [pid 6153] <... futex resumed>) = 0 [pid 6156] <... futex resumed>) = 1 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6155] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6156] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6155] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... futex resumed>) = 0 [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6153] <... futex resumed>) = 0 [pid 6156] <... futex resumed>) = 0 [pid 6155] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6155] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] <... futex resumed>) = 1 [pid 6155] <... futex resumed>) = 1 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6156] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6155] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6160] <... write resumed>) = 16777216 [pid 6156] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6155] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] munmap(0x7fe96bb4a000, 16777216 [pid 6156] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6155] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6160] <... munmap resumed>) = 0 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6156] <... futex resumed>) = 1 [pid 6155] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6154] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6153] <... futex resumed>) = 0 [pid 6156] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6155] fallocate(-1, 0, 0, 1048820 [pid 6156] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6155] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6156] <... futex resumed>) = 1 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6154] <... futex resumed>) = 0 [pid 6156] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6155] <... futex resumed>) = 1 [pid 6154] exit_group(0 [pid 6153] <... futex resumed>) = 0 [pid 6156] <... futex resumed>) = ? [pid 6155] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6154] <... exit_group resumed>) = ? [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6156] +++ exited with 0 +++ [pid 6155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6154] +++ exited with 0 +++ [pid 6155] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6154, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=32 /* 0.32 s */} --- [pid 6160] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6155] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6160] <... openat resumed>) = 4 [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, [pid 6160] ioctl(4, LOOP_SET_FD, 3 [pid 6155] <... futex resumed>) = 1 [pid 6153] <... futex resumed>) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6153] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] getdents64(3, [pid 6153] <... futex resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6153] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5011] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./111/bus") = 0 [pid 5011] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./111/binderfs" [pid 6155] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 5011] <... unlink resumed>) = 0 [pid 6155] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5011] getdents64(3, [pid 6155] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5011] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6155] <... futex resumed>) = 1 [pid 6153] <... futex resumed>) = 0 [pid 5011] close(3 [pid 6155] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6153] exit_group(0 [pid 5011] <... close resumed>) = 0 [pid 6153] <... exit_group resumed>) = ? [pid 5011] rmdir("./111" [pid 6155] <... futex resumed>) = ? [pid 5011] <... rmdir resumed>) = 0 [pid 5011] mkdir("./112", 0777 [pid 6155] +++ exited with 0 +++ [pid 6153] +++ exited with 0 +++ [pid 5011] <... mkdir resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6153, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=39 /* 0.39 s */} --- [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 6160] <... ioctl resumed>) = 0 [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6160] close(3) = 0 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6163 [pid 6160] mkdir("./bus", 0777 [pid 5013] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6160] <... mkdir resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [ 269.992053][ T6160] loop2: detected capacity change from 0 to 32768 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6160] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6163 attached ) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./110/bus" [pid 6163] set_robust_list(0x5555561c25e0, 24 [pid 6160] <... mount resumed>) = -1 EEXIST (File exists) [pid 5013] <... rmdir resumed>) = 0 [pid 5013] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./110/binderfs" [pid 6163] <... set_robust_list resumed>) = 0 [pid 6160] ioctl(4, LOOP_CLR_FD [pid 5013] <... unlink resumed>) = 0 [pid 6163] chdir("./112" [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./110" [pid 6163] <... chdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 6163] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5013] mkdir("./111", 0777 [pid 6163] <... prctl resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 6163] setpgid(0, 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6163] <... setpgid resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 6163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6163] <... openat resumed>) = 3 [pid 6163] write(3, "1000", 4 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6164 [pid 6163] <... write resumed>) = 4 [pid 6163] close(3) = 0 [pid 6163] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6164 attached ) = 0 [ 270.032470][ T6160] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6160) [pid 6164] set_robust_list(0x5555561c25e0, 24 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... set_robust_list resumed>) = 0 [pid 6163] <... futex resumed>) = 0 [pid 6164] chdir("./111") = 0 [pid 6164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6164] setpgid(0, 0) = 0 [pid 6164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6164] write(3, "1000", 4) = 4 [pid 6164] close(3) = 0 [pid 6164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... write resumed>) = 16777216 [pid 6164] <... futex resumed>) = 0 [pid 6164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6164] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6164] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6162] munmap(0x7fe96bb4a000, 16777216 [pid 6163] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6162] <... munmap resumed>) = 0 [pid 6164] <... clone resumed>, parent_tid=[6165], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6165 [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6163] <... mmap resumed>) = 0x7fe973f4a000 [pid 6163] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6165 attached ) = 0 [pid 6165] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6165] memfd_create("syzkaller", 0) = 3 [pid 6163] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 ./strace-static-x86_64: Process 6166 attached [pid 6158] <... ioctl resumed>) = 0 [pid 6162] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6162] ioctl(4, LOOP_SET_FD, 3 [pid 6166] set_robust_list(0x7fe973f6a9e0, 24 [pid 6163] <... clone resumed>, parent_tid=[6166], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6166 [pid 6158] close(4 [pid 6166] <... set_robust_list resumed>) = 0 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] memfd_create("syzkaller", 0 [pid 6163] <... futex resumed>) = 0 [pid 6158] <... close resumed>) = 0 [pid 6166] <... memfd_create resumed>) = 3 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6158] <... futex resumed>) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6158] creat("./bus", 000 [pid 6162] <... ioctl resumed>) = 0 [pid 6162] close(3) = 0 [pid 6162] mkdir("./bus", 0777 [pid 6158] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... mkdir resumed>) = 0 [pid 6158] <... futex resumed>) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6162] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6158] open("./bus", O_RDONLY [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] <... open resumed>) = 3 [ 270.132066][ T6162] loop4: detected capacity change from 0 to 32768 [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6158] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... futex resumed>) = 0 [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] fallocate(-1, 0, 0, 1048820 [pid 6157] <... futex resumed>) = 0 [pid 6158] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6158] <... futex resumed>) = 0 [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6157] <... futex resumed>) = 0 [pid 6158] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... mount resumed>) = -1 EEXIST (File exists) [pid 6162] ioctl(4, LOOP_CLR_FD [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6157] <... futex resumed>) = 0 [pid 6158] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6157] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6158] <... futex resumed>) = 0 [pid 6157] <... futex resumed>) = 1 [pid 6158] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6157] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6158] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6158] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6157] exit_group(0 [pid 6158] <... futex resumed>) = ? [pid 6157] <... exit_group resumed>) = ? [pid 6158] +++ exited with 0 +++ [pid 6157] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6157, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5015] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./110/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 270.182960][ T6162] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6162) [pid 5015] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./110/bus") = 0 [pid 5015] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./110/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./110/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./110") = 0 [pid 5015] mkdir("./111", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6167 ./strace-static-x86_64: Process 6167 attached [pid 6167] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6167] chdir("./111") = 0 [pid 6167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6167] setpgid(0, 0) = 0 [pid 6167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6167] write(3, "1000", 4) = 4 [pid 6167] close(3) = 0 [pid 6167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6160] <... ioctl resumed>) = 0 [pid 6167] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6160] close(4 [pid 6167] <... mprotect resumed>) = 0 [pid 6160] <... close resumed>) = 0 [pid 6167] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] creat("./bus", 000 [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6167] <... clone resumed>, parent_tid=[6168], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6168 [pid 6160] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 0 [pid 6160] <... futex resumed>) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6160] open("./bus", O_RDONLY [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6168 attached [pid 6160] <... open resumed>) = 3 [pid 6159] <... futex resumed>) = 0 [pid 6168] set_robust_list(0x7fe973f6a9e0, 24 [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... set_robust_list resumed>) = 0 [pid 6160] <... futex resumed>) = 0 [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] memfd_create("syzkaller", 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... memfd_create resumed>) = 3 [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6160] <... futex resumed>) = 0 [pid 6159] <... futex resumed>) = 1 [pid 6168] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6160] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6160] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6160] fallocate(-1, 0, 0, 1048820 [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6160] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6160] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6159] <... futex resumed>) = 0 [pid 6160] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6159] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6160] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6160] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6159] <... futex resumed>) = 0 [pid 6160] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6159] exit_group(0 [pid 6160] <... futex resumed>) = ? [pid 6159] <... exit_group resumed>) = ? [pid 6160] +++ exited with 0 +++ [pid 6159] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6159, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./109", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./109", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./109/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./109/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./109/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6166] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./109/bus") = 0 [pid 5012] umount2("./109/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./109/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./109/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./109") = 0 [pid 5012] mkdir("./110", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6169 ./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6169] chdir("./110") = 0 [pid 6169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6169] setpgid(0, 0) = 0 [pid 6169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6169] write(3, "1000", 4) = 4 [pid 6169] close(3) = 0 [pid 6169] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6169] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6169] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6170], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6170 [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6170] memfd_create("syzkaller", 0) = 3 [pid 6170] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6162] <... ioctl resumed>) = 0 [pid 6162] close(4) = 0 [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] <... futex resumed>) = 0 [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... futex resumed>) = 1 [pid 6162] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6162] open("./bus", O_RDONLY [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... open resumed>) = 3 [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... futex resumed>) = 0 [pid 6161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... futex resumed>) = 0 [pid 6161] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6162] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6161] <... futex resumed>) = 0 [pid 6162] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6161] <... futex resumed>) = 0 [pid 6162] fallocate(-1, 0, 0, 1048820 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6161] <... futex resumed>) = 0 [pid 6162] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6162] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6161] <... futex resumed>) = 0 [pid 6162] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6161] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6162] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6162] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6161] <... futex resumed>) = 0 [pid 6162] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6161] exit_group(0 [pid 6162] <... futex resumed>) = ? [pid 6161] <... exit_group resumed>) = ? [pid 6162] +++ exited with 0 +++ [pid 6161] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6161, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=42 /* 0.42 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./111/bus") = 0 [pid 5014] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./111/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./111") = 0 [pid 5014] mkdir("./112", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6171 ./strace-static-x86_64: Process 6171 attached [pid 6171] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6171] chdir("./112") = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6171] write(3, "1000", 4) = 4 [pid 6171] close(3) = 0 [pid 6171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6171] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6171] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6172], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6172 [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6172 attached [pid 6172] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6172] memfd_create("syzkaller", 0) = 3 [pid 6172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6168] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6170] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6166] <... write resumed>) = 16777216 [pid 6166] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6166] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6166] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6166] close(3) = 0 [pid 6166] mkdir("./bus", 0777) = 0 [pid 6166] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 271.128080][ T6166] loop1: detected capacity change from 0 to 32768 [ 271.142796][ T6166] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6166) [pid 6166] ioctl(4, LOOP_CLR_FD [pid 6172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6165] <... write resumed>) = 16777216 [pid 6165] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6165] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6165] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6165] close(3) = 0 [pid 6165] mkdir("./bus", 0777) = 0 [pid 6165] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 271.269763][ T6165] loop3: detected capacity change from 0 to 32768 [ 271.294769][ T6165] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6165) [pid 6165] ioctl(4, LOOP_CLR_FD [pid 6168] <... write resumed>) = 16777216 [pid 6168] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6168] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6168] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6168] close(3) = 0 [pid 6168] mkdir("./bus", 0777) = 0 [pid 6168] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 271.447408][ T6168] loop5: detected capacity change from 0 to 32768 [ 271.469036][ T6168] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6168) [pid 6168] ioctl(4, LOOP_CLR_FD [pid 6166] <... ioctl resumed>) = 0 [pid 6166] close(4) = 0 [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] <... futex resumed>) = 0 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6166] open("./bus", O_RDONLY [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] <... open resumed>) = 3 [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 1 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] fallocate(-1, 0, 0, 1048820 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6163] <... futex resumed>) = 0 [pid 6166] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6163] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6166] <... futex resumed>) = 0 [pid 6166] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6163] <... futex resumed>) = 0 [pid 6166] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6163] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6166] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6163] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6163] exit_group(0) = ? [pid 6166] +++ exited with 0 +++ [pid 6163] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6163, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=33 /* 0.33 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./112/bus") = 0 [pid 5011] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./112/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./112") = 0 [pid 5011] mkdir("./113", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6173 ./strace-static-x86_64: Process 6173 attached [pid 6173] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6173] chdir("./113") = 0 [pid 6173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6173] setpgid(0, 0) = 0 [pid 6173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6173] write(3, "1000", 4) = 4 [pid 6173] close(3) = 0 [pid 6173] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] <... write resumed>) = 16777216 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] munmap(0x7fe96bb4a000, 16777216 [pid 6173] <... futex resumed>) = 0 [pid 6165] <... ioctl resumed>) = 0 [pid 6165] close(4) = 0 [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... futex resumed>) = 0 [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] <... futex resumed>) = 1 [pid 6165] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6173] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6173] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] <... futex resumed>) = 0 [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6173] <... mprotect resumed>) = 0 [pid 6165] <... futex resumed>) = 1 [pid 6165] open("./bus", O_RDONLY [pid 6173] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6165] <... open resumed>) = 3 [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6173] <... clone resumed>, parent_tid=[6174], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6174 [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6164] <... futex resumed>) = 0 [pid 6173] <... futex resumed>) = 0 [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6165] <... futex resumed>) = 0 [pid 6164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6165] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6165] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6165] fallocate(-1, 0, 0, 1048820 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6174 attached [pid 6170] <... munmap resumed>) = 0 [pid 6165] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6165] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6165] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] set_robust_list(0x7fe973f6a9e0, 24 [pid 6165] <... futex resumed>) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... set_robust_list resumed>) = 0 [pid 6170] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6165] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6164] <... futex resumed>) = 0 [pid 6165] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6164] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] memfd_create("syzkaller", 0 [pid 6170] <... openat resumed>) = 4 [pid 6165] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6174] <... memfd_create resumed>) = 3 [pid 6170] ioctl(4, LOOP_SET_FD, 3 [pid 6165] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6165] <... futex resumed>) = 1 [pid 6164] <... futex resumed>) = 0 [pid 6165] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6164] exit_group(0 [pid 6165] <... futex resumed>) = ? [pid 6164] <... exit_group resumed>) = ? [pid 6165] +++ exited with 0 +++ [pid 6164] +++ exited with 0 +++ [pid 6174] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6170] <... ioctl resumed>) = 0 [pid 6170] close(3 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6164, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=44 /* 0.44 s */} --- [pid 6170] <... close resumed>) = 0 [pid 6170] mkdir("./bus", 0777) = 0 [pid 5013] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6170] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6172] <... write resumed>) = 16777216 [pid 6170] <... mount resumed>) = -1 EEXIST (File exists) [pid 6172] munmap(0x7fe96bb4a000, 16777216 [pid 6170] ioctl(4, LOOP_CLR_FD [pid 5013] close(4) = 0 [pid 5013] rmdir("./111/bus") = 0 [pid 5013] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./111/binderfs", [pid 6172] <... munmap resumed>) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./111/binderfs") = 0 [ 271.816868][ T6170] loop2: detected capacity change from 0 to 32768 [ 271.842028][ T6170] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6170) [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./111" [pid 6168] <... ioctl resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 6172] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6172] ioctl(4, LOOP_SET_FD, 3 [pid 6168] close(4 [pid 5013] mkdir("./112", 0777) = 0 [pid 6168] <... close resumed>) = 0 [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6167] <... futex resumed>) = 0 [pid 5013] <... openat resumed>) = 3 [pid 6168] <... futex resumed>) = 1 [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6167] <... futex resumed>) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6168] creat("./bus", 000 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6172] <... ioctl resumed>) = 0 [pid 6172] close(3) = 0 [pid 6172] mkdir("./bus", 0777) = 0 [pid 6172] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6168] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6175 [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] open("./bus", O_RDONLY [pid 6167] <... futex resumed>) = 0 [pid 6168] <... open resumed>) = 3 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6168] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6168] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] chdir("./112" [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] <... futex resumed>) = 0 [pid 6175] <... chdir resumed>) = 0 [pid 6168] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6168] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6175] <... prctl resumed>) = 0 [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] setpgid(0, 0 [pid 6168] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6175] <... setpgid resumed>) = 0 [pid 6168] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6167] <... futex resumed>) = 0 [pid 6175] <... openat resumed>) = 3 [pid 6168] fallocate(-1, 0, 0, 1048820 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6175] write(3, "1000", 4 [pid 6168] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6175] <... write resumed>) = 4 [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] close(3 [pid 6168] <... futex resumed>) = 1 [pid 6167] <... futex resumed>) = 0 [pid 6175] <... close resumed>) = 0 [pid 6168] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6168] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... symlink resumed>) = 0 [pid 6167] <... futex resumed>) = 0 [pid 6168] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6175] <... futex resumed>) = 0 [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 271.907508][ T6172] loop4: detected capacity change from 0 to 32768 [ 271.933388][ T6172] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6172) [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6168] <... futex resumed>) = 0 [pid 6167] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] <... mmap resumed>) = 0x7fe973f4a000 [pid 6168] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6167] <... futex resumed>) = 0 [pid 6175] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6172] <... mount resumed>) = -1 EEXIST (File exists) [pid 6168] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6167] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6175] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6172] ioctl(4, LOOP_CLR_FD [pid 6168] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6167] exit_group(0 [pid 6175] <... clone resumed>, parent_tid=[6176], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6176 [pid 6167] <... exit_group resumed>) = ? [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6168] +++ exited with 0 +++ [pid 6175] <... futex resumed>) = 0 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6167] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6167, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=37 /* 0.37 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 6176 attached [pid 5015] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] set_robust_list(0x7fe973f6a9e0, 24 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6176] <... set_robust_list resumed>) = 0 [pid 5015] lstat("./111/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6176] memfd_create("syzkaller", 0 [pid 5015] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6176] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6176] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./111/bus") = 0 [pid 5015] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./111/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./111/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./111") = 0 [pid 5015] mkdir("./112", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6177 ./strace-static-x86_64: Process 6177 attached [pid 6177] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6177] chdir("./112") = 0 [pid 6177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6177] setpgid(0, 0) = 0 [pid 6177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6177] write(3, "1000", 4) = 4 [pid 6177] close(3) = 0 [pid 6177] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6177] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6177] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6178], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6178 [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6178 attached [pid 6178] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6178] memfd_create("syzkaller", 0) = 3 [pid 6178] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6170] <... ioctl resumed>) = 0 [pid 6170] close(4 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6170] <... close resumed>) = 0 [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] open("./bus", O_RDONLY [pid 6169] <... futex resumed>) = 0 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... open resumed>) = 3 [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6170] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6170] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6170] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6170] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6169] <... futex resumed>) = 0 [pid 6170] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6169] <... futex resumed>) = 0 [pid 6170] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6169] <... futex resumed>) = 0 [pid 6170] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... ioctl resumed>) = 0 [pid 6170] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6169] <... futex resumed>) = 0 [pid 6172] close(4 [pid 6170] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6169] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6172] <... close resumed>) = 0 [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6171] <... futex resumed>) = 0 [pid 6172] creat("./bus", 000 [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6171] <... futex resumed>) = 0 [pid 6170] <... futex resumed>) = 0 [pid 6169] exit_group(0 [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] <... exit_group resumed>) = ? [pid 6172] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 6172] open("./bus", O_RDONLY [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] +++ exited with 0 +++ [pid 6172] <... open resumed>) = 3 [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] +++ exited with 0 +++ [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6169, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 5012] umount2("./110", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... open resumed>) = -1 EISDIR (Is a directory) [pid 5012] openat(AT_FDCWD, "./110", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5012] fstat(3, [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 5012] getdents64(3, [pid 6172] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6172] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5012] lstat("./110/bus", [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 5012] umount2("./110/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] fallocate(-1, 0, 0, 1048820 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] openat(AT_FDCWD, "./110/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 4 [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5012] fstat(4, [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 5012] getdents64(4, [pid 6172] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6172] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] getdents64(4, [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5012] close(4 [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... close resumed>) = 0 [pid 6172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 5012] rmdir("./110/bus" [pid 6172] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6171] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... rmdir resumed>) = 0 [pid 6172] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] umount2("./110/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6172] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6172] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 5012] lstat("./110/binderfs", [pid 6172] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] exit_group(0 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6172] <... futex resumed>) = ? [pid 6171] <... exit_group resumed>) = ? [pid 5012] unlink("./110/binderfs" [pid 6172] +++ exited with 0 +++ [pid 6171] +++ exited with 0 +++ [pid 5012] <... unlink resumed>) = 0 [pid 5012] getdents64(3, [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=35 /* 0.35 s */} --- [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] close(3 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] rmdir("./110" [pid 5014] <... openat resumed>) = 3 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] fstat(3, [pid 5012] mkdir("./111", 0777 [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 5014] getdents64(3, [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... openat resumed>) = 3 [pid 5014] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] ioctl(3, LOOP_CLR_FD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5014] lstat("./112/bus", [pid 5012] close(3 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... close resumed>) = 0 [pid 5014] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6179 [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./112/bus") = 0 [pid 5014] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 6179 attached [pid 5014] unlink("./112/binderfs" [pid 6179] set_robust_list(0x5555561c25e0, 24 [pid 5014] <... unlink resumed>) = 0 [pid 6179] <... set_robust_list resumed>) = 0 [pid 5014] getdents64(3, [pid 6179] chdir("./111" [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6179] <... chdir resumed>) = 0 [pid 5014] close(3 [pid 6179] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... close resumed>) = 0 [pid 6179] <... prctl resumed>) = 0 [pid 5014] rmdir("./112" [pid 6179] setpgid(0, 0 [pid 5014] <... rmdir resumed>) = 0 [pid 6179] <... setpgid resumed>) = 0 [pid 5014] mkdir("./113", 0777 [pid 6179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... mkdir resumed>) = 0 [pid 6179] <... openat resumed>) = 3 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6179] write(3, "1000", 4 [pid 5014] <... openat resumed>) = 3 [pid 6179] <... write resumed>) = 4 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 6179] close(3 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6179] <... close resumed>) = 0 [pid 5014] close(3 [pid 6179] symlink("/dev/binderfs", "./binderfs" [pid 5014] <... close resumed>) = 0 [pid 6179] <... symlink resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6179] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6180 [pid 6179] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6179] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6179] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6181], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6181 [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6180 attached [pid 6180] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6180] chdir("./113"./strace-static-x86_64: Process 6181 attached ) = 0 [pid 6181] set_robust_list(0x7fe973f6a9e0, 24 [pid 6180] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6181] <... set_robust_list resumed>) = 0 [pid 6180] <... prctl resumed>) = 0 [pid 6181] memfd_create("syzkaller", 0 [pid 6180] setpgid(0, 0 [pid 6181] <... memfd_create resumed>) = 3 [pid 6180] <... setpgid resumed>) = 0 [pid 6181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6180] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6181] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6180] <... openat resumed>) = 3 [pid 6180] write(3, "1000", 4) = 4 [pid 6180] close(3) = 0 [pid 6180] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6180] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6180] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6180] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6182 attached , parent_tid=[6182], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6182 [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6182] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6182] memfd_create("syzkaller", 0) = 3 [pid 6182] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6178] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6174] <... write resumed>) = 16777216 [pid 6182] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6174] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./bus", 0777) = 0 [pid 6176] <... write resumed>) = 16777216 [pid 6174] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [ 273.136155][ T6174] loop1: detected capacity change from 0 to 32768 [ 273.172933][ T6174] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6174) [pid 6176] munmap(0x7fe96bb4a000, 16777216 [pid 6174] <... mount resumed>) = -1 EEXIST (File exists) [pid 6174] ioctl(4, LOOP_CLR_FD [pid 6176] <... munmap resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6176] close(3) = 0 [pid 6176] mkdir("./bus", 0777) = 0 [ 273.227073][ T6176] loop3: detected capacity change from 0 to 32768 [pid 6176] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6178] <... write resumed>) = 16777216 [pid 6176] <... mount resumed>) = -1 EEXIST (File exists) [pid 6176] ioctl(4, LOOP_CLR_FD [ 273.268445][ T6176] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6176) [pid 6178] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6178] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6178] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6178] close(3) = 0 [pid 6178] mkdir("./bus", 0777) = 0 [pid 6178] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 273.359213][ T6178] loop5: detected capacity change from 0 to 32768 [ 273.394902][ T6178] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6178) [pid 6178] ioctl(4, LOOP_CLR_FD [pid 6174] <... ioctl resumed>) = 0 [pid 6174] close(4) = 0 [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 0 [pid 6173] <... futex resumed>) = 1 [pid 6174] creat("./bus", 000 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6174] open("./bus", O_RDONLY [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... open resumed>) = 3 [pid 6173] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 0 [pid 6173] <... futex resumed>) = 1 [pid 6174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6173] <... futex resumed>) = 0 [pid 6174] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 0 [pid 6173] <... futex resumed>) = 1 [pid 6174] fallocate(-1, 0, 0, 1048820 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] <... futex resumed>) = 0 [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 0 [pid 6173] <... futex resumed>) = 1 [pid 6174] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6173] <... futex resumed>) = 0 [pid 6174] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6173] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6174] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6173] <... futex resumed>) = 0 [pid 6174] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6173] exit_group(0 [pid 6174] <... futex resumed>) = ? [pid 6173] <... exit_group resumed>) = ? [pid 6174] +++ exited with 0 +++ [pid 6173] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6173, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./113/bus") = 0 [pid 5011] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./113/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./113") = 0 [pid 5011] mkdir("./114", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6183 ./strace-static-x86_64: Process 6183 attached [pid 6183] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6183] chdir("./114") = 0 [pid 6183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6183] setpgid(0, 0) = 0 [pid 6183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6183] write(3, "1000", 4) = 4 [pid 6183] close(3) = 0 [pid 6183] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6183] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6183] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6184], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6184 [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6176] <... ioctl resumed>) = 0 [pid 6181] <... write resumed>) = 16777216 [pid 6181] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 6184 attached [pid 6184] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6184] memfd_create("syzkaller", 0) = 3 [pid 6184] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6176] close(4) = 0 [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] creat("./bus", 000 [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6175] <... futex resumed>) = 0 [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... write resumed>) = 16777216 [pid 6176] <... futex resumed>) = 0 [pid 6175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] <... munmap resumed>) = 0 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] munmap(0x7fe96bb4a000, 16777216 [pid 6181] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6181] <... openat resumed>) = 4 [pid 6176] open("./bus", O_RDONLY [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6181] ioctl(4, LOOP_SET_FD, 3 [pid 6176] <... open resumed>) = 3 [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6176] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... munmap resumed>) = 0 [pid 6181] <... ioctl resumed>) = 0 [pid 6176] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6182] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6181] close(3 [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... openat resumed>) = 4 [pid 6181] <... close resumed>) = 0 [pid 6176] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6182] ioctl(4, LOOP_SET_FD, 3 [pid 6181] mkdir("./bus", 0777 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6176] fallocate(-1, 0, 0, 1048820 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6176] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... mkdir resumed>) = 0 [pid 6176] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6181] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6176] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6175] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6176] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6176] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] exit_group(0 [pid 6176] <... futex resumed>) = ? [pid 6175] <... exit_group resumed>) = ? [pid 6176] +++ exited with 0 +++ [pid 6175] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=38 /* 0.38 s */} --- [pid 5013] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6182] <... ioctl resumed>) = 0 [pid 5013] fstat(3, [pid 6182] close(3 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6182] <... close resumed>) = 0 [pid 5013] getdents64(3, [pid 6182] mkdir("./bus", 0777 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6182] <... mkdir resumed>) = 0 [pid 5013] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6182] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 273.762310][ T6181] loop2: detected capacity change from 0 to 32768 [ 273.790149][ T6182] loop4: detected capacity change from 0 to 32768 [ 273.801669][ T6181] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6181) [pid 5013] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4 [pid 6182] <... mount resumed>) = -1 EEXIST (File exists) [pid 6181] <... mount resumed>) = -1 EEXIST (File exists) [pid 6178] <... ioctl resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 6182] ioctl(4, LOOP_CLR_FD [pid 6181] ioctl(4, LOOP_CLR_FD [pid 6178] close(4 [pid 5013] rmdir("./112/bus" [pid 6178] <... close resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./112/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./112" [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... rmdir resumed>) = 0 [pid 6178] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 0 [pid 5013] mkdir("./113", 0777 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... mkdir resumed>) = 0 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6178] creat("./bus", 000 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... openat resumed>) = 3 [pid 6178] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6178] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 0 [pid 5013] close(3 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... close resumed>) = 0 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6178] open("./bus", O_RDONLY [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6178] <... open resumed>) = 3 [ 273.824112][ T6182] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6182) [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6185 [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6185 attached ) = 1 [pid 6177] <... futex resumed>) = 0 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] set_robust_list(0x5555561c25e0, 24 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 6185] <... set_robust_list resumed>) = 0 [pid 6178] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] chdir("./113" [pid 6178] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6185] <... chdir resumed>) = 0 [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6178] <... futex resumed>) = 1 [pid 6185] <... prctl resumed>) = 0 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] <... futex resumed>) = 0 [pid 6185] setpgid(0, 0 [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... setpgid resumed>) = 0 [pid 6177] <... futex resumed>) = 1 [pid 6178] <... futex resumed>) = 0 [pid 6185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6178] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] <... openat resumed>) = 3 [pid 6178] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6185] write(3, "1000", 4 [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... write resumed>) = 4 [pid 6178] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 0 [pid 6185] close(3 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... close resumed>) = 0 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 6185] symlink("/dev/binderfs", "./binderfs" [pid 6178] fallocate(-1, 0, 0, 1048820 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] <... symlink resumed>) = 0 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6185] <... futex resumed>) = 0 [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6178] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 0 [pid 6185] <... mmap resumed>) = 0x7fe973f4a000 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 6185] <... mprotect resumed>) = 0 [pid 6178] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6185] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6178] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6185] <... clone resumed>, parent_tid=[6186], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6186 [pid 6178] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 0 [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6186 attached [pid 6185] <... futex resumed>) = 0 [pid 6178] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = 0 [pid 6186] set_robust_list(0x7fe973f6a9e0, 24 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6178] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6177] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6178] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6186] <... set_robust_list resumed>) = 0 [pid 6178] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6177] <... futex resumed>) = 0 [pid 6186] memfd_create("syzkaller", 0 [pid 6178] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] exit_group(0 [pid 6186] <... memfd_create resumed>) = 3 [pid 6178] <... futex resumed>) = ? [pid 6177] <... exit_group resumed>) = ? [pid 6186] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6178] +++ exited with 0 +++ [pid 6177] +++ exited with 0 +++ [pid 6186] <... mmap resumed>) = 0x7fe96bb4a000 [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6177, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=36 /* 0.36 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./112/bus") = 0 [pid 5015] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./112/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./112") = 0 [pid 5015] mkdir("./113", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6187 ./strace-static-x86_64: Process 6187 attached [pid 6187] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6187] chdir("./113") = 0 [pid 6187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6187] setpgid(0, 0) = 0 [pid 6187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6187] write(3, "1000", 4) = 4 [pid 6187] close(3) = 0 [pid 6187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6187] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6187] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6188], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6188 [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6188 attached [pid 6188] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6188] memfd_create("syzkaller", 0) = 3 [pid 6188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6184] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6182] <... ioctl resumed>) = 0 [pid 6182] close(4) = 0 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6180] <... futex resumed>) = 0 [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6180] <... futex resumed>) = 0 [pid 6182] creat("./bus", 000 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6181] <... ioctl resumed>) = 0 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6181] close(4 [pid 6180] <... futex resumed>) = 0 [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... close resumed>) = 0 [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] open("./bus", O_RDONLY [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... open resumed>) = 3 [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] creat("./bus", 000 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] open("./bus", O_RDONLY [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... open resumed>) = 3 [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] fallocate(-1, 0, 0, 1048820 [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] fallocate(-1, 0, 0, 1048820 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6180] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... futex resumed>) = 0 [pid 6182] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6181] <... futex resumed>) = 1 [pid 6180] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = 0 [pid 6182] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6182] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6182] <... futex resumed>) = 1 [pid 6181] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6180] <... futex resumed>) = 0 [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6182] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6181] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6180] exit_group(0 [pid 6182] <... futex resumed>) = ? [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6180] <... exit_group resumed>) = ? [pid 6182] +++ exited with 0 +++ [pid 6181] <... futex resumed>) = 1 [pid 6180] +++ exited with 0 +++ [pid 6179] <... futex resumed>) = 0 [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6180, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 6181] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... futex resumed>) = 0 [pid 6181] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6179] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6181] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6181] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6181] <... futex resumed>) = 1 [pid 6179] <... futex resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6181] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] exit_group(0 [pid 5014] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6181] <... futex resumed>) = ? [pid 6179] <... exit_group resumed>) = ? [pid 5014] <... openat resumed>) = 3 [pid 6181] +++ exited with 0 +++ [pid 6179] +++ exited with 0 +++ [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6179, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] umount2("./111", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] openat(AT_FDCWD, "./111", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... openat resumed>) = 4 [pid 5012] <... openat resumed>) = 3 [pid 5014] fstat(4, [pid 5012] fstat(3, [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, [pid 5012] getdents64(3, [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] getdents64(4, [pid 5012] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4 [pid 5012] lstat("./111/bus", [pid 5014] <... close resumed>) = 0 [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] rmdir("./113/bus" [pid 5012] umount2("./111/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... rmdir resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] openat(AT_FDCWD, "./111/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 4 [pid 5014] lstat("./113/binderfs", [pid 5012] fstat(4, [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] unlink("./113/binderfs" [pid 5012] getdents64(4, [pid 5014] <... unlink resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(3, [pid 5012] getdents64(4, [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(3 [pid 5012] close(4 [pid 5014] <... close resumed>) = 0 [pid 5014] rmdir("./113" [pid 5012] <... close resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5012] rmdir("./111/bus" [pid 5014] mkdir("./114", 0777 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5012] umount2("./111/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... openat resumed>) = 3 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] lstat("./111/binderfs", [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] close(3 [pid 5012] unlink("./111/binderfs" [pid 5014] <... close resumed>) = 0 [pid 5012] <... unlink resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6189 [pid 5012] close(3) = 0 [pid 5012] rmdir("./111") = 0 [pid 5012] mkdir("./112", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6190 ./strace-static-x86_64: Process 6189 attached [pid 6189] set_robust_list(0x5555561c25e0, 24./strace-static-x86_64: Process 6190 attached ) = 0 [pid 6190] set_robust_list(0x5555561c25e0, 24 [pid 6189] chdir("./114" [pid 6190] <... set_robust_list resumed>) = 0 [pid 6189] <... chdir resumed>) = 0 [pid 6190] chdir("./112" [pid 6189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6190] <... chdir resumed>) = 0 [pid 6189] <... prctl resumed>) = 0 [pid 6190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6189] setpgid(0, 0 [pid 6190] <... prctl resumed>) = 0 [pid 6189] <... setpgid resumed>) = 0 [pid 6190] setpgid(0, 0 [pid 6189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6190] <... setpgid resumed>) = 0 [pid 6189] <... openat resumed>) = 3 [pid 6190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6189] write(3, "1000", 4 [pid 6190] <... openat resumed>) = 3 [pid 6189] <... write resumed>) = 4 [pid 6190] write(3, "1000", 4 [pid 6189] close(3 [pid 6190] <... write resumed>) = 4 [pid 6189] <... close resumed>) = 0 [pid 6190] close(3 [pid 6189] symlink("/dev/binderfs", "./binderfs" [pid 6190] <... close resumed>) = 0 [pid 6189] <... symlink resumed>) = 0 [pid 6190] symlink("/dev/binderfs", "./binderfs" [pid 6189] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] <... symlink resumed>) = 0 [pid 6189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] <... mmap resumed>) = 0x7fe973f4a000 [pid 6190] <... futex resumed>) = 0 [pid 6189] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6189] <... mprotect resumed>) = 0 [pid 6186] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6190] <... mmap resumed>) = 0x7fe973f4a000 [pid 6189] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6190] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6189] <... clone resumed>, parent_tid=[6191], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6191 [pid 6190] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6190] <... clone resumed>, parent_tid=[6192], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6192 [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6191 attached [pid 6191] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6191] memfd_create("syzkaller", 0) = 3 [pid 6191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6192 attached ) = 0 [pid 6192] set_robust_list(0x7fe973f6a9e0, 24 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6192] <... set_robust_list resumed>) = 0 [pid 6192] memfd_create("syzkaller", 0) = 3 [pid 6192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6184] <... write resumed>) = 16777216 [pid 6184] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6184] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6184] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6184] close(3) = 0 [pid 6184] mkdir("./bus", 0777) = 0 [pid 6184] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 274.728819][ T6184] loop1: detected capacity change from 0 to 32768 [ 274.748267][ T6184] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6184) [pid 6184] ioctl(4, LOOP_CLR_FD [pid 6192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6186] <... write resumed>) = 16777216 [pid 6186] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6188] <... write resumed>) = 16777216 [pid 6186] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6186] ioctl(4, LOOP_SET_FD, 3 [pid 6188] munmap(0x7fe96bb4a000, 16777216 [pid 6186] <... ioctl resumed>) = 0 [pid 6186] close(3) = 0 [pid 6186] mkdir("./bus", 0777) = 0 [pid 6186] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6188] <... munmap resumed>) = 0 [pid 6188] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 275.101829][ T6186] loop3: detected capacity change from 0 to 32768 [ 275.137008][ T6186] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6186) [pid 6188] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6188] close(3) = 0 [pid 6188] mkdir("./bus", 0777) = 0 [pid 6188] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6184] <... ioctl resumed>) = 0 [pid 6188] <... mount resumed>) = -1 EEXIST (File exists) [pid 6186] <... mount resumed>) = -1 EEXIST (File exists) [pid 6184] close(4 [pid 6188] ioctl(4, LOOP_CLR_FD [pid 6186] ioctl(4, LOOP_CLR_FD [pid 6184] <... close resumed>) = 0 [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] creat("./bus", 000 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] open("./bus", O_RDONLY [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... open resumed>) = 3 [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... futex resumed>) = 0 [pid 6183] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 275.155511][ T6188] loop5: detected capacity change from 0 to 32768 [ 275.177394][ T6188] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6188) [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] fallocate(-1, 0, 0, 1048820 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6184] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6183] <... futex resumed>) = 0 [pid 6184] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6183] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6184] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6184] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6183] <... futex resumed>) = 0 [pid 6184] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6183] exit_group(0 [pid 6184] <... futex resumed>) = ? [pid 6183] <... exit_group resumed>) = ? [pid 6184] +++ exited with 0 +++ [pid 6183] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6183, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=43 /* 0.43 s */} --- [pid 5011] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./114/bus") = 0 [pid 5011] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./114/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./114") = 0 [pid 5011] mkdir("./115", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6193 ./strace-static-x86_64: Process 6193 attached [pid 6193] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6193] chdir("./115") = 0 [pid 6193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6193] setpgid(0, 0) = 0 [pid 6193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6193] write(3, "1000", 4) = 4 [pid 6193] close(3) = 0 [pid 6193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6193] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6193] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6193] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6194], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6194 [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6194 attached [pid 6194] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6194] memfd_create("syzkaller", 0) = 3 [pid 6194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6192] <... write resumed>) = 16777216 [pid 6192] munmap(0x7fe96bb4a000, 16777216 [pid 6191] <... write resumed>) = 16777216 [pid 6191] munmap(0x7fe96bb4a000, 16777216 [pid 6192] <... munmap resumed>) = 0 [pid 6192] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6192] ioctl(4, LOOP_SET_FD, 3 [pid 6191] <... munmap resumed>) = 0 [pid 6192] <... ioctl resumed>) = 0 [pid 6192] close(3) = 0 [pid 6192] mkdir("./bus", 0777) = 0 [pid 6191] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6192] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6191] <... openat resumed>) = 4 [pid 6191] ioctl(4, LOOP_SET_FD, 3 [pid 6192] <... mount resumed>) = -1 EEXIST (File exists) [pid 6192] ioctl(4, LOOP_CLR_FD [pid 6191] <... ioctl resumed>) = 0 [pid 6191] close(3) = 0 [pid 6191] mkdir("./bus", 0777) = 0 [ 275.491845][ T6192] loop2: detected capacity change from 0 to 32768 [ 275.516637][ T6192] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6192) [ 275.529578][ T6191] loop4: detected capacity change from 0 to 32768 [pid 6191] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 275.564573][ T6191] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6191) [pid 6191] ioctl(4, LOOP_CLR_FD [pid 6188] <... ioctl resumed>) = 0 [pid 6186] <... ioctl resumed>) = 0 [pid 6188] close(4 [pid 6186] close(4 [pid 6188] <... close resumed>) = 0 [pid 6186] <... close resumed>) = 0 [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] creat("./bus", 000 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] creat("./bus", 000 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6186] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] open("./bus", O_RDONLY [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] open("./bus", O_RDONLY [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... open resumed>) = 3 [pid 6186] <... open resumed>) = 3 [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6186] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6186] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] fallocate(-1, 0, 0, 1048820 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] fallocate(-1, 0, 0, 1048820 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6186] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6186] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6185] <... futex resumed>) = 0 [pid 6188] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6187] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6186] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6185] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6188] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6186] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6188] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6186] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6188] <... futex resumed>) = 1 [pid 6187] <... futex resumed>) = 0 [pid 6186] <... futex resumed>) = 1 [pid 6185] <... futex resumed>) = 0 [pid 6188] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6187] exit_group(0 [pid 6186] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6185] exit_group(0 [pid 6188] <... futex resumed>) = ? [pid 6187] <... exit_group resumed>) = ? [pid 6186] <... futex resumed>) = ? [pid 6185] <... exit_group resumed>) = ? [pid 6188] +++ exited with 0 +++ [pid 6187] +++ exited with 0 +++ [pid 6186] +++ exited with 0 +++ [pid 6185] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6185, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} --- [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6187, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=39 /* 0.39 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5015] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5015] fstat(3, [pid 5013] fstat(3, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(3, [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./113/bus", [pid 5013] lstat("./113/bus", [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... openat resumed>) = 4 [pid 5013] <... openat resumed>) = 4 [pid 5015] fstat(4, [pid 5013] fstat(4, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, [pid 5013] getdents64(4, [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, [pid 5013] getdents64(4, [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 5013] close(4 [pid 5015] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] rmdir("./113/bus" [pid 5013] rmdir("./113/bus" [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5015] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./113/binderfs", [pid 5013] lstat("./113/binderfs", [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./113/binderfs" [pid 5013] unlink("./113/binderfs" [pid 5015] <... unlink resumed>) = 0 [pid 5013] <... unlink resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] getdents64(3, [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3 [pid 5013] close(3 [pid 5015] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] rmdir("./113" [pid 5013] rmdir("./113" [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5015] mkdir("./114", 0777 [pid 5013] mkdir("./114", 0777 [pid 5015] <... mkdir resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5015] <... openat resumed>) = 3 [pid 5013] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] close(3 [pid 5013] close(3 [pid 5015] <... close resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6195 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6196 ./strace-static-x86_64: Process 6195 attached [pid 6195] set_robust_list(0x5555561c25e0, 24./strace-static-x86_64: Process 6196 attached ) = 0 [pid 6195] chdir("./114" [pid 6196] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6195] <... chdir resumed>) = 0 [pid 6196] chdir("./114" [pid 6195] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6196] <... chdir resumed>) = 0 [pid 6195] <... prctl resumed>) = 0 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6195] setpgid(0, 0 [pid 6196] <... prctl resumed>) = 0 [pid 6195] <... setpgid resumed>) = 0 [pid 6196] setpgid(0, 0 [pid 6195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6196] <... setpgid resumed>) = 0 [pid 6195] <... openat resumed>) = 3 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6195] write(3, "1000", 4 [pid 6196] <... openat resumed>) = 3 [pid 6195] <... write resumed>) = 4 [pid 6196] write(3, "1000", 4 [pid 6195] close(3 [pid 6196] <... write resumed>) = 4 [pid 6195] <... close resumed>) = 0 [pid 6196] close(3 [pid 6195] symlink("/dev/binderfs", "./binderfs" [pid 6196] <... close resumed>) = 0 [pid 6195] <... symlink resumed>) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs" [pid 6195] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6196] <... symlink resumed>) = 0 [pid 6195] <... futex resumed>) = 0 [pid 6196] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6196] <... futex resumed>) = 0 [pid 6195] <... mmap resumed>) = 0x7fe973f4a000 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6195] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6196] <... mmap resumed>) = 0x7fe973f4a000 [pid 6195] <... mprotect resumed>) = 0 [pid 6196] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6195] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6196] <... mprotect resumed>) = 0 [pid 6196] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6195] <... clone resumed>, parent_tid=[6197], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6197 [pid 6196] <... clone resumed>, parent_tid=[6198], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6198 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6198 attached [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] set_robust_list(0x7fe973f6a9e0, 24 [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6197 attached [pid 6198] <... set_robust_list resumed>) = 0 [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] memfd_create("syzkaller", 0 [pid 6197] set_robust_list(0x7fe973f6a9e0, 24 [pid 6198] <... memfd_create resumed>) = 3 [pid 6197] <... set_robust_list resumed>) = 0 [pid 6198] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6197] memfd_create("syzkaller", 0 [pid 6198] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6197] <... memfd_create resumed>) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6192] <... ioctl resumed>) = 0 [pid 6192] close(4) = 0 [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] creat("./bus", 000 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] open("./bus", O_RDONLY [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... open resumed>) = 3 [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] fallocate(-1, 0, 0, 1048820 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6190] <... futex resumed>) = 0 [pid 6192] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6190] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6192] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6192] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6190] <... futex resumed>) = 0 [pid 6192] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6190] exit_group(0 [pid 6192] <... futex resumed>) = ? [pid 6190] <... exit_group resumed>) = ? [pid 6192] +++ exited with 0 +++ [pid 6190] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6190, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=41 /* 0.41 s */} --- [pid 5012] umount2("./112", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./112", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./112/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./112/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./112/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, [pid 6191] <... ioctl resumed>) = 0 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./112/bus") = 0 [pid 5012] umount2("./112/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./112/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./112/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./112") = 0 [pid 5012] mkdir("./113", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 6191] close(4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6191] <... close resumed>) = 0 [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] close(3 [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 5012] <... close resumed>) = 0 [pid 6191] creat("./bus", 000 [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6191] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6189] <... futex resumed>) = 0 [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6199 [pid 6191] <... futex resumed>) = 0 [pid 6189] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] <... futex resumed>) = 0 [pid 6191] open("./bus", O_RDONLY [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6191] <... open resumed>) = 3 ./strace-static-x86_64: Process 6199 attached [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] set_robust_list(0x5555561c25e0, 24 [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6199] <... set_robust_list resumed>) = 0 [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] chdir("./113" [pid 6191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] <... futex resumed>) = 0 [pid 6199] <... chdir resumed>) = 0 [pid 6191] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6191] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6199] <... prctl resumed>) = 0 [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] setpgid(0, 0 [pid 6191] <... futex resumed>) = 1 [pid 6199] <... setpgid resumed>) = 0 [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6189] <... futex resumed>) = 0 [pid 6199] write(3, "1000", 4 [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... write resumed>) = 4 [pid 6191] <... futex resumed>) = 0 [pid 6189] <... futex resumed>) = 1 [pid 6199] close(3 [pid 6191] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] <... close resumed>) = 0 [pid 6191] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6199] symlink("/dev/binderfs", "./binderfs" [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... symlink resumed>) = 0 [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] <... futex resumed>) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6191] fallocate(-1, 0, 0, 1048820 [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] <... mmap resumed>) = 0x7fe973f4a000 [pid 6191] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6199] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... mprotect resumed>) = 0 [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6199] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] <... futex resumed>) = 0 [pid 6199] <... clone resumed>, parent_tid=[6200], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6200 [pid 6191] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6191] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6199] <... futex resumed>) = 0 [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6200 attached [pid 6191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6189] <... futex resumed>) = 0 [pid 6200] set_robust_list(0x7fe973f6a9e0, 24 [pid 6191] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6189] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... set_robust_list resumed>) = 0 [pid 6191] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6200] memfd_create("syzkaller", 0 [pid 6191] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... memfd_create resumed>) = 3 [pid 6191] <... futex resumed>) = 1 [pid 6189] <... futex resumed>) = 0 [pid 6200] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6191] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6189] exit_group(0 [pid 6200] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6191] <... futex resumed>) = ? [pid 6189] <... exit_group resumed>) = ? [pid 6191] +++ exited with 0 +++ [pid 6189] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6189, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=45 /* 0.45 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./114/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./114/bus") = 0 [pid 5014] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./114/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./114") = 0 [pid 5014] mkdir("./115", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6201 ./strace-static-x86_64: Process 6201 attached [pid 6201] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6201] chdir("./115") = 0 [pid 6201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6201] setpgid(0, 0) = 0 [pid 6201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6201] write(3, "1000", 4) = 4 [pid 6201] close(3) = 0 [pid 6201] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6201] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6201] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6201] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6202], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6202 [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... write resumed>) = 16777216 [pid 6201] <... futex resumed>) = 0 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6194] munmap(0x7fe96bb4a000, 16777216./strace-static-x86_64: Process 6202 attached [pid 6202] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6198] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6202] memfd_create("syzkaller", 0) = 3 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6194] <... munmap resumed>) = 0 [pid 6194] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6194] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6194] close(3) = 0 [pid 6194] mkdir("./bus", 0777) = 0 [pid 6194] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 276.322382][ T6194] loop1: detected capacity change from 0 to 32768 [ 276.353754][ T6194] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6194) [pid 6194] ioctl(4, LOOP_CLR_FD [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6200] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6194] <... ioctl resumed>) = 0 [pid 6194] close(4) = 0 [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] creat("./bus", 000 [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] open("./bus", O_RDONLY [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... open resumed>) = 3 [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] <... futex resumed>) = 0 [pid 6194] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6193] <... futex resumed>) = 0 [pid 6194] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6193] <... futex resumed>) = 0 [pid 6194] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6194] <... futex resumed>) = 0 [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] fallocate(-1, 0, 0, 1048820 [pid 6193] <... futex resumed>) = 0 [pid 6194] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6194] <... futex resumed>) = 0 [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6193] <... futex resumed>) = 0 [pid 6194] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6194] <... futex resumed>) = 0 [pid 6193] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6194] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6193] <... futex resumed>) = 0 [pid 6194] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6193] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6194] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6194] <... futex resumed>) = 0 [pid 6193] exit_group(0) = ? [pid 6194] +++ exited with 0 +++ [pid 6193] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6193, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} --- [pid 5011] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./115/bus") = 0 [pid 5011] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./115/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./115") = 0 [pid 5011] mkdir("./116", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6203 ./strace-static-x86_64: Process 6203 attached [pid 6203] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6203] chdir("./116") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0) = 0 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] <... write resumed>) = 16777216 [pid 6203] write(3, "1000", 4 [pid 6198] munmap(0x7fe96bb4a000, 16777216 [pid 6203] <... write resumed>) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6203] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6197] <... write resumed>) = 16777216 [pid 6203] <... clone resumed>, parent_tid=[6204], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6204 [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] munmap(0x7fe96bb4a000, 16777216 [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6198] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6204 attached [pid 6198] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6204] set_robust_list(0x7fe973f6a9e0, 24 [pid 6198] <... openat resumed>) = 4 [pid 6204] <... set_robust_list resumed>) = 0 [pid 6198] ioctl(4, LOOP_SET_FD, 3 [pid 6204] memfd_create("syzkaller", 0 [pid 6197] <... munmap resumed>) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 6204] <... memfd_create resumed>) = 3 [pid 6204] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6198] <... ioctl resumed>) = 0 [pid 6197] <... ioctl resumed>) = 0 [pid 6204] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6198] close(3 [pid 6197] close(3) = 0 [pid 6197] mkdir("./bus", 0777 [pid 6198] <... close resumed>) = 0 [pid 6197] <... mkdir resumed>) = 0 [pid 6197] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6198] mkdir("./bus", 0777) = 0 [pid 6198] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6197] <... mount resumed>) = -1 EEXIST (File exists) [ 276.990646][ T6198] loop3: detected capacity change from 0 to 32768 [ 276.995486][ T6197] loop5: detected capacity change from 0 to 32768 [ 277.026418][ T6197] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6197) [pid 6197] ioctl(4, LOOP_CLR_FD [pid 6198] <... mount resumed>) = -1 EEXIST (File exists) [pid 6200] <... write resumed>) = 16777216 [pid 6198] ioctl(4, LOOP_CLR_FD [ 277.060452][ T6198] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6198) [pid 6200] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6200] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6200] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6200] close(3) = 0 [pid 6200] mkdir("./bus", 0777) = 0 [ 277.129494][ T6200] loop2: detected capacity change from 0 to 32768 [pid 6200] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 277.178827][ T6200] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6200) [pid 6200] ioctl(4, LOOP_CLR_FD [pid 6202] <... write resumed>) = 16777216 [pid 6202] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6202] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6202] ioctl(4, LOOP_SET_FD, 3 [pid 6204] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6202] <... ioctl resumed>) = 0 [pid 6202] close(3) = 0 [pid 6202] mkdir("./bus", 0777) = 0 [ 277.320991][ T6202] loop4: detected capacity change from 0 to 32768 [pid 6202] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 277.362837][ T6202] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6202) [pid 6202] ioctl(4, LOOP_CLR_FD [pid 6198] <... ioctl resumed>) = 0 [pid 6198] close(4) = 0 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] creat("./bus", 000 [pid 6196] <... futex resumed>) = 0 [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6198] open("./bus", O_RDONLY [pid 6197] <... ioctl resumed>) = 0 [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... open resumed>) = 3 [pid 6197] close(4 [pid 6196] <... futex resumed>) = 0 [pid 6197] <... close resumed>) = 0 [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6197] creat("./bus", 000 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6195] <... futex resumed>) = 0 [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = 0 [pid 6195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] open("./bus", O_RDONLY [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... open resumed>) = 3 [pid 6195] <... futex resumed>) = 0 [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 0 [pid 6195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6197] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6197] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] fallocate(-1, 0, 0, 1048820 [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] fallocate(-1, 0, 0, 1048820 [pid 6197] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6197] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6196] <... futex resumed>) = 0 [pid 6195] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6197] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6196] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6197] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6195] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 1 [pid 6197] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] <... futex resumed>) = 0 [pid 6195] exit_group(0 [pid 6198] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6197] <... futex resumed>) = ? [pid 6196] exit_group(0 [pid 6195] <... exit_group resumed>) = ? [pid 6198] <... futex resumed>) = ? [pid 6197] +++ exited with 0 +++ [pid 6196] <... exit_group resumed>) = ? [pid 6195] +++ exited with 0 +++ [pid 6198] +++ exited with 0 +++ [pid 6196] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6195, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=39 /* 0.39 s */} --- [pid 5015] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... openat resumed>) = 3 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] fstat(3, [pid 5015] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] fstat(3, [pid 5013] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] getdents64(3, [pid 5013] lstat("./114/bus", [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./114/bus", [pid 5013] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... openat resumed>) = 4 [pid 5015] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] fstat(4, [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] getdents64(4, [pid 5015] <... openat resumed>) = 4 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] fstat(4, [pid 5013] getdents64(4, [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] getdents64(4, [pid 5013] close(4 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] <... close resumed>) = 0 [pid 5015] getdents64(4, [pid 5013] rmdir("./114/bus" [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5015] close(4 [pid 5013] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./114/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./114/binderfs") = 0 [pid 5015] <... close resumed>) = 0 [pid 5013] getdents64(3, [pid 5015] rmdir("./114/bus" [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./114") = 0 [pid 5013] mkdir("./115", 0777 [pid 5015] <... rmdir resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5015] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... openat resumed>) = 3 [pid 5015] lstat("./114/binderfs", [pid 5013] ioctl(3, LOOP_CLR_FD [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5015] unlink("./114/binderfs" [pid 5013] close(3) = 0 [pid 5015] <... unlink resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6205 [pid 5015] close(3./strace-static-x86_64: Process 6205 attached ) = 0 [pid 6205] set_robust_list(0x5555561c25e0, 24 [pid 5015] rmdir("./114" [pid 6205] <... set_robust_list resumed>) = 0 [pid 6205] chdir("./115") = 0 [pid 6205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./115", 0777 [pid 6205] <... prctl resumed>) = 0 [pid 6205] setpgid(0, 0) = 0 [pid 6205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5015] <... mkdir resumed>) = 0 [pid 6205] write(3, "1000", 4 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6205] <... write resumed>) = 4 [pid 5015] <... openat resumed>) = 3 [pid 6205] close(3 [pid 5015] ioctl(3, LOOP_CLR_FD [pid 6205] <... close resumed>) = 0 [pid 6205] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6205] <... futex resumed>) = 0 [pid 5015] close(3 [pid 6205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 5015] <... close resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6205] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6205] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6207], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6207 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6206 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6207 attached [pid 6207] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6207] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6206 attached [pid 6207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6206] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6206] chdir("./115") = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6206] setpgid(0, 0) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6200] <... ioctl resumed>) = 0 [pid 6206] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] close(4 [pid 6206] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6200] <... close resumed>) = 0 [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6206] <... clone resumed>, parent_tid=[6208], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6208 [pid 6200] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6199] <... futex resumed>) = 0 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6200] creat("./bus", 000 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6200] <... futex resumed>) = 0 [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6208 attached [pid 6200] open("./bus", O_RDONLY [pid 6199] <... futex resumed>) = 0 [pid 6208] set_robust_list(0x7fe973f6a9e0, 24 [pid 6200] <... open resumed>) = 3 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... set_robust_list resumed>) = 0 [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6208] memfd_create("syzkaller", 0 [pid 6200] <... futex resumed>) = 0 [pid 6208] <... memfd_create resumed>) = 3 [pid 6200] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6200] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6208] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = 0 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6199] <... futex resumed>) = 1 [pid 6200] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6199] <... futex resumed>) = 1 [pid 6200] fallocate(-1, 0, 0, 1048820 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6200] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] <... futex resumed>) = 0 [pid 6200] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6199] <... futex resumed>) = 1 [pid 6200] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6200] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] exit_group(0) = ? [pid 6200] <... futex resumed>) = ? [pid 6200] +++ exited with 0 +++ [pid 6199] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=45 /* 0.45 s */} --- [pid 5012] umount2("./113", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./113", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./113/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./113/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./113/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./113/bus") = 0 [pid 5012] umount2("./113/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./113/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./113/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./113") = 0 [pid 5012] mkdir("./114", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6209 [pid 6202] <... ioctl resumed>) = 0 ./strace-static-x86_64: Process 6209 attached [pid 6202] close(4) = 0 [pid 6209] set_robust_list(0x5555561c25e0, 24 [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6202] creat("./bus", 000 [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... set_robust_list resumed>) = 0 [pid 6202] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6201] <... futex resumed>) = 0 [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6202] open("./bus", O_RDONLY [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... open resumed>) = 3 [pid 6209] chdir("./114" [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6209] <... chdir resumed>) = 0 [pid 6201] <... futex resumed>) = 0 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6209] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... prctl resumed>) = 0 [pid 6202] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] setpgid(0, 0 [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6209] <... setpgid resumed>) = 0 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6202] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6202] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... openat resumed>) = 3 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6209] write(3, "1000", 4) = 4 [pid 6202] fallocate(-1, 0, 0, 1048820 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] close(3 [pid 6202] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] <... close resumed>) = 0 [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] symlink("/dev/binderfs", "./binderfs" [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... symlink resumed>) = 0 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... futex resumed>) = 0 [pid 6202] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6209] <... mmap resumed>) = 0x7fe973f4a000 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] <... futex resumed>) = 0 [pid 6209] <... mprotect resumed>) = 0 [pid 6202] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6201] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6202] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6201] <... futex resumed>) = 0 [pid 6202] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] exit_group(0 [pid 6202] <... futex resumed>) = ? [pid 6201] <... exit_group resumed>) = ? [pid 6202] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6201, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=46 /* 0.46 s */} --- [pid 6209] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5014] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... clone resumed>, parent_tid=[6210], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6210 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5014] <... openat resumed>) = 3 [pid 6209] <... futex resumed>) = 0 [pid 5014] fstat(3, [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6210 attached [pid 6210] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5014] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] memfd_create("syzkaller", 0) = 3 [pid 5014] <... openat resumed>) = 4 [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./115/bus") = 0 [pid 5014] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./115/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./115") = 0 [pid 5014] mkdir("./116", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6211 attached , child_tidptr=0x5555561c25d0) = 6211 [pid 6211] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6211] chdir("./116") = 0 [pid 6211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6211] setpgid(0, 0) = 0 [pid 6211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6211] write(3, "1000", 4) = 4 [pid 6211] close(3) = 0 [pid 6211] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6211] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6211] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6211] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6212], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6212 ./strace-static-x86_64: Process 6212 attached [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... write resumed>) = 16777216 [pid 6212] set_robust_list(0x7fe973f6a9e0, 24 [pid 6211] <... futex resumed>) = 0 [pid 6212] <... set_robust_list resumed>) = 0 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6212] memfd_create("syzkaller", 0) = 3 [pid 6212] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6204] munmap(0x7fe96bb4a000, 16777216 [pid 6207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6204] <... munmap resumed>) = 0 [pid 6204] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6204] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6204] close(3) = 0 [pid 6204] mkdir("./bus", 0777) = 0 [ 278.056514][ T6204] loop1: detected capacity change from 0 to 32768 [pid 6204] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 6204] ioctl(4, LOOP_CLR_FD [ 278.101453][ T6204] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6204) [pid 6208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6212] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6204] <... ioctl resumed>) = 0 [pid 6204] close(4) = 0 [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] creat("./bus", 000 [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] open("./bus", O_RDONLY [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... open resumed>) = 3 [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... futex resumed>) = 1 [pid 6204] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6204] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6204] fallocate(-1, 0, 0, 1048820 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6204] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6203] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6204] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6203] <... futex resumed>) = 0 [pid 6204] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6203] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6204] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6203] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6204] <... futex resumed>) = 0 [pid 6203] exit_group(0 [pid 6204] ???( [pid 6203] <... exit_group resumed>) = ? [pid 6204] <... ??? resumed>) = ? [pid 6204] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} --- [pid 5011] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5011] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, [pid 6207] <... write resumed>) = 16777216 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6207] munmap(0x7fe96bb4a000, 16777216 [pid 5011] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./116/bus") = 0 [pid 5011] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./116/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./116") = 0 [pid 6207] <... munmap resumed>) = 0 [pid 5011] mkdir("./117", 0777) = 0 [pid 6207] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6213 [pid 6207] <... openat resumed>) = 4 [pid 6207] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6207] close(3) = 0 [pid 6207] mkdir("./bus", 0777./strace-static-x86_64: Process 6213 attached ) = 0 [pid 6213] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6207] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6213] chdir("./117") = 0 [pid 6213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6213] setpgid(0, 0) = 0 [pid 6213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6213] write(3, "1000", 4) = 4 [pid 6213] close(3) = 0 [pid 6213] symlink("/dev/binderfs", "./binderfs" [pid 6207] <... mount resumed>) = -1 EEXIST (File exists) [pid 6213] <... symlink resumed>) = 0 [pid 6207] ioctl(4, LOOP_CLR_FD [pid 6213] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6213] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6213] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6213] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6214], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6214 ./strace-static-x86_64: Process 6214 attached [ 278.637618][ T6207] loop3: detected capacity change from 0 to 32768 [ 278.667895][ T6207] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6207) [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] set_robust_list(0x7fe973f6a9e0, 24 [pid 6213] <... futex resumed>) = 0 [pid 6214] <... set_robust_list resumed>) = 0 [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6214] memfd_create("syzkaller", 0) = 3 [pid 6214] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6208] <... write resumed>) = 16777216 [pid 6208] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6208] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6208] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6208] close(3) = 0 [pid 6208] mkdir("./bus", 0777) = 0 [ 278.798941][ T6208] loop5: detected capacity change from 0 to 32768 [ 278.838510][ T6208] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6208) [pid 6208] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [pid 6208] ioctl(4, LOOP_CLR_FD [pid 6212] <... write resumed>) = 16777216 [pid 6212] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6212] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6212] ioctl(4, LOOP_SET_FD, 3 [pid 6210] <... write resumed>) = 16777216 [pid 6210] munmap(0x7fe96bb4a000, 16777216 [pid 6212] <... ioctl resumed>) = 0 [pid 6212] close(3) = 0 [pid 6212] mkdir("./bus", 0777) = 0 [pid 6212] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6210] <... munmap resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 278.941347][ T6212] loop4: detected capacity change from 0 to 32768 [ 278.978672][ T6212] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6212) [pid 6210] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6212] <... mount resumed>) = -1 EEXIST (File exists) [pid 6212] ioctl(4, LOOP_CLR_FD [pid 6210] close(3) = 0 [pid 6210] mkdir("./bus", 0777) = 0 [pid 6210] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6207] <... ioctl resumed>) = 0 [pid 6207] close(4) = 0 [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6207] creat("./bus", 000 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6207] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6207] open("./bus", O_RDONLY) = 3 [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6207] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 278.997838][ T6210] loop2: detected capacity change from 0 to 32768 [ 279.027259][ T6210] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6210) [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6207] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6210] <... mount resumed>) = -1 EEXIST (File exists) [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] ioctl(4, LOOP_CLR_FD [pid 6207] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = 0 [pid 6207] <... futex resumed>) = 1 [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6207] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] <... futex resumed>) = 0 [pid 6207] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6205] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6207] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6207] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6205] <... futex resumed>) = 0 [pid 6207] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] exit_group(0 [pid 6207] <... futex resumed>) = ? [pid 6205] <... exit_group resumed>) = ? [pid 6207] +++ exited with 0 +++ [pid 6205] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6205, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=41 /* 0.41 s */} --- [pid 5013] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./115/bus") = 0 [pid 5013] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./115/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./115") = 0 [pid 5013] mkdir("./116", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6215 ./strace-static-x86_64: Process 6215 attached [pid 6215] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6215] chdir("./116") = 0 [pid 6215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6215] setpgid(0, 0) = 0 [pid 6215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6215] write(3, "1000", 4) = 4 [pid 6215] close(3) = 0 [pid 6215] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6215] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6215] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6216], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6216 [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6216 attached [pid 6216] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6216] memfd_create("syzkaller", 0) = 3 [pid 6216] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6208] <... ioctl resumed>) = 0 [pid 6208] close(4) = 0 [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6208] creat("./bus", 000 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... futex resumed>) = 0 [pid 6208] open("./bus", O_RDONLY) = 3 [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] <... futex resumed>) = 0 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6206] <... futex resumed>) = 0 [pid 6208] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6208] <... futex resumed>) = 0 [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6206] <... futex resumed>) = 0 [pid 6208] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... futex resumed>) = 0 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6208] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 1 [pid 6208] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6208] <... futex resumed>) = 0 [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6208] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6206] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6208] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6208] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6206] <... futex resumed>) = 0 [pid 6208] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] exit_group(0 [pid 6208] <... futex resumed>) = ? [pid 6206] <... exit_group resumed>) = ? [pid 6208] +++ exited with 0 +++ [pid 6206] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=42 /* 0.42 s */} --- [pid 5015] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./115/bus") = 0 [pid 5015] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./115/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./115/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./115") = 0 [pid 5015] mkdir("./116", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6217 ./strace-static-x86_64: Process 6217 attached [pid 6217] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6217] chdir("./116") = 0 [pid 6217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6217] setpgid(0, 0) = 0 [pid 6217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6217] write(3, "1000", 4) = 4 [pid 6217] close(3) = 0 [pid 6217] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6217] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6217] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6217] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6218], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6218 [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6218 attached [pid 6218] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6218] memfd_create("syzkaller", 0) = 3 [pid 6218] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6210] <... ioctl resumed>) = 0 [pid 6210] close(4) = 0 [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... futex resumed>) = 0 [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6210] creat("./bus", 000 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6210] open("./bus", O_RDONLY) = 3 [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = 0 [pid 6210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] <... futex resumed>) = 0 [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6209] <... futex resumed>) = 0 [pid 6210] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] <... futex resumed>) = 0 [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] fallocate(-1, 0, 0, 1048820 [pid 6209] <... futex resumed>) = 0 [pid 6210] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... ioctl resumed>) = 0 [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] close(4 [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6212] <... close resumed>) = 0 [pid 6210] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 0 [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6212] creat("./bus", 000 [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6211] <... futex resumed>) = 0 [pid 6210] <... futex resumed>) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6210] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6209] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6210] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6212] <... futex resumed>) = 0 [pid 6211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] exit_group(0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6212] open("./bus", O_RDONLY [pid 6211] <... futex resumed>) = 0 [pid 6212] <... open resumed>) = 3 [pid 6210] <... futex resumed>) = ? [pid 6209] <... exit_group resumed>) = ? [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] +++ exited with 0 +++ [pid 6209] +++ exited with 0 +++ [pid 6212] <... futex resumed>) = 0 [pid 6211] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6209, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=45 /* 0.45 s */} --- [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 6212] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6212] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5012] umount2("./114", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./114", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 6212] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./114/bus", [pid 6212] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] umount2("./114/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./114/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5012] <... openat resumed>) = 4 [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] fstat(4, [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6212] fallocate(-1, 0, 0, 1048820 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] getdents64(4, [pid 6212] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5012] close(4 [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... close resumed>) = 0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 5012] rmdir("./114/bus" [pid 6212] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] <... rmdir resumed>) = 0 [pid 6212] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5012] umount2("./114/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5012] lstat("./114/binderfs", [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./114/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6212] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6211] <... futex resumed>) = 0 [pid 5012] close(3) = 0 [pid 6212] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6211] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] rmdir("./114" [pid 6212] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 6212] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] mkdir("./115", 0777 [pid 6212] <... futex resumed>) = 1 [pid 6211] <... futex resumed>) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 6212] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6211] exit_group(0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6212] <... futex resumed>) = ? [pid 6211] <... exit_group resumed>) = ? [pid 5012] <... openat resumed>) = 3 [pid 6212] +++ exited with 0 +++ [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6211] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6211, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=33 /* 0.33 s */} --- [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6219 [pid 5014] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, ./strace-static-x86_64: Process 6219 attached 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6219] set_robust_list(0x5555561c25e0, 24 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6219] <... set_robust_list resumed>) = 0 [pid 5014] getdents64(4, [pid 6219] chdir("./115" [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./116/bus" [pid 6219] <... chdir resumed>) = 0 [pid 5014] <... rmdir resumed>) = 0 [pid 5014] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./116/binderfs", [pid 6219] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6219] <... prctl resumed>) = 0 [pid 5014] unlink("./116/binderfs" [pid 6219] setpgid(0, 0 [pid 6216] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5014] <... unlink resumed>) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 6219] <... setpgid resumed>) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./116") = 0 [pid 5014] mkdir("./117", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3 [pid 6219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5014] <... close resumed>) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6219] <... openat resumed>) = 3 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6220 [pid 6219] write(3, "1000", 4./strace-static-x86_64: Process 6220 attached ) = 4 [pid 6219] close(3) = 0 [pid 6219] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6219] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] set_robust_list(0x5555561c25e0, 24 [pid 6219] <... futex resumed>) = 0 [pid 6220] <... set_robust_list resumed>) = 0 [pid 6219] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6220] chdir("./117" [pid 6219] <... mmap resumed>) = 0x7fe973f4a000 [pid 6220] <... chdir resumed>) = 0 [pid 6220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6220] setpgid(0, 0) = 0 [pid 6220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6220] write(3, "1000", 4) = 4 [pid 6220] close(3) = 0 [pid 6220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6220] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6219] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6219] <... mprotect resumed>) = 0 [pid 6220] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6219] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6220] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6222], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6222 [pid 6219] <... clone resumed>, parent_tid=[6221], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6221 ./strace-static-x86_64: Process 6221 attached [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 0 [pid 6221] set_robust_list(0x7fe973f6a9e0, 24 [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6221] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6222 attached [pid 6222] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6222] memfd_create("syzkaller", 0 [pid 6221] memfd_create("syzkaller", 0 [pid 6222] <... memfd_create resumed>) = 3 [pid 6222] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6221] <... memfd_create resumed>) = 3 [pid 6221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6214] <... write resumed>) = 16777216 [pid 6214] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6214] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6214] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6214] close(3) = 0 [pid 6214] mkdir("./bus", 0777) = 0 [pid 6214] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 279.794179][ T6214] loop1: detected capacity change from 0 to 32768 [ 279.818522][ T6214] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6214) [pid 6214] ioctl(4, LOOP_CLR_FD [pid 6218] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6222] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6216] <... write resumed>) = 16777216 [pid 6216] munmap(0x7fe96bb4a000, 16777216 [pid 6214] <... ioctl resumed>) = 0 [pid 6214] close(4) = 0 [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = 0 [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6213] <... futex resumed>) = 1 [pid 6216] <... munmap resumed>) = 0 [pid 6214] creat("./bus", 000 [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6216] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6216] <... openat resumed>) = 4 [pid 6216] ioctl(4, LOOP_SET_FD, 3 [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = 0 [pid 6213] <... futex resumed>) = 1 [pid 6214] open("./bus", O_RDONLY [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... open resumed>) = 3 [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6214] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6216] <... ioctl resumed>) = 0 [pid 6214] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6216] close(3 [pid 6214] fallocate(-1, 0, 0, 1048820 [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... close resumed>) = 0 [pid 6214] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6216] mkdir("./bus", 0777 [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6214] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... mkdir resumed>) = 0 [pid 6214] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6216] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6213] <... futex resumed>) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6214] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] <... futex resumed>) = 0 [pid 6214] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6213] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6214] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6214] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6214] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6213] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6213] exit_group(0 [pid 6214] <... futex resumed>) = ? [pid 6213] <... exit_group resumed>) = ? [pid 6214] +++ exited with 0 +++ [pid 6213] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6213, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=42 /* 0.42 s */} --- [pid 5011] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6216] <... mount resumed>) = -1 EEXIST (File exists) [pid 6216] ioctl(4, LOOP_CLR_FD [pid 5011] <... openat resumed>) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 280.272454][ T6216] loop3: detected capacity change from 0 to 32768 [ 280.303193][ T6216] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6216) [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./117/bus") = 0 [pid 5011] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./117/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./117") = 0 [pid 5011] mkdir("./118", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6223 attached [pid 6218] <... write resumed>) = 16777216 [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6223 [pid 6218] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6223] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6223] chdir("./118") = 0 [pid 6223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6223] setpgid(0, 0) = 0 [pid 6223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6223] write(3, "1000", 4) = 4 [pid 6223] close(3) = 0 [pid 6223] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6218] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6223] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6218] <... openat resumed>) = 4 [pid 6223] <... mprotect resumed>) = 0 [pid 6218] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6223] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6224], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6224 [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6218] close(3) = 0 [pid 6218] mkdir("./bus", 0777./strace-static-x86_64: Process 6224 attached [pid 6224] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6224] memfd_create("syzkaller", 0 [pid 6218] <... mkdir resumed>) = 0 [pid 6218] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6224] <... memfd_create resumed>) = 3 [pid 6224] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6218] <... mount resumed>) = -1 EEXIST (File exists) [ 280.468188][ T6218] loop5: detected capacity change from 0 to 32768 [ 280.493005][ T6218] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6218) [pid 6218] ioctl(4, LOOP_CLR_FD [pid 6216] <... ioctl resumed>) = 0 [pid 6216] close(4) = 0 [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] open("./bus", O_RDONLY [pid 6215] <... futex resumed>) = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... open resumed>) = 3 [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6216] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 6216] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6215] <... futex resumed>) = 0 [pid 6216] fallocate(-1, 0, 0, 1048820 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6216] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6215] <... futex resumed>) = 0 [pid 6216] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6216] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6215] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6216] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6215] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6216] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6216] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6215] <... futex resumed>) = 0 [pid 6215] exit_group(0) = ? [pid 6216] +++ exited with 0 +++ [pid 6215] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6215, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=39 /* 0.39 s */} --- [pid 5013] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6222] <... write resumed>) = 16777216 [pid 5013] getdents64(4, [pid 6222] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./116/bus") = 0 [pid 5013] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./116/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./116") = 0 [pid 5013] mkdir("./117", 0777 [pid 6222] <... munmap resumed>) = 0 [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6221] <... write resumed>) = 16777216 [pid 5013] <... openat resumed>) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6221] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 6222] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... close resumed>) = 0 [pid 6222] <... openat resumed>) = 4 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6222] ioctl(4, LOOP_SET_FD, 3 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6225 ./strace-static-x86_64: Process 6225 attached [pid 6225] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6225] chdir("./117") = 0 [pid 6221] <... munmap resumed>) = 0 [pid 6225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6225] setpgid(0, 0) = 0 [pid 6225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6225] write(3, "1000", 4) = 4 [pid 6225] close(3) = 0 [pid 6225] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6225] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6225] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6226], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6226 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6222] <... ioctl resumed>) = 0 [pid 6222] close(3) = 0 [pid 6222] mkdir("./bus", 0777) = 0 [pid 6222] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6221] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 ./strace-static-x86_64: Process 6226 attached [ 280.752825][ T6222] loop4: detected capacity change from 0 to 32768 [ 280.786287][ T6222] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6222) [pid 6221] ioctl(4, LOOP_SET_FD, 3 [pid 6226] set_robust_list(0x7fe973f6a9e0, 24 [pid 6221] <... ioctl resumed>) = 0 [pid 6221] close(3) = 0 [pid 6221] mkdir("./bus", 0777 [pid 6226] <... set_robust_list resumed>) = 0 [pid 6221] <... mkdir resumed>) = 0 [pid 6221] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6226] memfd_create("syzkaller", 0 [pid 6222] <... mount resumed>) = -1 EEXIST (File exists) [pid 6226] <... memfd_create resumed>) = 3 [pid 6226] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6222] ioctl(4, LOOP_CLR_FD [pid 6221] <... mount resumed>) = -1 EEXIST (File exists) [ 280.798116][ T6221] loop2: detected capacity change from 0 to 32768 [ 280.809196][ T6221] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6221) [pid 6221] ioctl(4, LOOP_CLR_FD [pid 6218] <... ioctl resumed>) = 0 [pid 6218] close(4) = 0 [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] creat("./bus", 000 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] open("./bus", O_RDONLY [pid 6217] <... futex resumed>) = 0 [pid 6218] <... open resumed>) = 3 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = 0 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6218] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] <... futex resumed>) = 0 [pid 6218] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6218] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] <... futex resumed>) = 0 [pid 6218] fallocate(-1, 0, 0, 1048820 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6218] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6217] <... futex resumed>) = 0 [pid 6218] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6217] <... futex resumed>) = 0 [pid 6217] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6218] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6217] <... futex resumed>) = 0 [pid 6218] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6217] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6218] <... futex resumed>) = 0 [pid 6217] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6218] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6217] exit_group(0 [pid 6218] <... futex resumed>) = ? [pid 6217] <... exit_group resumed>) = ? [pid 6218] +++ exited with 0 +++ [pid 6217] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6217, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=38 /* 0.38 s */} --- [pid 5015] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4 [pid 6224] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... close resumed>) = 0 [pid 5015] rmdir("./116/bus") = 0 [pid 5015] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./116/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./116") = 0 [pid 5015] mkdir("./117", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6227 ./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6227] chdir("./117") = 0 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6227] setpgid(0, 0) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6227] write(3, "1000", 4) = 4 [pid 6227] close(3) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6227] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6227] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6228], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6228 [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6228 attached [pid 6228] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6228] memfd_create("syzkaller", 0) = 3 [pid 6228] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6226] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6221] <... ioctl resumed>) = 0 [pid 6221] close(4) = 0 [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... futex resumed>) = 0 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] <... ioctl resumed>) = 0 [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6222] close(4 [pid 6221] <... futex resumed>) = 0 [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] <... futex resumed>) = 0 [pid 6221] open("./bus", O_RDONLY) = 3 [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] <... close resumed>) = 0 [pid 6221] <... futex resumed>) = 0 [pid 6221] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 0 [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] creat("./bus", 000 [pid 6221] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 1 [pid 6222] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6221] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6222] <... futex resumed>) = 1 [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] <... futex resumed>) = 0 [pid 6222] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... futex resumed>) = 1 [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 0 [pid 6222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] <... futex resumed>) = 0 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] open("./bus", O_RDONLY [pid 6221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] <... futex resumed>) = 0 [pid 6222] <... open resumed>) = 3 [pid 6221] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6222] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6221] <... futex resumed>) = 0 [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = 1 [pid 6222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6221] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6220] <... futex resumed>) = 0 [pid 6222] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6221] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... futex resumed>) = 0 [pid 6219] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6219] <... futex resumed>) = 0 [pid 6222] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6219] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6220] <... futex resumed>) = 0 [pid 6222] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6221] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6222] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 6221] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] fallocate(-1, 0, 0, 1048820 [pid 6221] <... futex resumed>) = 1 [pid 6219] <... futex resumed>) = 0 [pid 6220] <... futex resumed>) = 0 [pid 6222] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6221] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6219] exit_group(0 [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6221] <... futex resumed>) = ? [pid 6219] <... exit_group resumed>) = ? [pid 6222] <... futex resumed>) = 0 [pid 6221] +++ exited with 0 +++ [pid 6220] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6219] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6219, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=47 /* 0.47 s */} --- [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6220] <... futex resumed>) = 0 [pid 6222] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6220] <... futex resumed>) = 0 [pid 5012] umount2("./115", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6222] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6222] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6220] <... futex resumed>) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6222] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6220] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5012] openat(AT_FDCWD, "./115", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6222] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6222] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] <... openat resumed>) = 3 [pid 6222] <... futex resumed>) = 1 [pid 6220] <... futex resumed>) = 0 [pid 5012] fstat(3, [pid 6222] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6220] exit_group(0 [pid 6222] <... futex resumed>) = ? [pid 6220] <... exit_group resumed>) = ? [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6222] +++ exited with 0 +++ [pid 5012] getdents64(3, [pid 6220] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6220, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=46 /* 0.46 s */} --- [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] restart_syscall(<... resuming interrupted clone ...> [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... restart_syscall resumed>) = 0 [pid 5012] lstat("./115/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./115/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./115/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... openat resumed>) = 4 [pid 5014] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(4, [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, [pid 5012] getdents64(4, [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5012] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] lstat("./117/bus", [pid 5012] close(4 [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] <... close resumed>) = 0 [pid 5014] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5012] rmdir("./115/bus" [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] umount2("./115/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] close(4) = 0 [pid 5014] rmdir("./117/bus") = 0 [pid 5014] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5012] lstat("./115/binderfs", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./117/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./117") = 0 [pid 5014] mkdir("./118", 0777 [pid 5012] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] <... mkdir resumed>) = 0 [pid 5012] unlink("./115/binderfs" [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD [pid 5012] <... unlink resumed>) = 0 [pid 5014] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5012] getdents64(3, [pid 5014] close(3) = 0 [pid 5012] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5012] close(3 [pid 5014] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6229 ./strace-static-x86_64: Process 6229 attached [pid 5012] <... close resumed>) = 0 [pid 5012] rmdir("./115" [pid 6229] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6229] chdir("./118" [pid 5012] <... rmdir resumed>) = 0 [pid 6229] <... chdir resumed>) = 0 [pid 5012] mkdir("./116", 0777 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5012] <... mkdir resumed>) = 0 [pid 6229] setpgid(0, 0) = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6229] <... openat resumed>) = 3 [pid 5012] <... openat resumed>) = 3 [pid 6229] write(3, "1000", 4 [pid 5012] ioctl(3, LOOP_CLR_FD [pid 6229] <... write resumed>) = 4 [pid 6229] close(3) = 0 [pid 6229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6229] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6229] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 5012] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6229] <... mprotect resumed>) = 0 [pid 6229] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5012] close(3 [pid 6229] <... clone resumed>, parent_tid=[6230], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6230 [pid 5012] <... close resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5012] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6231 ./strace-static-x86_64: Process 6230 attached [pid 6230] set_robust_list(0x7fe973f6a9e0, 24./strace-static-x86_64: Process 6231 attached ) = 0 [pid 6231] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6230] memfd_create("syzkaller", 0 [pid 6231] chdir("./116") = 0 [pid 6231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6231] setpgid(0, 0) = 0 [pid 6231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6230] <... memfd_create resumed>) = 3 [pid 6231] write(3, "1000", 4) = 4 [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6231] close(3) = 0 [pid 6231] symlink("/dev/binderfs", "./binderfs" [pid 6230] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6231] <... symlink resumed>) = 0 [pid 6231] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6231] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6231] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6232], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6232 [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6232 attached [pid 6232] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6232] memfd_create("syzkaller", 0) = 3 [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6228] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6224] <... write resumed>) = 16777216 [pid 6224] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6224] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6224] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6224] close(3) = 0 [pid 6224] mkdir("./bus", 0777) = 0 [pid 6224] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 281.639726][ T6224] loop1: detected capacity change from 0 to 32768 [ 281.671014][ T6224] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6224) [pid 6224] ioctl(4, LOOP_CLR_FD [pid 6226] <... write resumed>) = 16777216 [pid 6226] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6226] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6226] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6226] close(3) = 0 [pid 6226] mkdir("./bus", 0777) = 0 [pid 6226] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 281.750411][ T6226] loop3: detected capacity change from 0 to 32768 [ 281.788287][ T6226] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6226) [pid 6226] ioctl(4, LOOP_CLR_FD [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6224] <... ioctl resumed>) = 0 [pid 6224] close(4) = 0 [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] creat("./bus", 000 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6223] <... futex resumed>) = 0 [pid 6224] open("./bus", O_RDONLY [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] <... open resumed>) = 3 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6223] <... futex resumed>) = 0 [pid 6224] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... futex resumed>) = 0 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6224] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6223] <... futex resumed>) = 0 [pid 6224] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6223] <... futex resumed>) = 0 [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] fallocate(-1, 0, 0, 1048820 [pid 6223] <... futex resumed>) = 0 [pid 6224] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6224] <... futex resumed>) = 0 [pid 6224] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6224] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... write resumed>) = 16777216 [pid 6224] <... futex resumed>) = 0 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6223] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6224] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6223] <... futex resumed>) = 0 [pid 6224] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6223] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] munmap(0x7fe96bb4a000, 16777216 [pid 6224] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] <... munmap resumed>) = 0 [pid 6224] <... futex resumed>) = 0 [pid 6224] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6223] exit_group(0 [pid 6224] <... futex resumed>) = ? [pid 6223] <... exit_group resumed>) = ? [pid 6224] +++ exited with 0 +++ [pid 6223] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6223, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=42 /* 0.42 s */} --- [pid 5011] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6228] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5011] <... openat resumed>) = 4 [pid 6228] <... openat resumed>) = 4 [pid 5011] fstat(4, [pid 6228] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./118/bus") = 0 [pid 5011] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./118/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 6228] <... ioctl resumed>) = 0 [pid 5011] rmdir("./118" [pid 6228] close(3) = 0 [pid 6228] mkdir("./bus", 0777) = 0 [pid 5011] <... rmdir resumed>) = 0 [pid 6228] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5011] mkdir("./119", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6233 ./strace-static-x86_64: Process 6233 attached [pid 6233] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6233] chdir("./119") = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6228] <... mount resumed>) = -1 EEXIST (File exists) [pid 6228] ioctl(4, LOOP_CLR_FD [ 282.131426][ T6228] loop5: detected capacity change from 0 to 32768 [ 282.159217][ T6228] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6228) [pid 6233] setpgid(0, 0) = 0 [pid 6226] <... ioctl resumed>) = 0 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6226] close(4 [pid 6233] <... openat resumed>) = 3 [pid 6233] write(3, "1000", 4 [pid 6226] <... close resumed>) = 0 [pid 6233] <... write resumed>) = 4 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] close(3 [pid 6226] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] <... close resumed>) = 0 [pid 6226] creat("./bus", 000 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6226] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6233] <... symlink resumed>) = 0 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6226] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6226] open("./bus", O_RDONLY [pid 6233] <... mmap resumed>) = 0x7fe973f4a000 [pid 6226] <... open resumed>) = 3 [pid 6233] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6233] <... mprotect resumed>) = 0 [pid 6226] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6233] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6226] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6233] <... clone resumed>, parent_tid=[6234], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6234 [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = 0 [pid 6226] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6234 attached [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6226] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] set_robust_list(0x7fe973f6a9e0, 24 [pid 6226] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6234] <... set_robust_list resumed>) = 0 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] memfd_create("syzkaller", 0 [pid 6226] <... futex resumed>) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6226] fallocate(-1, 0, 0, 1048820 [pid 6225] <... futex resumed>) = 0 [pid 6234] <... memfd_create resumed>) = 3 [pid 6226] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6234] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6226] <... futex resumed>) = 0 [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6226] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6225] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6225] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6226] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6226] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6225] <... futex resumed>) = 0 [pid 6226] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6225] exit_group(0) = ? [pid 6226] <... futex resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6225] +++ exited with 0 +++ [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6225, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5013] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./117/bus") = 0 [pid 5013] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6230] <... write resumed>) = 16777216 [pid 5013] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./117/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./117") = 0 [pid 5013] mkdir("./118", 0777) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 6230] munmap(0x7fe96bb4a000, 16777216 [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6235 ./strace-static-x86_64: Process 6235 attached [pid 6230] <... munmap resumed>) = 0 [pid 6235] set_robust_list(0x5555561c25e0, 24 [pid 6230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6235] <... set_robust_list resumed>) = 0 [pid 6230] <... openat resumed>) = 4 [pid 6235] chdir("./118" [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 6235] <... chdir resumed>) = 0 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6235] setpgid(0, 0) = 0 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6230] <... ioctl resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 6235] write(3, "1000", 4 [pid 6230] close(3 [pid 6235] <... write resumed>) = 4 [pid 6235] close(3 [pid 6230] <... close resumed>) = 0 [pid 6235] <... close resumed>) = 0 [pid 6230] mkdir("./bus", 0777 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6230] <... mkdir resumed>) = 0 [pid 6235] <... symlink resumed>) = 0 [pid 6230] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6235] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6235] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6235] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6236], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6236 [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6230] <... mount resumed>) = -1 EEXIST (File exists) ./strace-static-x86_64: Process 6236 attached [pid 6236] set_robust_list(0x7fe973f6a9e0, 24 [pid 6230] ioctl(4, LOOP_CLR_FD [pid 6236] <... set_robust_list resumed>) = 0 [ 282.423188][ T6230] loop4: detected capacity change from 0 to 32768 [ 282.460270][ T6230] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6230) [pid 6236] memfd_create("syzkaller", 0) = 3 [pid 6236] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6232] <... write resumed>) = 16777216 [pid 6234] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6232] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6232] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 6228] <... ioctl resumed>) = 0 [pid 6228] close(4) = 0 [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6228] open("./bus", O_RDONLY [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] <... ioctl resumed>) = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] close(3) = 0 [pid 6232] mkdir("./bus", 0777 [pid 6228] <... open resumed>) = 3 [pid 6232] <... mkdir resumed>) = 0 [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [ 282.589670][ T6232] loop2: detected capacity change from 0 to 32768 [pid 6232] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6228] <... futex resumed>) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6228] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6228] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6228] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6228] fallocate(-1, 0, 0, 1048820 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6228] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6228] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6227] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6227] <... futex resumed>) = 0 [pid 6228] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6227] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6228] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] <... futex resumed>) = 0 [pid 6228] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] exit_group(0 [pid 6228] <... futex resumed>) = ? [pid 6227] <... exit_group resumed>) = ? [pid 6228] +++ exited with 0 +++ [pid 6232] <... mount resumed>) = -1 EEXIST (File exists) [pid 6232] ioctl(4, LOOP_CLR_FD [pid 6227] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=45 /* 0.45 s */} --- [pid 5015] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./117/bus") = 0 [pid 5015] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./117/binderfs") = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./117") = 0 [pid 5015] mkdir("./118", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 282.646902][ T6232] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6232) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6237 ./strace-static-x86_64: Process 6237 attached [pid 6237] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6237] chdir("./118") = 0 [pid 6237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6237] setpgid(0, 0) = 0 [pid 6237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6237] write(3, "1000", 4) = 4 [pid 6237] close(3) = 0 [pid 6237] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6237] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6237] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6237] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6238], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6238 [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6238 attached [pid 6238] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6238] memfd_create("syzkaller", 0) = 3 [pid 6238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6230] <... ioctl resumed>) = 0 [pid 6230] close(4) = 0 [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6230] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] open("./bus", O_RDONLY [pid 6229] <... futex resumed>) = 0 [pid 6230] <... open resumed>) = 3 [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6229] <... futex resumed>) = 0 [pid 6230] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6229] <... futex resumed>) = 0 [pid 6230] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] fallocate(-1, 0, 0, 1048820 [pid 6229] <... futex resumed>) = 0 [pid 6230] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6229] <... futex resumed>) = 0 [pid 6230] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6229] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6229] <... futex resumed>) = 0 [pid 6230] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6229] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... futex resumed>) = 0 [pid 6230] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] exit_group(0) = ? [pid 6230] <... futex resumed>) = ? [pid 6230] +++ exited with 0 +++ [pid 6229] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=36 /* 0.36 s */} --- [pid 5014] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5014] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./118/bus") = 0 [pid 5014] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./118/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./118") = 0 [pid 5014] mkdir("./119", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6239 ./strace-static-x86_64: Process 6239 attached [pid 6239] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6239] chdir("./119") = 0 [pid 6239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6239] setpgid(0, 0) = 0 [pid 6239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6239] write(3, "1000", 4) = 4 [pid 6236] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6239] close(3) = 0 [pid 6239] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6239] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6239] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6240], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6240 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6240 attached [pid 6240] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6240] memfd_create("syzkaller", 0) = 3 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6232] <... ioctl resumed>) = 0 [pid 6232] close(4) = 0 [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] open("./bus", O_RDONLY [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... write resumed>) = 16777216 [pid 6232] <... open resumed>) = 3 [pid 6234] munmap(0x7fe96bb4a000, 16777216 [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... munmap resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6232] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6234] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6232] fallocate(-1, 0, 0, 1048820 [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6234] <... openat resumed>) = 4 [pid 6232] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6234] ioctl(4, LOOP_SET_FD, 3 [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... ioctl resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296) = -1 EBADF (Bad file descriptor) [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] <... futex resumed>) = 0 [pid 6232] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6231] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6232] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6231] <... futex resumed>) = 0 [pid 6232] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] exit_group(0 [pid 6232] <... futex resumed>) = ? [pid 6231] <... exit_group resumed>) = ? [pid 6232] +++ exited with 0 +++ [pid 6231] +++ exited with 0 +++ [pid 6234] close(3 [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6231, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 6234] <... close resumed>) = 0 [pid 5012] umount2("./116", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6234] mkdir("./bus", 0777 [pid 5012] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6234] <... mkdir resumed>) = 0 [pid 5012] openat(AT_FDCWD, "./116", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6234] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5012] <... openat resumed>) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./116/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./116/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./116/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./116/bus") = 0 [pid 5012] umount2("./116/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./116/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./116/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./116") = 0 [ 283.186264][ T6234] loop1: detected capacity change from 0 to 32768 [ 283.218654][ T6234] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6234) [pid 5012] mkdir("./117", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6241 [pid 6234] <... mount resumed>) = -1 EEXIST (File exists) [pid 6234] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6241 attached [pid 6241] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6241] chdir("./117") = 0 [pid 6241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6241] setpgid(0, 0) = 0 [pid 6241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6241] write(3, "1000", 4) = 4 [pid 6241] close(3) = 0 [pid 6241] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6241] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6241] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6241] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6242], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6242 [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6242] memfd_create("syzkaller", 0) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6236] <... write resumed>) = 16777216 [pid 6236] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6238] <... write resumed>) = 16777216 [pid 6238] munmap(0x7fe96bb4a000, 16777216 [pid 6236] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6238] <... munmap resumed>) = 0 [pid 6236] <... openat resumed>) = 4 [pid 6236] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6236] close(3) = 0 [pid 6236] mkdir("./bus", 0777) = 0 [pid 6234] <... ioctl resumed>) = 0 [pid 6236] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6234] close(4) = 0 [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = 1 [pid 6234] creat("./bus", 000 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6234] open("./bus", O_RDONLY [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... open resumed>) = 3 [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6234] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6234] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6234] <... futex resumed>) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... openat resumed>) = 4 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [ 283.677964][ T6236] loop3: detected capacity change from 0 to 32768 [ 283.691780][ T6236] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6236) [pid 6234] fallocate(-1, 0, 0, 1048820 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] ioctl(4, LOOP_SET_FD, 3 [pid 6234] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] <... futex resumed>) = 0 [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = 1 [pid 6234] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6234] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6234] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6233] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6234] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6234] <... futex resumed>) = 0 [pid 6234] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] exit_group(0 [pid 6234] <... futex resumed>) = ? [pid 6233] <... exit_group resumed>) = ? [pid 6234] +++ exited with 0 +++ [pid 6236] <... mount resumed>) = -1 EEXIST (File exists) [pid 6236] ioctl(4, LOOP_CLR_FD [pid 6233] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=41 /* 0.41 s */} --- [pid 5011] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, [pid 6238] <... ioctl resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6238] close(3 [pid 5011] getdents64(4, [pid 6238] <... close resumed>) = 0 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6238] mkdir("./bus", 0777 [pid 5011] close(4) = 0 [pid 5011] rmdir("./119/bus" [pid 6238] <... mkdir resumed>) = 0 [pid 5011] <... rmdir resumed>) = 0 [ 283.720061][ T6238] loop5: detected capacity change from 0 to 32768 [pid 6238] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5011] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./119/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./119") = 0 [pid 5011] mkdir("./120", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6243 ./strace-static-x86_64: Process 6243 attached [pid 6243] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6243] chdir("./120") = 0 [pid 6243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6243] setpgid(0, 0) = 0 [pid 6243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6243] write(3, "1000", 4) = 4 [pid 6243] close(3) = 0 [pid 6243] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6243] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6243] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6243] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6244], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6244 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6244 attached [pid 6244] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6244] memfd_create("syzkaller", 0) = 3 [pid 6244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6238] <... mount resumed>) = -1 EEXIST (File exists) [pid 6244] <... mmap resumed>) = 0x7fe96bb4a000 [ 283.770801][ T6238] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6238) [pid 6238] ioctl(4, LOOP_CLR_FD [pid 6240] <... write resumed>) = 16777216 [pid 6240] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6240] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6240] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6240] close(3) = 0 [pid 6240] mkdir("./bus", 0777) = 0 [pid 6240] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 283.989556][ T6240] loop4: detected capacity change from 0 to 32768 [ 284.019067][ T6240] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6240) [pid 6240] ioctl(4, LOOP_CLR_FD [pid 6238] <... ioctl resumed>) = 0 [pid 6238] close(4 [pid 6236] <... ioctl resumed>) = 0 [pid 6238] <... close resumed>) = 0 [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6238] creat("./bus", 000 [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6237] <... futex resumed>) = 0 [pid 6236] close(4 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... close resumed>) = 0 [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6236] creat("./bus", 000 [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6235] <... futex resumed>) = 0 [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] <... futex resumed>) = 0 [pid 6236] open("./bus", O_RDONLY) = 3 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] <... futex resumed>) = 0 [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6236] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6235] <... futex resumed>) = 0 [pid 6238] open("./bus", O_RDONLY [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... open resumed>) = 3 [pid 6237] <... futex resumed>) = 0 [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6238] <... futex resumed>) = 0 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = 1 [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6237] <... futex resumed>) = 0 [pid 6236] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6238] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] <... futex resumed>) = 0 [pid 6238] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] fallocate(-1, 0, 0, 1048820 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6237] <... futex resumed>) = 0 [pid 6236] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 0 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] <... futex resumed>) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6238] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6237] <... futex resumed>) = 0 [pid 6236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6235] <... futex resumed>) = 0 [pid 6238] fallocate(-1, 0, 0, 1048820 [pid 6236] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = 0 [pid 6235] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6236] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6235] <... futex resumed>) = 0 [pid 6238] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6235] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6237] <... futex resumed>) = 0 [pid 6236] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6238] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6236] <... futex resumed>) = 0 [pid 6235] exit_group(0 [pid 6238] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6235] <... exit_group resumed>) = ? [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] +++ exited with 0 +++ [pid 6235] +++ exited with 0 +++ [pid 6238] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 0 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=41 /* 0.41 s */} --- [pid 6238] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6237] <... futex resumed>) = 0 [pid 6238] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6237] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6238] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6238] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6237] <... futex resumed>) = 0 [pid 6238] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] exit_group(0 [pid 6238] <... futex resumed>) = ? [pid 6237] <... exit_group resumed>) = ? [pid 6238] +++ exited with 0 +++ [pid 5013] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6237] +++ exited with 0 +++ [pid 5013] getdents64(3, [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6237, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=35 /* 0.35 s */} --- [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, [pid 5015] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] getdents64(4, [pid 5015] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, [pid 5015] <... openat resumed>) = 3 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] fstat(3, [pid 5013] close(4 [pid 5015] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... close resumed>) = 0 [pid 5015] getdents64(3, [pid 5013] rmdir("./118/bus" [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] <... rmdir resumed>) = 0 [pid 5015] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./118/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./118") = 0 [pid 5013] mkdir("./119", 0777 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... mkdir resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] close(3 [pid 6244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] lstat("./118/bus", [pid 5013] <... close resumed>) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5015] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6245 [pid 5015] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6245 attached ) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, [pid 6245] set_robust_list(0x5555561c25e0, 24 [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6245] <... set_robust_list resumed>) = 0 [pid 5015] getdents64(4, [pid 6245] chdir("./119" [pid 5015] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6245] <... chdir resumed>) = 0 [pid 5015] close(4 [pid 6245] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5015] <... close resumed>) = 0 [pid 6245] <... prctl resumed>) = 0 [pid 6245] setpgid(0, 0) = 0 [pid 6245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5015] rmdir("./118/bus" [pid 6245] <... openat resumed>) = 3 [pid 6245] write(3, "1000", 4 [pid 5015] <... rmdir resumed>) = 0 [pid 6245] <... write resumed>) = 4 [pid 6245] close(3) = 0 [pid 6245] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6245] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5015] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6245] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5015] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6245] <... mmap resumed>) = 0x7fe973f4a000 [pid 5015] lstat("./118/binderfs", [pid 6245] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5015] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6245] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5015] unlink("./118/binderfs" [pid 6245] <... clone resumed>, parent_tid=[6246], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6246 [pid 5015] <... unlink resumed>) = 0 [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5015] getdents64(3, [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5015] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./118"./strace-static-x86_64: Process 6246 attached [pid 6246] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 5015] <... rmdir resumed>) = 0 [pid 5015] mkdir("./119", 0777 [pid 6246] memfd_create("syzkaller", 0 [pid 5015] <... mkdir resumed>) = 0 [pid 6246] <... memfd_create resumed>) = 3 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6246] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 5015] <... openat resumed>) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6247 ./strace-static-x86_64: Process 6247 attached [pid 6247] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6242] <... write resumed>) = 16777216 [pid 6247] chdir("./119" [pid 6242] munmap(0x7fe96bb4a000, 16777216 [pid 6247] <... chdir resumed>) = 0 [pid 6247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6247] setpgid(0, 0) = 0 [pid 6247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6247] write(3, "1000", 4) = 4 [pid 6242] <... munmap resumed>) = 0 [pid 6247] close(3) = 0 [pid 6247] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6247] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6247] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6247] <... mprotect resumed>) = 0 [pid 6242] <... openat resumed>) = 4 [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6247] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6248 attached , parent_tid=[6248], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6248 [pid 6248] set_robust_list(0x7fe973f6a9e0, 24 [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6248] <... set_robust_list resumed>) = 0 [pid 6242] <... ioctl resumed>) = 0 [pid 6242] close(3) = 0 [pid 6242] mkdir("./bus", 0777 [pid 6248] memfd_create("syzkaller", 0) = 3 [pid 6248] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6242] <... mkdir resumed>) = 0 [pid 6242] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6240] <... ioctl resumed>) = 0 [pid 6242] <... mount resumed>) = -1 EEXIST (File exists) [pid 6242] ioctl(4, LOOP_CLR_FD [ 284.409631][ T6242] loop2: detected capacity change from 0 to 32768 [ 284.434751][ T6242] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6242) [pid 6240] close(4) = 0 [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6240] creat("./bus", 000 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6240] open("./bus", O_RDONLY [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... open resumed>) = 3 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6239] <... futex resumed>) = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6240] fallocate(-1, 0, 0, 1048820 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6239] <... futex resumed>) = 0 [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... futex resumed>) = 0 [pid 6239] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6240] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6239] <... futex resumed>) = 0 [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6239] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... futex resumed>) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6240] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6239] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 6240] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6240] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6239] <... futex resumed>) = 0 [pid 6240] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6239] exit_group(0) = ? [pid 6240] <... futex resumed>) = ? [pid 6240] +++ exited with 0 +++ [pid 6239] +++ exited with 0 +++ [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6239, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=50 /* 0.50 s */} --- [pid 5014] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5014] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5014] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] close(4) = 0 [pid 5014] rmdir("./119/bus") = 0 [pid 5014] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5014] unlink("./119/binderfs") = 0 [pid 5014] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] close(3) = 0 [pid 5014] rmdir("./119") = 0 [pid 5014] mkdir("./120", 0777) = 0 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6249 ./strace-static-x86_64: Process 6249 attached [pid 6249] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6249] chdir("./120") = 0 [pid 6249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6249] setpgid(0, 0) = 0 [pid 6249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6249] write(3, "1000", 4) = 4 [pid 6249] close(3) = 0 [pid 6249] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6249] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6249] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6249] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6250], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6250 [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6250 attached [pid 6250] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6250] memfd_create("syzkaller", 0) = 3 [pid 6250] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6246] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6248] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6244] <... write resumed>) = 16777216 [pid 6244] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6244] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6244] ioctl(4, LOOP_SET_FD, 3 [pid 6242] <... ioctl resumed>) = 0 [pid 6244] <... ioctl resumed>) = 0 [pid 6242] close(4 [pid 6244] close(3) = 0 [pid 6242] <... close resumed>) = 0 [pid 6244] mkdir("./bus", 0777 [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... mkdir resumed>) = 0 [pid 6242] <... futex resumed>) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6244] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6242] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 284.868093][ T6244] loop1: detected capacity change from 0 to 32768 [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6244] <... mount resumed>) = -1 EEXIST (File exists) [pid 6242] open("./bus", O_RDONLY [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] ioctl(4, LOOP_CLR_FD [pid 6242] <... open resumed>) = 3 [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6242] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6241] <... futex resumed>) = 0 [pid 6242] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6241] <... futex resumed>) = 0 [pid 6242] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] fallocate(-1, 0, 0, 1048820 [pid 6241] <... futex resumed>) = 0 [pid 6242] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 284.912464][ T6244] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6244) [pid 6242] <... futex resumed>) = 0 [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6241] <... futex resumed>) = 0 [pid 6242] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... futex resumed>) = 0 [pid 6241] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6241] <... futex resumed>) = 0 [pid 6242] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6241] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6241] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... futex resumed>) = 0 [pid 6241] exit_group(0) = ? [pid 6242] +++ exited with 0 +++ [pid 6241] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6241, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 5012] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5012] umount2("./117", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./117", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./117/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./117/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./117/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./117/bus") = 0 [pid 5012] umount2("./117/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./117/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./117/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./117") = 0 [pid 5012] mkdir("./118", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6251 ./strace-static-x86_64: Process 6251 attached [pid 6251] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6251] chdir("./118") = 0 [pid 6251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6251] setpgid(0, 0) = 0 [pid 6251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6251] write(3, "1000", 4) = 4 [pid 6251] close(3) = 0 [pid 6251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6251] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6251] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6251] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6252], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6252 [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6252 attached [pid 6250] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6252] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6252] memfd_create("syzkaller", 0) = 3 [pid 6252] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [pid 6244] <... ioctl resumed>) = 0 [pid 6244] close(4) = 0 [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6244] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6243] <... futex resumed>) = 0 [pid 6244] creat("./bus", 000 [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6243] <... futex resumed>) = 0 [pid 6244] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6243] <... futex resumed>) = 0 [pid 6244] open("./bus", O_RDONLY) = 3 [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6243] <... futex resumed>) = 0 [pid 6244] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6243] <... futex resumed>) = 0 [pid 6244] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] fallocate(-1, 0, 0, 1048820 [pid 6243] <... futex resumed>) = 0 [pid 6244] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6243] <... futex resumed>) = 0 [pid 6244] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6244] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6243] <... futex resumed>) = 0 [pid 6244] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6243] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6244] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6244] <... futex resumed>) = 0 [pid 6243] exit_group(0) = ? [pid 6244] +++ exited with 0 +++ [pid 6248] <... write resumed>) = 16777216 [pid 6248] munmap(0x7fe96bb4a000, 16777216 [pid 6243] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6243, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=37 /* 0.37 s */} --- [pid 5011] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, [pid 6248] <... munmap resumed>) = 0 [pid 5011] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, [pid 6248] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 6248] <... openat resumed>) = 4 [pid 5011] getdents64(4, [pid 6248] ioctl(4, LOOP_SET_FD, 3 [pid 5011] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./120/bus") = 0 [pid 5011] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./120/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./120") = 0 [pid 5011] mkdir("./121", 0777) = 0 [pid 6248] <... ioctl resumed>) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6248] close(3 [pid 5011] <... openat resumed>) = 3 [pid 6248] <... close resumed>) = 0 [pid 5011] ioctl(3, LOOP_CLR_FD [pid 6248] mkdir("./bus", 0777 [pid 5011] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5011] close(3 [pid 6248] <... mkdir resumed>) = 0 [pid 5011] <... close resumed>) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6248] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 5011] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6253 [pid 6246] <... write resumed>) = 16777216 ./strace-static-x86_64: Process 6253 attached [pid 6253] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6253] chdir("./121") = 0 [pid 6253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6253] setpgid(0, 0) = 0 [pid 6253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6253] write(3, "1000", 4) = 4 [pid 6253] close(3) = 0 [pid 6253] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6246] munmap(0x7fe96bb4a000, 16777216 [pid 6253] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6252] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6253] <... mmap resumed>) = 0x7fe973f4a000 [pid 6253] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6253] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6254], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6254 [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6254 attached [ 285.441882][ T6248] loop5: detected capacity change from 0 to 32768 [ 285.478451][ T6248] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6248) [pid 6254] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6254] memfd_create("syzkaller", 0 [pid 6248] <... mount resumed>) = -1 EEXIST (File exists) [pid 6254] <... memfd_create resumed>) = 3 [pid 6248] ioctl(4, LOOP_CLR_FD [pid 6254] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6246] <... munmap resumed>) = 0 [pid 6254] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6246] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6246] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6246] close(3) = 0 [pid 6246] mkdir("./bus", 0777) = 0 [pid 6246] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 285.541496][ T6246] loop3: detected capacity change from 0 to 32768 [ 285.574767][ T6246] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6246) [pid 6246] ioctl(4, LOOP_CLR_FD [pid 6250] <... write resumed>) = 16777216 [pid 6250] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6250] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6250] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6250] close(3) = 0 [pid 6250] mkdir("./bus", 0777) = 0 [pid 6250] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 285.704501][ T6250] loop4: detected capacity change from 0 to 32768 [ 285.740749][ T6250] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6250) [pid 6250] ioctl(4, LOOP_CLR_FD [pid 6248] <... ioctl resumed>) = 0 [pid 6248] close(4) = 0 [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6247] <... futex resumed>) = 0 [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6248] creat("./bus", 000 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] <... futex resumed>) = 0 [pid 6248] <... futex resumed>) = 1 [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] open("./bus", O_RDONLY [pid 6247] <... futex resumed>) = 0 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] <... open resumed>) = 3 [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6247] <... futex resumed>) = 0 [pid 6248] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6247] <... futex resumed>) = 0 [pid 6248] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6247] <... futex resumed>) = 0 [pid 6248] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6247] <... futex resumed>) = 0 [pid 6248] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6247] <... futex resumed>) = 0 [pid 6248] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6248] fallocate(-1, 0, 0, 1048820 [pid 6247] <... futex resumed>) = 0 [pid 6248] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6248] <... futex resumed>) = 0 [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6247] <... futex resumed>) = 0 [pid 6248] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6248] <... futex resumed>) = 0 [pid 6247] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6248] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6247] <... futex resumed>) = 0 [pid 6248] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6247] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6248] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6247] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6248] <... futex resumed>) = 0 [pid 6247] exit_group(0) = ? [pid 6248] +++ exited with 0 +++ [pid 6247] +++ exited with 0 +++ [pid 5015] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6247, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=45 /* 0.45 s */} --- [pid 5015] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5015] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5015] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./119/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5015] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5015] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5015] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5015] close(4) = 0 [pid 5015] rmdir("./119/bus") = 0 [pid 5015] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5015] lstat("./119/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5015] unlink("./119/binderfs" [pid 6254] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5015] <... unlink resumed>) = 0 [pid 5015] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5015] close(3) = 0 [pid 5015] rmdir("./119") = 0 [pid 5015] mkdir("./120", 0777) = 0 [pid 5015] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 5015] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5015] close(3) = 0 [pid 6246] <... ioctl resumed>) = 0 [pid 5015] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6246] close(4) = 0 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5015] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6255 [pid 6245] <... futex resumed>) = 0 [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6255 attached [pid 6246] <... futex resumed>) = 1 [pid 6255] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6255] chdir("./120" [pid 6246] creat("./bus", 000 [pid 6255] <... chdir resumed>) = 0 [pid 6246] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6255] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6255] setpgid(0, 0) = 0 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6246] open("./bus", O_RDONLY [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] <... openat resumed>) = 3 [pid 6246] <... open resumed>) = 3 [pid 6255] write(3, "1000", 4 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6255] <... write resumed>) = 4 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] close(3 [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6255] <... close resumed>) = 0 [pid 6250] <... ioctl resumed>) = 0 [pid 6246] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] symlink("/dev/binderfs", "./binderfs" [pid 6246] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6255] <... symlink resumed>) = 0 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] close(4 [pid 6246] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6255] <... futex resumed>) = 0 [pid 6250] <... close resumed>) = 0 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6255] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6255] <... mmap resumed>) = 0x7fe973f4a000 [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6246] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6255] <... mprotect resumed>) = 0 [pid 6249] <... futex resumed>) = 0 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6255] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6250] creat("./bus", 000 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... creat resumed>) = -1 EISDIR (Is a directory) [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6255] <... clone resumed>, parent_tid=[6256], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6256 [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] fallocate(-1, 0, 0, 1048820 [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6255] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6246] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6255] <... futex resumed>) = 0 [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6256 attached [pid 6255] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6256] set_robust_list(0x7fe973f6a9e0, 24 [pid 6250] open("./bus", O_RDONLY [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... set_robust_list resumed>) = 0 [pid 6250] <... open resumed>) = 3 [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6256] memfd_create("syzkaller", 0 [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... memfd_create resumed>) = 3 [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6246] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6256] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6246] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6245] <... futex resumed>) = 0 [pid 6246] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6245] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6246] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6250] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6246] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = 1 [pid 6245] <... futex resumed>) = 0 [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6246] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6245] exit_group(0 [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6246] <... futex resumed>) = ? [pid 6245] <... exit_group resumed>) = ? [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6246] +++ exited with 0 +++ [pid 6245] +++ exited with 0 +++ [pid 6250] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6245, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=43 /* 0.43 s */} --- [pid 6250] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6249] <... futex resumed>) = 0 [pid 6250] fallocate(-1, 0, 0, 1048820 [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6250] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6249] <... futex resumed>) = 0 [pid 6250] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] umount2("./119", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6249] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6250] <... futex resumed>) = 0 [pid 6249] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6250] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6249] <... futex resumed>) = 0 [pid 5013] openat(AT_FDCWD, "./119", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6250] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6249] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... openat resumed>) = 3 [pid 6250] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] fstat(3, [pid 6250] <... futex resumed>) = 1 [pid 6249] <... futex resumed>) = 0 [pid 6250] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6249] exit_group(0) = ? [pid 5013] getdents64(3, [pid 6250] <... futex resumed>) = ? [pid 6250] +++ exited with 0 +++ [pid 6249] +++ exited with 0 +++ [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6249, si_uid=0, si_status=0, si_utime=8 /* 0.08 s */, si_stime=40 /* 0.40 s */} --- [pid 5013] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5014] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] lstat("./119/bus", [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] umount2("./119/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... openat resumed>) = 3 [pid 5014] fstat(3, [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] openat(AT_FDCWD, "./119/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5014] getdents64(3, [pid 5013] <... openat resumed>) = 4 [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5014] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] fstat(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5014] lstat("./120/bus", [pid 5013] getdents64(4, [pid 5014] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5014] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] getdents64(4, [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5014] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5013] close(4 [pid 5014] <... openat resumed>) = 4 [pid 5014] fstat(4, [pid 5013] <... close resumed>) = 0 [pid 5014] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] rmdir("./119/bus" [pid 5014] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] <... rmdir resumed>) = 0 [pid 5014] getdents64(4, [pid 5013] umount2("./119/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5014] <... getdents64 resumed>0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 6252] <... write resumed>) = 16777216 [pid 5014] close(4 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] <... close resumed>) = 0 [pid 5013] lstat("./119/binderfs", [pid 5014] rmdir("./120/bus" [pid 5013] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6252] munmap(0x7fe96bb4a000, 16777216 [pid 5014] <... rmdir resumed>) = 0 [pid 5013] unlink("./119/binderfs" [pid 5014] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5013] <... unlink resumed>) = 0 [pid 5014] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5014] lstat("./120/binderfs", [pid 5013] getdents64(3, [pid 5014] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5014] unlink("./120/binderfs" [pid 5013] close(3 [pid 5014] <... unlink resumed>) = 0 [pid 5013] <... close resumed>) = 0 [pid 5014] getdents64(3, [pid 5013] rmdir("./119" [pid 5014] <... getdents64 resumed>0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] <... rmdir resumed>) = 0 [pid 5013] mkdir("./120", 0777 [pid 5014] close(3 [pid 5013] <... mkdir resumed>) = 0 [pid 5014] <... close resumed>) = 0 [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5014] rmdir("./120") = 0 [pid 5013] <... openat resumed>) = 3 [pid 5014] mkdir("./121", 0777 [pid 5013] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5014] <... mkdir resumed>) = 0 [pid 5013] close(3 [pid 5014] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5013] <... close resumed>) = 0 [pid 5014] <... openat resumed>) = 3 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5014] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5013] <... clone resumed>, child_tidptr=0x5555561c25d0) = 6257 [pid 5014] close(3) = 0 [pid 5014] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6258 [pid 6252] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 6257 attached [pid 6257] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6257] chdir("./120" [pid 6252] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6257] <... chdir resumed>) = 0 [pid 6252] <... openat resumed>) = 4 [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 6258 attached [pid 6257] setpgid(0, 0 [pid 6252] ioctl(4, LOOP_SET_FD, 3 [pid 6258] set_robust_list(0x5555561c25e0, 24 [pid 6252] <... ioctl resumed>) = 0 [pid 6257] <... setpgid resumed>) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6258] <... set_robust_list resumed>) = 0 [pid 6257] <... openat resumed>) = 3 [pid 6257] write(3, "1000", 4 [pid 6258] chdir("./121" [pid 6257] <... write resumed>) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6258] <... chdir resumed>) = 0 [pid 6257] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6257] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6258] setpgid(0, 0) = 0 [pid 6257] <... clone resumed>, parent_tid=[6259], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6259 ./strace-static-x86_64: Process 6259 attached [pid 6258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6252] close(3 [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6259] set_robust_list(0x7fe973f6a9e0, 24 [pid 6258] <... openat resumed>) = 3 [pid 6258] write(3, "1000", 4) = 4 [pid 6259] <... set_robust_list resumed>) = 0 [pid 6259] memfd_create("syzkaller", 0 [pid 6258] close(3) = 0 [pid 6258] symlink("/dev/binderfs", "./binderfs" [pid 6259] <... memfd_create resumed>) = 3 [pid 6259] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6258] <... symlink resumed>) = 0 [pid 6258] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] <... mmap resumed>) = 0x7fe96bb4a000 [pid 6252] <... close resumed>) = 0 [pid 6258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6252] mkdir("./bus", 0777 [pid 6258] <... mmap resumed>) = 0x7fe973f4a000 [pid 6252] <... mkdir resumed>) = 0 [pid 6252] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [ 286.176506][ T6252] loop2: detected capacity change from 0 to 32768 [pid 6258] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6258] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6260], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6260 [pid 6258] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6258] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6252] <... mount resumed>) = -1 EEXIST (File exists) [pid 6252] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6260] memfd_create("syzkaller", 0) = 3 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 286.218236][ T6252] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6252) [ 286.385905][ T28] INFO: task kworker/u4:3:46 blocked for more than 143 seconds. [ 286.393760][ T28] Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [pid 6254] <... write resumed>) = 16777216 [ 286.426830][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.466829][ T28] task:kworker/u4:3 state:D stack:23840 pid:46 ppid:2 flags:0x00004000 [pid 6254] munmap(0x7fe96bb4a000, 16777216 [pid 6256] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6254] <... munmap resumed>) = 0 [pid 6254] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 286.516503][ T28] Workqueue: btrfs-endio-write btrfs_work_helper [ 286.523059][ T28] Call Trace: [ 286.536681][ T28] [ 286.555943][ T28] __schedule+0x1d15/0x5790 [ 286.560755][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [pid 6254] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6254] close(3) = 0 [pid 6254] mkdir("./bus", 0777) = 0 [ 286.578614][ T6254] loop1: detected capacity change from 0 to 32768 [ 286.586263][ T28] ? print_usage_bug.part.0+0x660/0x660 [ 286.592358][ T28] ? io_schedule_timeout+0x150/0x150 [ 286.606183][ T28] ? wait_extent_bit+0x569/0x670 [ 286.611732][ T28] ? mark_held_locks+0x9f/0xe0 [pid 6254] mount("/dev/loop1", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6259] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6254] <... mount resumed>) = -1 EEXIST (File exists) [pid 6252] <... ioctl resumed>) = 0 [pid 6254] ioctl(4, LOOP_CLR_FD [pid 6252] close(4) = 0 [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = 0 [ 286.628433][ T6254] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz-executor527 (6254) [ 286.633006][ T28] schedule+0xde/0x1a0 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6252] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = 0 [pid 6251] <... futex resumed>) = 1 [pid 6252] open("./bus", O_RDONLY) = 3 [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6252] <... futex resumed>) = 0 [pid 6252] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6251] <... futex resumed>) = 0 [pid 6252] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6251] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6252] <... futex resumed>) = 0 [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] fallocate(-1, 0, 0, 1048820 [pid 6251] <... futex resumed>) = 0 [pid 6252] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] <... futex resumed>) = 0 [pid 6252] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6251] <... futex resumed>) = 0 [pid 6252] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6251] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6252] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6252] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6251] <... futex resumed>) = 0 [pid 6252] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6251] exit_group(0 [pid 6252] <... futex resumed>) = ? [pid 6251] <... exit_group resumed>) = ? [pid 6252] +++ exited with 0 +++ [ 286.676298][ T28] wait_extent_bit+0x56e/0x670 [ 286.681752][ T28] ? __clear_extent_bit+0xba0/0xba0 [ 286.697889][ T28] ? __set_extent_bit+0xfe1/0x15f0 [ 286.703123][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [pid 6251] +++ exited with 0 +++ [pid 5012] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6251, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=39 /* 0.39 s */} --- [pid 5012] umount2("./118", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./118", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5012] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5012] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./118/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] umount2("./118/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] openat(AT_FDCWD, "./118/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5012] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5012] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5012] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5012] close(4) = 0 [pid 5012] rmdir("./118/bus") = 0 [ 286.736814][ T28] lock_extent+0x120/0x1c0 [ 286.741377][ T28] ? try_lock_extent+0x140/0x140 [ 286.766641][ T28] ? btrfs_finish_ordered_io+0x249/0x2280 [ 286.772863][ T28] ? lock_acquire+0x32/0xc0 [pid 5012] umount2("./118/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5012] lstat("./118/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5012] unlink("./118/binderfs") = 0 [pid 5012] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5012] close(3) = 0 [pid 5012] rmdir("./118") = 0 [pid 5012] mkdir("./119", 0777) = 0 [pid 5012] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5012] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5012] close(3) = 0 [pid 5012] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6261 [ 286.786509][ T28] ? btrfs_finish_ordered_io+0x249/0x2280 [ 286.792436][ T28] btrfs_finish_ordered_io+0x9c3/0x2280 [ 286.815885][ T28] ? btrfs_unlink+0x390/0x390 [ 286.821036][ T28] ? lock_acquire+0x32/0xc0 [ 286.826727][ T28] btrfs_work_helper+0x210/0xbd0 [ 286.831765][ T28] ? process_one_work+0x8b7/0x15e0 ./strace-static-x86_64: Process 6261 attached [pid 6261] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6261] chdir("./119") = 0 [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6261] setpgid(0, 0) = 0 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6261] write(3, "1000", 4) = 4 [pid 6261] close(3) = 0 [ 286.869399][ T28] ? lock_acquire+0x32/0xc0 [ 286.876539][ T28] process_one_work+0x99a/0x15e0 [ 286.881627][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 286.906266][ T28] ? rcu_is_watching+0x12/0xb0 [ 286.911580][ T28] ? spin_bug+0x1c0/0x1c0 [pid 6261] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6261] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6261] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6261] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6262], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6262 [pid 6261] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6261] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6262 attached [pid 6262] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6262] memfd_create("syzkaller", 0) = 3 [pid 6262] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 286.916847][ T28] ? lock_acquire+0x32/0xc0 [ 286.921900][ T28] ? worker_thread+0x16d/0x10c0 [ 286.936294][ T28] worker_thread+0x67d/0x10c0 [ 286.941451][ T28] ? process_one_work+0x15e0/0x15e0 [ 286.951751][ T28] kthread+0x344/0x440 [ 286.966226][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 286.971982][ T28] ret_from_fork+0x1f/0x30 [ 286.993817][ T28] [ 287.004465][ T28] INFO: task syz-executor527:5026 blocked for more than 143 seconds. [pid 6256] <... write resumed>) = 16777216 [pid 6256] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6256] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 287.036811][ T28] Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 287.044911][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.076341][ T28] task:syz-executor527 state:D stack:24104 pid:5026 ppid:5010 flags:0x00004004 [pid 6256] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6256] close(3) = 0 [ 287.095371][ T6256] loop5: detected capacity change from 0 to 32768 [ 287.108789][ T28] Call Trace: [ 287.112993][ T28] [pid 6256] mkdir("./bus", 0777) = 0 [pid 6256] mount("/dev/loop5", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 287.136300][ T28] __schedule+0x1d15/0x5790 [ 287.140906][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.151825][ T6256] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz-executor527 (6256) [ 287.163284][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.177756][ T28] ? rwsem_down_write_slowpath+0x3b8/0x1220 [pid 6256] ioctl(4, LOOP_CLR_FD [pid 6259] <... write resumed>) = 16777216 [pid 6259] munmap(0x7fe96bb4a000, 16777216 [pid 6262] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6260] <... write resumed>) = 16777216 [pid 6260] munmap(0x7fe96bb4a000, 16777216 [pid 6259] <... munmap resumed>) = 0 [pid 6260] <... munmap resumed>) = 0 [pid 6259] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6260] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 287.195958][ T28] schedule+0xde/0x1a0 [ 287.200128][ T28] schedule_preempt_disabled+0x13/0x20 [ 287.205653][ T28] rwsem_down_write_slowpath+0x3e2/0x1220 [ 287.225195][ T28] ? down_killable+0xa0/0xa0 [ 287.231047][ T28] ? lock_sync+0x190/0x190 [ 287.235552][ T28] ? rcu_is_watching+0x12/0xb0 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6259] <... openat resumed>) = 4 [pid 6259] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6260] <... ioctl resumed>) = 0 [pid 6260] close(3) = 0 [pid 6260] mkdir("./bus", 0777) = 0 [pid 6259] close(3 [pid 6260] mount("/dev/loop4", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [pid 6259] <... close resumed>) = 0 [pid 6259] mkdir("./bus", 0777) = 0 [pid 6260] <... mount resumed>) = -1 EEXIST (File exists) [pid 6259] mount("/dev/loop3", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread," [ 287.251295][ T6260] loop4: detected capacity change from 0 to 32768 [ 287.258282][ T28] ? btrfs_inode_lock+0x7e/0xf0 [ 287.263605][ T28] ? lock_acquire+0x32/0xc0 [ 287.264290][ T6259] loop3: detected capacity change from 0 to 32768 [ 287.268227][ T28] ? btrfs_inode_lock+0x7e/0xf0 [ 287.283333][ T6260] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor527 (6260) [ 287.294685][ T28] down_write+0x1d2/0x200 [pid 6260] ioctl(4, LOOP_CLR_FD [pid 6259] <... mount resumed>) = -1 EEXIST (File exists) [ 287.300524][ T28] ? down_write_killable_nested+0x250/0x250 [ 287.301816][ T6259] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz-executor527 (6259) [ 287.318454][ T28] btrfs_inode_lock+0x7e/0xf0 [ 287.324186][ T28] btrfs_sync_file+0x455/0x12d0 [ 287.330456][ T28] ? __filemap_fdatawait_range+0x195/0x210 [ 287.337414][ T28] ? start_ordered_ops.constprop.0+0xd0/0xd0 [ 287.344258][ T28] ? find_held_lock+0x2d/0x110 [ 287.350524][ T28] ? lock_downgrade+0x690/0x690 [ 287.356165][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 287.361280][ T28] ? start_ordered_ops.constprop.0+0xd0/0xd0 [ 287.368679][ T28] vfs_fsync_range+0x13e/0x230 [ 287.374509][ T28] btrfs_do_write_iter+0x520/0x1210 [ 287.381539][ T28] ? btrfs_fdatawrite_range+0x110/0x110 [ 287.388502][ T28] vfs_write+0x945/0xd50 [ 287.393913][ T28] ? kernel_write+0x670/0x670 [ 287.400177][ T28] ? receive_fd+0x110/0x110 [ 287.405720][ T28] ? __fget_files+0x26a/0x480 [ 287.411873][ T28] ksys_write+0x12b/0x250 [ 287.417628][ T28] ? __ia32_sys_read+0xb0/0xb0 [ 287.423410][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 287.430292][ T28] ? _raw_spin_unlock_irq+0x2e/0x50 [ 287.436181][ T28] ? ptrace_notify+0xfe/0x140 [ 287.441660][ T28] do_syscall_64+0x39/0xb0 [ 287.446298][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [pid 6259] ioctl(4, LOOP_CLR_FD [pid 6262] <... write resumed>) = 16777216 [pid 6262] munmap(0x7fe96bb4a000, 16777216) = 0 [pid 6262] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6262] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6262] close(3) = 0 [pid 6262] mkdir("./bus", 0777) = 0 [ 287.452356][ T28] RIP: 0033:0x7fe973fbe9f9 [ 287.456919][ T28] RSP: 002b:00007fe973f6a2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 287.465411][ T28] RAX: ffffffffffffffda RBX: 00007fe9740487a0 RCX: 00007fe973fbe9f9 [ 287.473509][ T28] RDX: 0000000000000128 RSI: 0000000020004400 RDI: 0000000000000006 [ 287.481606][ T28] RBP: 00007fe9740151b0 R08: 0000000000000000 R09: 0000000000000000 [ 287.483446][ T6262] loop2: detected capacity change from 0 to 32768 [pid 6262] mount("/dev/loop2", "./bus", "btrfs", 0, "nodiscard,noautodefrag,inode_cache,usebackuproot,nossd,commit=0x0000000000000005,ssd_spread,") = -1 EEXIST (File exists) [ 287.489814][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 61635f65646f6e69 [ 287.504387][ T28] R13: 65646f7475616f6e R14: 7261637369646f6e R15: 00007fe9740487a8 [ 287.510256][ T6262] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor527 (6262) [ 287.512480][ T28] [ 287.526608][ T28] INFO: task syz-executor527:5047 blocked for more than 144 seconds. [ 287.534737][ T28] Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 287.541914][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 287.550790][ T28] task:syz-executor527 state:D stack:26416 pid:5047 ppid:5010 flags:0x00004004 [ 287.560966][ T28] Call Trace: [ 287.572071][ T28] [ 287.575090][ T28] __schedule+0x1d15/0x5790 [ 287.590370][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.597863][ T28] ? print_usage_bug.part.0+0x660/0x660 [ 287.604501][ T28] ? io_schedule_timeout+0x150/0x150 [ 287.611204][ T28] ? wait_extent_bit+0x569/0x670 [ 287.617519][ T28] ? mark_held_locks+0x9f/0xe0 [ 287.623340][ T28] schedule+0xde/0x1a0 [ 287.628854][ T28] wait_extent_bit+0x56e/0x670 [ 287.634708][ T28] ? __clear_extent_bit+0xba0/0xba0 [ 287.641428][ T28] ? __set_extent_bit+0xfe1/0x15f0 [pid 6262] ioctl(4, LOOP_CLR_FD [pid 6254] <... ioctl resumed>) = 0 [pid 6254] close(4) = 0 [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6254] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 0 [ 287.648117][ T28] ? prepare_to_swait_exclusive+0x240/0x240 [ 287.655062][ T28] lock_extent+0x120/0x1c0 [ 287.660013][ T28] ? try_lock_extent+0x140/0x140 [ 287.665047][ T28] ? folio_flags.constprop.0+0x53/0x150 [ 287.671231][ T28] btrfs_page_mkwrite+0x652/0x11a0 [ 287.676811][ T28] ? btrfs_dio_write+0xe0/0xe0 [ 287.681652][ T28] ? lock_downgrade+0x690/0x690 [ 287.687102][ T28] ? vm_normal_page+0x14a/0x2a0 [ 287.696380][ T28] do_page_mkwrite+0x1a1/0x690 [pid 6254] open("./bus", O_RDONLY) = 3 [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6254] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] <... futex resumed>) = 0 [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... futex resumed>) = 0 [pid 6253] <... futex resumed>) = 1 [pid 6254] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... open resumed>) = -1 EISDIR (Is a directory) [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6254] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6253] <... futex resumed>) = 0 [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 0 [pid 6253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] fallocate(-1, 0, 0, 1048820 [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... fallocate resumed>) = -1 EBADF (Bad file descriptor) [pid 6253] <... futex resumed>) = 0 [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... futex resumed>) = 0 [pid 6253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6254] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6253] <... futex resumed>) = 0 [pid 6254] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6254] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6254] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6253] <... futex resumed>) = 0 [pid 6254] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6253] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6254] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6254] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6253] <... futex resumed>) = 0 [pid 6254] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6253] exit_group(0 [pid 6254] <... futex resumed>) = ? [pid 6253] <... exit_group resumed>) = ? [pid 6254] +++ exited with 0 +++ [pid 6253] +++ exited with 0 +++ [pid 5011] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6253, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=34 /* 0.34 s */} --- [pid 5011] umount2("./121", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./121", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5011] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 287.703291][ T28] do_wp_page+0x356/0x34e0 [ 287.708853][ T28] ? lock_sync+0x190/0x190 [ 287.713382][ T28] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 287.719615][ T28] ? rcu_is_watching+0x12/0xb0 [ 287.724610][ T28] ? do_raw_spin_lock+0x124/0x2b0 [ 287.730488][ T28] ? spin_bug+0x1c0/0x1c0 [ 287.735198][ T28] ? lock_acquire+0x32/0xc0 [ 287.740443][ T28] ? __handle_mm_fault+0x132b/0x4170 [ 287.746200][ T28] __handle_mm_fault+0x1635/0x4170 [pid 5011] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5011] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./121/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] umount2("./121/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] openat(AT_FDCWD, "./121/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5011] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5011] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5011] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5011] close(4) = 0 [pid 5011] rmdir("./121/bus") = 0 [pid 5011] umount2("./121/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5011] lstat("./121/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5011] unlink("./121/binderfs") = 0 [pid 5011] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5011] close(3) = 0 [pid 5011] rmdir("./121") = 0 [pid 5011] mkdir("./122", 0777) = 0 [pid 5011] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5011] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [ 287.751446][ T28] ? vm_iomap_memory+0x190/0x190 [ 287.756959][ T28] ? mt_validate_nulls+0xd10/0xd10 [ 287.762297][ T28] handle_mm_fault+0x2af/0x9f0 [ 287.767664][ T28] do_user_addr_fault+0x51a/0x1210 [ 287.772882][ T28] exc_page_fault+0x98/0x170 [ 287.777995][ T28] asm_exc_page_fault+0x26/0x30 [ 287.783040][ T28] RIP: 0010:rep_movs_alternative+0x33/0xb0 [pid 5011] close(3) = 0 [pid 5011] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6263 ./strace-static-x86_64: Process 6263 attached [pid 6263] set_robust_list(0x5555561c25e0, 24) = 0 [pid 6263] chdir("./122") = 0 [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6263] setpgid(0, 0) = 0 [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6263] write(3, "1000", 4) = 4 [pid 6263] close(3) = 0 [pid 6263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6263] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fe973f4a000 [pid 6263] mprotect(0x7fe973f4b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6263] clone(child_stack=0x7fe973f6a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6264], tls=0x7fe973f6a700, child_tidptr=0x7fe973f6a9d0) = 6264 [pid 6263] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6264 attached [ 287.789862][ T28] Code: 46 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 287.809920][ T28] RSP: 0018:ffffc90003dbf728 EFLAGS: 00050206 [ 287.816961][ T28] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000000038 [ 287.825030][ T28] RDX: fffff520007b7efb RSI: ffffc90003dbf7a0 RDI: 0000000020000120 [ 287.834638][ T28] RBP: 0000000020000120 R08: 0000000000000000 R09: fffff520007b7efa [ 287.843045][ T28] R10: ffffc90003dbf7d7 R11: 1ffffffff218f735 R12: ffffc90003dbf7a0 [pid 6264] set_robust_list(0x7fe973f6a9e0, 24) = 0 [pid 6264] memfd_create("syzkaller", 0) = 3 [pid 6264] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe96bb4a000 [ 287.851570][ T28] R13: 0000000020000158 R14: 0000000000000000 R15: ffffc90003dbf7a0 [ 287.860278][ T28] _copy_to_user+0xab/0xc0 [ 287.864836][ T28] fiemap_fill_next_extent+0x217/0x370 [ 287.870847][ T28] ? compat_ptr_ioctl+0xa0/0xa0 [ 287.877122][ T28] emit_fiemap_extent+0x18e/0x380 [ 287.882252][ T28] fiemap_process_hole+0x516/0x610 [ 287.888988][ T28] ? emit_fiemap_extent+0x380/0x380 [ 287.895212][ T28] ? btrfs_get_64+0x20b/0x3a0 [ 287.901372][ T28] ? btrfs_get_token_64+0x630/0x630 [ 287.908247][ T28] extent_fiemap+0x123b/0x1950 [ 287.914193][ T28] ? read_extent_buffer+0x200/0x200 [ 287.920968][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 287.928575][ T28] ? mark_held_locks+0x9f/0xe0 [ 287.934464][ T28] ? kasan_quarantine_put+0xf9/0x220 [ 287.941499][ T28] ? find_held_lock+0x2d/0x110 [ 287.947713][ T28] ? find_held_lock+0x2d/0x110 [ 287.953682][ T28] ? __might_fault+0xe2/0x190 [ 287.959981][ T28] ? lock_downgrade+0x690/0x690 [ 287.965916][ T28] ? fiemap_prep+0x143/0x220 [ 287.970805][ T28] btrfs_fiemap+0xe9/0x170 [ 287.975873][ T28] ? btrfs_permission+0x1b0/0x1b0 [ 287.981385][ T28] do_vfs_ioctl+0x466/0x1670 [ 287.986406][ T28] ? vfs_fileattr_set+0xc40/0xc40 [ 287.991819][ T28] ? trace_lock_acquire+0x12d/0x180 [ 287.997498][ T28] ? put_page+0xf0/0x280 [ 288.002045][ T28] ? receive_fd+0x110/0x110 [ 288.007593][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 288.013040][ T28] __x64_sys_ioctl+0x10c/0x210 [ 288.018174][ T28] do_syscall_64+0x39/0xb0 [ 288.022859][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 288.029113][ T28] RIP: 0033:0x7fe973fbe9f9 [ 288.033775][ T28] RSP: 002b:00007fe96cb492f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.042503][ T28] RAX: ffffffffffffffda RBX: 00007fe9740487b0 RCX: 00007fe973fbe9f9 [ 288.050747][ T28] RDX: 0000000020000100 RSI: 00000000c020660b RDI: 0000000000000005 [ 288.058958][ T28] RBP: 00007fe9740151b0 R08: 00007fe96cb49700 R09: 0000000000000000 [ 288.067208][ T28] R10: 00007fe96cb49700 R11: 0000000000000246 R12: 61635f65646f6e69 [ 288.075401][ T28] R13: 65646f7475616f6e R14: 7261637369646f6e R15: 00007fe9740487b8 [ 288.083742][ T28] [ 288.087069][ T28] [ 288.087069][ T28] Showing all locks held in the system: [ 288.095025][ T28] 1 lock held by rcu_tasks_kthre/13: [ 288.141385][ T28] #0: ffffffff8c798530 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 288.165880][ T28] 1 lock held by rcu_tasks_trace/14: [ 288.171350][ T28] #0: ffffffff8c798230 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 288.195396][ T28] 1 lock held by khungtaskd/28: [ 288.215876][ T28] #0: ffffffff8c799140 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x390 [ 288.226221][ T28] 3 locks held by kworker/u4:3/46: [ 288.239291][ T28] #0: ffff888079499138 ((wq_completion)btrfs-endio-write){+.+.}-{0:0}, at: process_one_work+0x883/0x15e0 [ 288.265856][ T28] #1: ffffc90000b77db0 ((work_completion)(&work->normal_work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x15e0 [ 288.296250][ T28] #2: ffff88807df6e490 (btrfs_ordered_extent){.+.+}-{0:0}, at: btrfs_finish_ordered_io+0x249/0x2280 [pid 6264] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 6259] <... ioctl resumed>) = 0 [ 288.314889][ T28] 2 locks held by getty/4765: [ 288.326064][ T28] #0: ffff88814aaca098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 288.341351][ T28] #1: ffffc900015902f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 288.353304][ T28] 3 locks held by syz-executor527/5026: [pid 6259] close(4) = 0 [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6259] <... futex resumed>) = 1 [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] open("./bus", O_RDONLY) = 3 [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6259] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 288.359024][ T28] #0: ffff88802c1274e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 288.368435][ T28] #1: ffff88807c1ac460 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 288.378535][ T28] #2: ffff888075708ee0 (&sb->s_type->i_mutex_key#15){++++}-{3:3}, at: btrfs_inode_lock+0x7e/0xf0 [ 288.391996][ T28] 4 locks held by syz-executor527/5047: [ 288.399714][ T28] #0: ffff888075708ee0 (&sb->s_type->i_mutex_key#15){++++}-{3:3}, at: btrfs_inode_lock+0xd8/0xf0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6259] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = -1 EISDIR (Is a directory) [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6259] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... mmap resumed>) = -1 EBADF (Bad file descriptor) [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] fallocate(-1, 0, 0, 1048820) = -1 EBADF (Bad file descriptor) [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 288.414257][ T28] #1: ffff88807de12568 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x448/0x1210 [ 288.427881][ T28] #2: ffff88807c1ac558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a1/0x690 [ 288.439026][ T28] #3: ffff888075708d68 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x6eb/0x11a0 [ 288.454408][ T28] 3 locks held by syz-executor527/6264: [ 288.461719][ T28] [pid 6259] write(-1, "\x08\x00\x00\x00\x20\x01\x00\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xf5\xd1\xda\x1a\x49\x8c\xc1\xff\xd2\xbd\xe9\xce\x31\x7f\x31\xe1\xd8\xdf\x03\x98\x82\xd0\x6f\x9f\xc5\x41\xb7\x37\x01\x1e\x7a\xd9\x2d\xfd\x51\x02\xc7\xd6\x57\xc5\x0c\xdd\x7d\x00\x9d\x6f\x74\xad\xf0\x80\xd8\xb3\xec\x3a\xa7\xaf\x80\x2f\x82\x96\xb7\x3e\x9f\xf8\x09\xc5\x46\x13\x4e\x55\x08\x52\x29\xb5\xb9"..., 296 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... ioctl resumed>) = 0 [pid 6256] close(4 [pid 6259] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6259] ioctl(3, FS_IOC_FIEMAP, {fm_start=0, fm_length=1181803792, fm_flags=0, fm_extent_count=1} [pid 6257] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] <... close resumed>) = 0 [pid 6257] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] <... ioctl resumed> => {fm_flags=0, fm_mapped_extents=1, ...}) = 0 [pid 6256] <... futex resumed>) = 1 [pid 6259] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6256] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6255] <... futex resumed>) = 0 [pid 6259] <... futex resumed>) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6255] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6259] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] exit_group(0 [pid 6256] <... futex resumed>) = 0 [pid 6255] <... futex resumed>) = 1 [pid 6257] <... exit_group resumed>) = ? [pid 6256] creat("./bus", 000) = -1 EISDIR (Is a directory) [pid 6256] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6256] futex(0x7fe9740487a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] <... futex resumed>) = ? [pid 6255] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] +++ exited with 0 +++ [pid 6257] +++ exited with 0 +++ [pid 6255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6255] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=46 /* 0.46 s */} --- [pid 6256] <... futex resumed>) = 0 [pid 6255] <... futex resumed>) = 1 [pid 6256] open("./bus", O_RDONLY [pid 6255] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6256] <... open resumed>) = 3 [ 288.464813][ T28] ============================================= [ 288.464813][ T28] [pid 5013] umount2("./120", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6256] futex(0x7fe9740487ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./120", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5013] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 4 entries */, 32768) = 104 [pid 5013] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./120/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] umount2("./120/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] openat(AT_FDCWD, "./120/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5013] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5013] getdents64(4, 0x5555561cb660 /* 2 entries */, 32768) = 48 [pid 5013] getdents64(4, 0x5555561cb660 /* 0 entries */, 32768) = 0 [pid 5013] close(4) = 0 [pid 5013] rmdir("./120/bus") = 0 [pid 5013] umount2("./120/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5013] lstat("./120/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5013] unlink("./120/binderfs") = 0 [pid 5013] getdents64(3, 0x5555561c3620 /* 0 entries */, 32768) = 0 [pid 5013] close(3) = 0 [pid 5013] rmdir("./120") = 0 [pid 5013] mkdir("./121", 0777) = 0 [pid 6255] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5013] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6255] futex(0x7fe9740487a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5013] <... openat resumed>) = 3 [pid 6255] <... futex resumed>) = 0 [ 288.529143][ T28] NMI backtrace for cpu 1 [ 288.533568][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 288.542915][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 288.553022][ T28] Call Trace: [ 288.556463][ T28] [ 288.559441][ T28] dump_stack_lvl+0xd9/0x150 [ 288.564203][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 288.569231][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [pid 5013] ioctl(3, LOOP_CLR_FD [pid 6255] futex(0x7fe9740487ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5013] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5013] close(3) = 0 [pid 5013] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555561c25d0) = 6265 [ 288.574507][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 288.580579][ T28] watchdog+0xe16/0x1090 [ 288.584930][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 288.590996][ T28] kthread+0x344/0x440 [ 288.595141][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.600856][ T28] ret_from_fork+0x1f/0x30 [ 288.605360][ T28] [ 288.608675][ T28] Sending NMI from CPU 1 to CPUs 0: [ 288.613929][ C0] NMI backtrace for cpu 0 [ 288.613942][ C0] CPU: 0 PID: 6262 Comm: syz-executor527 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 288.613969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 288.613982][ C0] RIP: 0010:__mod_zone_page_state+0x8f/0x1a0 [ 288.614022][ C0] Code: 08 84 d2 0f 85 e0 00 00 00 8b 05 6c 8e bf 0c 85 c0 74 0b 65 8b 05 f1 eb 46 7e 85 c0 74 5e 48 c7 c7 60 82 57 8a e8 81 3a 55 08 <48> c7 c7 60 82 57 8a 65 8a 55 00 48 0f be d2 48 01 d3 e8 6a 3a 55 [ 288.614045][ C0] RSP: 0018:ffffc900064b7538 EFLAGS: 00000006 [ 288.614064][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 1ffffffff1cf657e [ 288.614079][ C0] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 288.614094][ C0] RBP: 00000000000433c0 R08: 0000000000000001 R09: 0000000000000000 [ 288.614108][ C0] R10: ffffffff8e7af6d7 R11: 0000000000094001 R12: 0000000000000000 [ 288.614123][ C0] R13: ffff88813fffa700 R14: 00000000000433c0 R15: ffffea0001c728c0 [ 288.614139][ C0] FS: 00007fe973f6a700(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 288.614164][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.614180][ C0] CR2: 00007ffed9f03448 CR3: 000000002ad6c000 CR4: 00000000003506f0 [ 288.614196][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 288.614211][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 288.614225][ C0] Call Trace: [ 288.614231][ C0] [ 288.614240][ C0] __free_one_page+0x107/0xea0 [ 288.614270][ C0] free_pcppages_bulk+0x344/0x630 [ 288.614301][ C0] ? lock_sync+0x190/0x190 [ 288.614339][ C0] free_unref_page_commit+0x25f/0x6e0 [ 288.614367][ C0] ? __drain_all_pages+0x450/0x450 [ 288.614395][ C0] free_unref_page_list+0x23e/0xa70 [ 288.614427][ C0] release_pages+0xcd8/0x1380 [ 288.614469][ C0] ? lock_downgrade+0x690/0x690 [ 288.614506][ C0] ? put_pages_list+0x540/0x540 [ 288.614544][ C0] ? mark_held_locks+0x9f/0xe0 [ 288.614582][ C0] ? do_raw_spin_unlock+0x175/0x230 [ 288.614623][ C0] ? folio_flags.constprop.0+0x53/0x150 [ 288.614662][ C0] __pagevec_release+0x77/0xe0 [ 288.614707][ C0] shmem_undo_range+0x583/0x1240 [ 288.614736][ C0] ? shmem_get_partial_folio+0x340/0x340 [ 288.614783][ C0] shmem_evict_inode+0x32f/0xb60 [ 288.614808][ C0] ? shmem_truncate_range+0xc0/0xc0 [ 288.614831][ C0] ? lock_downgrade+0x690/0x690 [ 288.614867][ C0] ? cpuacct_css_alloc+0x160/0x160 [ 288.614908][ C0] ? lock_acquire+0x32/0xc0 [ 288.614943][ C0] ? inode_wait_for_writeback+0x1e/0x40 [ 288.614972][ C0] ? shmem_truncate_range+0xc0/0xc0 [ 288.614997][ C0] evict+0x2ed/0x6b0 [ 288.615036][ C0] ? __remove_inode_hash+0x130/0x130 [ 288.615071][ C0] iput+0x4a7/0x7a0 [ 288.615110][ C0] dentry_unlink_inode+0x2b1/0x460 [ 288.615142][ C0] __dentry_kill+0x3c0/0x640 [ 288.615173][ C0] ? dput+0x39/0xe10 [ 288.615204][ C0] ? dput+0x39/0xe10 [ 288.615234][ C0] dput+0x865/0xe10 [ 288.615267][ C0] __fput+0x3cc/0xa90 [ 288.615302][ C0] task_work_run+0x16f/0x270 [ 288.615330][ C0] ? task_work_cancel+0x30/0x30 [ 288.615354][ C0] ? blkdev_ioctl+0x18d/0x7f0 [ 288.615422][ C0] ? blkdev_common_ioctl+0x1a40/0x1a40 [ 288.615464][ C0] ptrace_notify+0x118/0x140 [ 288.615496][ C0] syscall_exit_to_user_mode_prepare+0x129/0x220 [ 288.615526][ C0] syscall_exit_to_user_mode+0xd/0x50 [ 288.615558][ C0] do_syscall_64+0x46/0xb0 [ 288.615597][ C0] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 288.615637][ C0] RIP: 0033:0x7fe973fbe8b7 [ 288.615654][ C0] Code: 3c 1c 48 f7 d8 49 39 c4 72 b8 e8 b4 5d 02 00 85 c0 78 bd 48 83 c4 08 4c 89 e0 5b 41 5c c3 0f 1f 44 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 288.615676][ C0] RSP: 002b:00007fe973f6a168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.615703][ C0] RAX: 0000000000000000 RBX: 0000000000000011 RCX: 00007fe973fbe8b7 [ 288.615718][ C0] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000004 [ 288.615733][ C0] RBP: 0000000000000004 R08: 00007fe973f6a1c0 R09: 00000000000050e9 [ 288.615748][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe973f6a6b8 [ 288.615763][ C0] R13: 00007fe973f6a180 R14: 00007fe973f6a1c0 R15: 0000000000000000 [ 288.615787][ C0] [ 288.615798][ C0] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 1.869 msecs [ 288.679704][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 288.679726][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 288.679762][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 288.679779][ T28] Call Trace: [ 288.679787][ T28] [ 288.679798][ T28] dump_stack_lvl+0xd9/0x150 [ 288.679859][ T28] panic+0x686/0x730 [ 288.679911][ T28] ? panic_smp_self_stop+0xa0/0xa0 [ 288.679967][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 288.680002][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 288.680056][ T28] ? watchdog+0xbe8/0x1090 [ 288.680113][ T28] watchdog+0xbf9/0x1090 [ 288.680166][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 288.680246][ T28] kthread+0x344/0x440 [ 288.680288][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 288.680338][ T28] ret_from_fork+0x1f/0x30 [ 288.680399][ T28] [ 289.125663][ T28] Kernel Offset: disabled [ 289.130009][ T28] Rebooting in 86400 seconds..