./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor130022706 <...> 9bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4896] <... write resumed>) = 262144 [pid 4896] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4894] <... futex resumed>) = 0 [pid 4894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4896] <... futex resumed>) = 1 [pid 4896] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 4896] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... umount2 resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] close(3) = 0 [pid 305] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4909 [pid 308] <... umount2 resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4910 [pid 305] lstat("./150/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 4905] <... ioctl resumed>) = 0 [pid 305] close(4 [pid 4905] close(4 [pid 305] <... close resumed>) = 0 [pid 4905] <... close resumed>) = 0 [pid 305] rmdir("./150/bus" [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rmdir resumed>) = 0 [pid 4905] <... futex resumed>) = 1 [pid 4901] <... futex resumed>) = 0 [pid 308] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(3, [pid 4905] chdir("./file0" [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4905] <... chdir resumed>) = 0 [pid 4901] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] close(3 [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 4905] <... futex resumed>) = 0 [pid 305] rmdir("./150" [pid 4905] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4896] <... futex resumed>) = 1 [pid 4894] <... futex resumed>) = 0 [pid 308] lstat("./151/bus", [pid 305] <... rmdir resumed>) = 0 [pid 4905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4894] exit_group(0 [ 117.967127][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 117.994962][ T4905] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/152/bus supports timestamps until 2038 (0x7fffffff) [pid 305] mkdir("./151", 0777 [pid 4905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4901] <... futex resumed>) = 0 [pid 4894] <... exit_group resumed>) = ? [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 4905] <... open resumed>) = 4 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... openat resumed>) = 3 [pid 4905] <... futex resumed>) = 1 [pid 4901] <... futex resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 4905] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4905] <... mount resumed>) = 0 [pid 4901] <... futex resumed>) = 0 [pid 305] close(3 [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 4905] <... futex resumed>) = 0 [pid 4901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4905] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4905] <... open resumed>) = 5 [pid 4901] <... futex resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4911 [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4910 attached [pid 4905] <... futex resumed>) = 0 [pid 4901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4910] set_robust_list(0x55555748e5e0, 24 [pid 4905] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] <... set_robust_list resumed>) = 0 [pid 4905] <... openat resumed>) = 6 [pid 4901] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4910] chdir("./154" [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... openat resumed>) = 4 [pid 4910] <... chdir resumed>) = 0 [pid 4905] <... futex resumed>) = 0 [pid 4901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] fstat(4, [pid 4910] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4905] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4910] <... prctl resumed>) = 0 [pid 4905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4901] <... futex resumed>) = 0 [pid 308] getdents64(4, [pid 4910] setpgid(0, 0 [pid 4905] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4909 attached [pid 4910] <... setpgid resumed>) = 0 [pid 4905] <... write resumed>) = 262144 [pid 4896] +++ exited with 0 +++ [pid 4894] +++ exited with 0 +++ [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 4910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] getdents64(4, [pid 4910] <... openat resumed>) = 3 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4894, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4910] write(3, "1000", 4 [pid 308] close(4 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 4910] <... write resumed>) = 4 [pid 308] <... close resumed>) = 0 [pid 4910] close(3 [pid 308] rmdir("./151/bus" [pid 4910] <... close resumed>) = 0 [pid 4910] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] <... rmdir resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(3, ./strace-static-x86_64: Process 4911 attached [pid 4910] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4911] set_robust_list(0x55555748e5e0, 24 [pid 4910] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4909] set_robust_list(0x55555748e5e0, 24 [pid 308] close(3 [pid 307] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4911] <... set_robust_list resumed>) = 0 [pid 4910] <... mmap resumed>) = 0x7f19bd5e4000 [pid 308] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4911] chdir("./151" [pid 4910] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 308] rmdir("./151" [pid 307] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4911] <... chdir resumed>) = 0 [pid 4910] <... mprotect resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 4911] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4910] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] fstat(3, [pid 4911] <... prctl resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4911] setpgid(0, 0 [pid 4910] <... clone resumed>, parent_tid=[4912], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4912 [pid 4909] <... set_robust_list resumed>) = 0 [pid 307] getdents64(3, [pid 4911] <... setpgid resumed>) = 0 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] mkdir("./152", 0777 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 4911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4910] <... futex resumed>) = 0 [pid 4909] chdir("./149" [pid 307] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4911] <... openat resumed>) = 3 [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4909] <... chdir resumed>) = 0 [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... mkdir resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4911] write(3, "1000", 4 [pid 4909] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4905] <... futex resumed>) = 1 [pid 4901] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 307] lstat("./150/binderfs", [pid 4911] <... write resumed>) = 4 [pid 4909] <... prctl resumed>) = 0 [pid 4905] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4911] close(3 [pid 4909] setpgid(0, 0 [pid 4901] <... futex resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] unlink("./150/binderfs" [pid 4911] <... close resumed>) = 0 [pid 4909] <... setpgid resumed>) = 0 [pid 4901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... unlink resumed>) = 0 [pid 4911] symlink("/dev/binderfs", "./binderfs" [pid 307] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4911] <... symlink resumed>) = 0 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4911] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4911] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4911] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4913], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4913 [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 4911] <... futex resumed>) = 0 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... close resumed>) = 0 ./strace-static-x86_64: Process 4913 attached [pid 4913] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4913] memfd_create("syzkaller", 0) = 3 [pid 4913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 4914 [pid 4909] <... openat resumed>) = 3 [pid 4909] write(3, "1000", 4) = 4 [pid 4909] close(3) = 0 [pid 4909] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4909] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 4912 attached [pid 4912] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4909] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4909] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4909] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4915], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4915 [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] memfd_create("syzkaller", 0 [pid 4909] <... futex resumed>) = 0 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4912] <... memfd_create resumed>) = 3 [pid 4912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 4914 attached [pid 4914] set_robust_list(0x55555748e5e0, 24) = 0 [pid 4913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4914] chdir("./152") = 0 [pid 4914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4914] setpgid(0, 0) = 0 [pid 4914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4914] write(3, "1000", 4) = 4 [pid 4914] close(3) = 0 [pid 4914] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4915 attached ) = 0 [pid 4915] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4915] memfd_create("syzkaller", 0 [pid 4914] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4915] <... memfd_create resumed>) = 3 [pid 4915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4914] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4914] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4913] <... write resumed>) = 1048576 [pid 4914] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4916], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4916 [pid 4905] <... write resumed>) = 1048576 [pid 4905] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4901] <... futex resumed>) = 0 [pid 4905] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4901] exit_group(0 [pid 4905] <... futex resumed>) = ? [pid 4901] <... exit_group resumed>) = ? [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4905] +++ exited with 0 +++ [pid 4901] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4901, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 4913] munmap(0x7f19b51e4000, 1048576 [pid 4912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] <... restart_syscall resumed>) = 0 [pid 4913] <... munmap resumed>) = 0 [pid 4913] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4913] <... openat resumed>) = 4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4913] ioctl(4, LOOP_SET_FD, 3 [pid 310] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 4916 attached [pid 4915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4913] <... ioctl resumed>) = 0 [pid 310] lstat("./152/binderfs", [pid 4913] close(3 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4913] <... close resumed>) = 0 [pid 310] unlink("./152/binderfs" [pid 4913] mkdir("./bus", 0777 [pid 310] <... unlink resumed>) = 0 [pid 4913] <... mkdir resumed>) = 0 [ 118.077713][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4916] set_robust_list(0x7f19bd6049e0, 24 [pid 4915] <... write resumed>) = 1048576 [pid 4913] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4912] <... write resumed>) = 1048576 [pid 4916] <... set_robust_list resumed>) = 0 [pid 4915] munmap(0x7f19b51e4000, 1048576 [pid 4912] munmap(0x7f19b51e4000, 1048576 [pid 4916] memfd_create("syzkaller", 0 [pid 4915] <... munmap resumed>) = 0 [pid 4912] <... munmap resumed>) = 0 [pid 4916] <... memfd_create resumed>) = 3 [pid 4915] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4912] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4915] <... openat resumed>) = 4 [pid 4912] <... openat resumed>) = 4 [pid 4916] <... mmap resumed>) = 0x7f19b51e4000 [pid 4915] ioctl(4, LOOP_SET_FD, 3 [pid 4912] ioctl(4, LOOP_SET_FD, 3 [pid 4916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4916] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4916] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4915] <... ioctl resumed>) = 0 [pid 4915] close(3) = 0 [pid 4915] mkdir("./bus", 0777) = 0 [pid 4915] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4912] <... ioctl resumed>) = 0 [pid 4912] close(3) = 0 [pid 4912] mkdir("./bus", 0777) = 0 [ 118.131998][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.145440][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 4912] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4916] <... openat resumed>) = 4 [pid 4916] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4916] close(3) = 0 [pid 4916] mkdir("./bus", 0777) = 0 [pid 4916] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4915] <... mount resumed>) = 0 [pid 4915] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4915] chdir("./bus") = 0 [pid 4915] ioctl(4, LOOP_CLR_FD [pid 4912] <... mount resumed>) = 0 [pid 4913] <... mount resumed>) = 0 [pid 4912] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4913] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4912] <... openat resumed>) = 3 [pid 4912] chdir("./bus") = 0 [pid 4913] <... openat resumed>) = 3 [pid 4913] chdir("./bus" [ 118.175452][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.195303][ T4912] ext4 filesystem being mounted at /root/syzkaller.URAKkl/154/bus supports timestamps until 2038 (0x7fffffff) [ 118.195310][ T4915] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/149/bus supports timestamps until 2038 (0x7fffffff) [ 118.214655][ T4913] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/151/bus supports timestamps until 2038 (0x7fffffff) [pid 4912] ioctl(4, LOOP_CLR_FD [pid 4913] <... chdir resumed>) = 0 [pid 4913] ioctl(4, LOOP_CLR_FD [pid 4916] <... mount resumed>) = 0 [pid 4916] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4916] chdir("./bus") = 0 [pid 4916] ioctl(4, LOOP_CLR_FD [pid 4915] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 4915] close(4 [pid 307] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./150/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./150/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./150") = 0 [pid 307] mkdir("./151", 0777) = 0 [ 118.232682][ T4916] ext4 filesystem being mounted at /root/syzkaller.69675s/152/bus supports timestamps until 2038 (0x7fffffff) [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4913] <... ioctl resumed>) = 0 [pid 4912] <... ioctl resumed>) = 0 [pid 4913] close(4 [pid 4912] close(4 [pid 4913] <... close resumed>) = 0 [pid 4912] <... close resumed>) = 0 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... futex resumed>) = 1 [pid 4912] <... futex resumed>) = 1 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4913] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4912] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4913] chdir("./file0" [pid 4912] chdir("./file0" [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] <... close resumed>) = 0 [pid 4913] <... chdir resumed>) = 0 [pid 4912] <... chdir resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] ioctl(3, LOOP_CLR_FD [pid 4913] <... futex resumed>) = 1 [pid 4912] <... futex resumed>) = 1 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4913] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4912] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 4913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 4913] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4912] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 4929 ./strace-static-x86_64: Process 4929 attached [pid 4929] set_robust_list(0x55555748e5e0, 24) = 0 [pid 4929] chdir("./151") = 0 [pid 4929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4929] setpgid(0, 0) = 0 [pid 4929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4929] write(3, "1000", 4) = 4 [pid 4929] close(3) = 0 [pid 4929] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4929] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4929] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4929] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4930], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4930 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4930 attached [pid 4930] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4930] memfd_create("syzkaller", 0) = 3 [pid 4930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4909] <... futex resumed>) = 0 [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4915] chdir("./file0" [pid 4909] <... futex resumed>) = 0 [pid 4916] <... ioctl resumed>) = 0 [pid 4915] <... chdir resumed>) = 0 [pid 4913] <... open resumed>) = 4 [pid 4912] <... open resumed>) = 4 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = 0 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... futex resumed>) = 1 [pid 4912] <... futex resumed>) = 1 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4913] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4912] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... mount resumed>) = 0 [pid 4912] <... mount resumed>) = 0 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4915] <... futex resumed>) = 0 [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4915] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4909] <... futex resumed>) = 0 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4913] <... futex resumed>) = 0 [pid 4912] <... futex resumed>) = 0 [pid 4911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4913] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4912] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... open resumed>) = 5 [pid 4912] <... open resumed>) = 5 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] <... open resumed>) = 4 [pid 4913] <... futex resumed>) = 0 [pid 4912] <... futex resumed>) = 0 [pid 4911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4910] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4913] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4912] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4916] close(4 [pid 4913] <... openat resumed>) = 6 [pid 4912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4915] <... futex resumed>) = 1 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4909] <... futex resumed>) = 0 [pid 4916] <... close resumed>) = 0 [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4913] <... futex resumed>) = 0 [pid 4912] <... openat resumed>) = 6 [pid 4911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4913] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] <... futex resumed>) = 0 [pid 4915] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4914] <... futex resumed>) = 0 [pid 4913] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4912] <... futex resumed>) = 1 [pid 4911] <... futex resumed>) = 0 [pid 4910] <... futex resumed>) = 0 [pid 4916] <... futex resumed>) = 1 [pid 4915] <... mount resumed>) = 0 [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4912] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4916] chdir("./file0" [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4914] <... futex resumed>) = 0 [pid 4913] <... write resumed>) = 262144 [pid 4912] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4910] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4912] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4916] <... chdir resumed>) = 0 [pid 4915] <... futex resumed>) = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4912] <... write resumed>) = 262144 [pid 4909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] lstat("./152/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4914] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4916] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 4915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] <... futex resumed>) = 0 [pid 4916] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./152/bus" [pid 4915] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4914] <... futex resumed>) = 0 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 4915] <... open resumed>) = 5 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./152" [pid 4916] <... open resumed>) = 4 [pid 4915] <... futex resumed>) = 1 [pid 4909] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./153", 0777 [pid 4916] <... futex resumed>) = 1 [pid 4915] <... openat resumed>) = 6 [pid 4914] <... futex resumed>) = 0 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] <... futex resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 4930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] <... futex resumed>) = 1 [pid 4910] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] <... futex resumed>) = 1 [pid 4912] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4911] <... futex resumed>) = 0 [pid 4910] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 4916] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4914] <... futex resumed>) = 0 [pid 4913] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4911] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4910] <... futex resumed>) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 4916] <... mount resumed>) = 0 [pid 4915] <... futex resumed>) = 1 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4911] <... futex resumed>) = 0 [pid 4910] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4909] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4930] <... write resumed>) = 1048576 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4911] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4916] <... futex resumed>) = 1 [pid 4915] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4914] <... futex resumed>) = 0 [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4931 [pid 4916] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4915] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] <... futex resumed>) = 0 [pid 4930] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4930] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4930] ioctl(4, LOOP_SET_FD, 3 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4914] <... futex resumed>) = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] <... write resumed>) = 262144 [pid 4930] <... ioctl resumed>) = 0 [pid 4916] <... open resumed>) = 5 [pid 4930] close(3) = 0 [pid 4930] mkdir("./bus", 0777) = 0 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4916] <... futex resumed>) = 1 [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4914] <... futex resumed>) = 0 [pid 4916] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4916] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4914] <... futex resumed>) = 0 [pid 4916] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4909] <... futex resumed>) = 0 [pid 4916] <... openat resumed>) = 6 [pid 4909] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4915] <... futex resumed>) = 1 [pid 4914] <... futex resumed>) = 0 [pid 4909] <... futex resumed>) = 0 [pid 4916] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4909] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4914] <... futex resumed>) = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4931 attached [pid 4916] <... write resumed>) = 262144 [pid 4915] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4930] <... mount resumed>) = 0 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4916] <... futex resumed>) = 1 [pid 4914] <... futex resumed>) = 0 [pid 4914] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4914] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4916] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4930] <... openat resumed>) = 3 [pid 4911] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4910] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4930] chdir("./bus") = 0 [pid 4931] set_robust_list(0x55555748e5e0, 24 [pid 4930] ioctl(4, LOOP_CLR_FD [pid 4931] <... set_robust_list resumed>) = 0 [pid 4931] chdir("./153") = 0 [pid 4931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4931] setpgid(0, 0) = 0 [pid 4930] <... ioctl resumed>) = 0 [pid 4930] close(4 [pid 4912] <... write resumed>) = 1048576 [pid 4931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4931] write(3, "1000", 4) = 4 [pid 4931] close(3) = 0 [pid 4931] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4931] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4931] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4935], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4935 [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4930] <... close resumed>) = 0 [pid 4913] <... write resumed>) = 1048576 [pid 4912] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4913] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4912] <... futex resumed>) = 0 [pid 4910] exit_group(0 [pid 4930] <... futex resumed>) = 1 [pid 4929] <... futex resumed>) = 0 [pid 4913] <... futex resumed>) = 0 [pid 4910] <... exit_group resumed>) = ? [pid 4909] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4930] chdir("./file0" [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4911] exit_group(0 [pid 4929] <... futex resumed>) = 0 [pid 4911] <... exit_group resumed>) = ? [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4930] <... chdir resumed>) = 0 [pid 4912] +++ exited with 0 +++ [pid 4910] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4910, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... restart_syscall resumed>) = 0 [pid 306] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./154/binderfs" [pid 4930] <... futex resumed>) = 1 [pid 4929] <... futex resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 118.397004][ T4930] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/151/bus supports timestamps until 2038 (0x7fffffff) [pid 306] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4935 attached [pid 4930] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4929] <... futex resumed>) = 0 [pid 4935] set_robust_list(0x7f19bd6049e0, 24 [pid 4930] <... open resumed>) = 4 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4913] +++ exited with 0 +++ [pid 4911] +++ exited with 0 +++ [pid 4935] <... set_robust_list resumed>) = 0 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4916] <... write resumed>) = 1048576 [pid 4915] <... write resumed>) = 1048576 [pid 4914] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4911, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4935] memfd_create("syzkaller", 0 [pid 4930] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4915] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4935] <... memfd_create resumed>) = 3 [pid 4930] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4929] <... futex resumed>) = 0 [pid 4915] <... futex resumed>) = 0 [pid 4935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4930] <... mount resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4935] <... mmap resumed>) = 0x7f19b51e4000 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4930] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4929] <... futex resumed>) = 0 [pid 4916] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4914] exit_group(0 [pid 4930] <... open resumed>) = 5 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4930] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4929] <... futex resumed>) = 0 [pid 4930] <... openat resumed>) = 6 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4916] <... futex resumed>) = ? [pid 4914] <... exit_group resumed>) = ? [pid 4909] exit_group(0 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4930] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4930] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4929] <... futex resumed>) = 0 [pid 4916] +++ exited with 0 +++ [pid 4935] <... write resumed>) = 1048576 [pid 4915] <... futex resumed>) = ? [pid 4914] +++ exited with 0 +++ [pid 4909] <... exit_group resumed>) = ? [pid 4935] munmap(0x7f19b51e4000, 1048576 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4914, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4935] <... munmap resumed>) = 0 [pid 4935] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 305] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4935] <... openat resumed>) = 4 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4935] ioctl(4, LOOP_SET_FD, 3 [pid 305] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] unlink("./151/binderfs" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 308] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4930] <... write resumed>) = 262144 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... openat resumed>) = 3 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4929] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4930] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 118.443927][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.465294][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 4930] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4929] <... futex resumed>) = 0 [pid 4929] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4915] +++ exited with 0 +++ [pid 4909] +++ exited with 0 +++ [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4935] <... ioctl resumed>) = 0 [pid 4935] close(3) = 0 [pid 4935] mkdir("./bus", 0777) = 0 [pid 4935] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4930] <... write resumed>) = 1048576 [pid 4930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4929] <... futex resumed>) = 0 [pid 4930] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4929] exit_group(0 [pid 4930] <... futex resumed>) = ? [pid 4929] <... exit_group resumed>) = ? [pid 4930] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4909, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./149", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./149", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./149/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./149/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./149/binderfs") = 0 [pid 309] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./152/binderfs") = 0 [ 118.488660][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.512318][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.525329][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 4929] +++ exited with 0 +++ [pid 306] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./154/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4929, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, [pid 307] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... openat resumed>) = 3 [pid 306] getdents64(4, [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./154/bus" [pid 307] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] <... rmdir resumed>) = 0 [pid 307] lstat("./151/binderfs", [pid 306] getdents64(3, [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 307] unlink("./151/binderfs" [pid 306] <... close resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [ 118.538217][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 118.547143][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 118.551826][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] rmdir("./154" [pid 307] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... rmdir resumed>) = 0 [pid 306] mkdir("./155", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 4935] <... mount resumed>) = 0 [pid 4935] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4935] chdir("./bus") = 0 [pid 4935] ioctl(4, LOOP_CLR_FD [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./151/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./151/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./151") = 0 [pid 305] mkdir("./152", 0777) = 0 [ 118.594587][ T4935] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/153/bus supports timestamps until 2038 (0x7fffffff) [ 118.606455][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.619930][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 4939 ./strace-static-x86_64: Process 4939 attached [pid 4935] <... ioctl resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 4939] set_robust_list(0x55555748e5e0, 24 [pid 4935] close(4 [pid 309] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] ioctl(3, LOOP_CLR_FD [pid 4939] <... set_robust_list resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4939] chdir("./155" [pid 309] lstat("./149/bus", [pid 308] lstat("./152/bus", [pid 4939] <... chdir resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] umount2("./149/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, [pid 4939] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 309] openat(AT_FDCWD, "./149/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... close resumed>) = 0 [pid 4939] <... prctl resumed>) = 0 [pid 308] rmdir("./152/bus" [pid 309] <... openat resumed>) = 4 [pid 4939] setpgid(0, 0 [pid 308] <... rmdir resumed>) = 0 [pid 309] fstat(4, [pid 308] getdents64(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3 [pid 309] getdents64(4, [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./152" [pid 4939] <... setpgid resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./153", 0777 [pid 4939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] getdents64(4, [pid 308] <... mkdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 309] close(4) = 0 [pid 309] rmdir("./149/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./149") = 0 [pid 309] mkdir("./150", 0777) = 0 [pid 4939] <... openat resumed>) = 3 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4939] write(3, "1000", 4) = 4 [pid 4939] close(3) = 0 [pid 4939] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4939] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4939] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4940 attached [pid 4940] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4939] <... clone resumed>, parent_tid=[4940], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4940 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./151/bus", [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4939] <... futex resumed>) = 1 [pid 4935] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] close(3 [pid 4935] <... futex resumed>) = 1 [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4931] <... futex resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 4931] <... futex resumed>) = 1 [pid 308] <... close resumed>) = 0 [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4935] <... futex resumed>) = 0 [pid 4935] chdir("./file0" [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4941 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4942 [pid 4935] <... chdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4931] <... futex resumed>) = 0 [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... openat resumed>) = 4 [pid 4935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4935] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4931] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4935] <... open resumed>) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4931] <... futex resumed>) = 0 [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4931] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 4935] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 4935] <... mount resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4931] <... futex resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4931] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4935] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4943 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4931] <... futex resumed>) = 0 [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4935] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4931] <... futex resumed>) = 0 [pid 4935] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 0 [pid 4940] memfd_create("syzkaller", 0 [pid 4935] <... openat resumed>) = 6 [pid 4940] <... memfd_create resumed>) = 3 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4935] <... futex resumed>) = 1 [pid 4931] <... futex resumed>) = 0 [pid 4940] <... mmap resumed>) = 0x7f19b51e4000 [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 4935] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4931] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4941 attached [pid 4941] set_robust_list(0x55555748e5e0, 24) = 0 [pid 4941] chdir("./152" [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] <... chdir resumed>) = 0 [pid 4941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4941] setpgid(0, 0) = 0 [pid 4941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 4943 attached [pid 4943] set_robust_list(0x55555748e5e0, 24 [pid 4941] write(3, "1000", 4) = 4 [pid 4943] <... set_robust_list resumed>) = 0 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 4941] close(3) = 0 [pid 4941] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4943] chdir("./150" [pid 307] close(4) = 0 [pid 4943] <... chdir resumed>) = 0 [pid 307] rmdir("./151/bus" [pid 4943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4943] setpgid(0, 0) = 0 [pid 4943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... rmdir resumed>) = 0 [pid 4943] <... openat resumed>) = 3 [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4941] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 307] getdents64(3, [pid 4941] <... mprotect resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4941] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] close(3 [pid 4943] write(3, "1000", 4 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./151" [pid 4943] <... write resumed>) = 4 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./152", 0777 [pid 4943] close(3) = 0 [pid 4943] symlink("/dev/binderfs", "./binderfs") = 0 [pid 307] <... mkdir resumed>) = 0 [pid 4941] <... clone resumed>, parent_tid=[4944], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4944 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 4943] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... openat resumed>) = 3 [pid 4943] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 307] ioctl(3, LOOP_CLR_FD [pid 4943] <... mprotect resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4943] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] close(3) = 0 [pid 4943] <... clone resumed>, parent_tid=[4945], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4945 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4946 ./strace-static-x86_64: Process 4946 attached [pid 4946] set_robust_list(0x55555748e5e0, 24) = 0 [pid 4946] chdir("./152") = 0 [pid 4946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4946] setpgid(0, 0) = 0 [pid 4946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4935] <... write resumed>) = 262144 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4931] <... futex resumed>) = 0 ./strace-static-x86_64: Process 4942 attached [pid 4935] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4946] write(3, "1000", 4 [pid 4931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4946] <... write resumed>) = 4 [pid 4946] close(3) = 0 [pid 4946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4945 attached ) = 0 [pid 4946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4945] set_robust_list(0x7f19bd6049e0, 24 [pid 4946] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4945] <... set_robust_list resumed>) = 0 [pid 4946] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4945] memfd_create("syzkaller", 0 [pid 4946] <... mprotect resumed>) = 0 [pid 4945] <... memfd_create resumed>) = 3 [pid 4946] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4942] set_robust_list(0x55555748e5e0, 24 [pid 4940] <... write resumed>) = 1048576 [pid 4945] <... mmap resumed>) = 0x7f19b51e4000 ./strace-static-x86_64: Process 4944 attached [pid 4946] <... clone resumed>, parent_tid=[4947], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4947 [pid 4942] <... set_robust_list resumed>) = 0 [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4940] munmap(0x7f19b51e4000, 1048576 [pid 4942] chdir("./153" [pid 4944] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4942] <... chdir resumed>) = 0 [pid 4940] <... munmap resumed>) = 0 [pid 4940] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 4940] ioctl(4, LOOP_SET_FD, 3 [pid 4944] memfd_create("syzkaller", 0 [pid 4942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4944] <... memfd_create resumed>) = 3 [pid 4942] setpgid(0, 0 [pid 4944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4942] <... setpgid resumed>) = 0 [pid 4944] <... mmap resumed>) = 0x7f19b51e4000 ./strace-static-x86_64: Process 4947 attached [pid 4942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4947] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4947] memfd_create("syzkaller", 0) = 3 [pid 4947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4942] <... openat resumed>) = 3 [pid 4942] write(3, "1000", 4) = 4 [pid 4942] close(3 [pid 4940] <... ioctl resumed>) = 0 [pid 4940] close(3) = 0 [pid 4940] mkdir("./bus", 0777) = 0 [pid 4940] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4942] <... close resumed>) = 0 [pid 4942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4942] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4942] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4949], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4949 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4949 attached [pid 4949] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4949] memfd_create("syzkaller", 0) = 3 [pid 4949] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4945] <... write resumed>) = 1048576 [pid 4945] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4945] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 4945] ioctl(4, LOOP_SET_FD, 3 [pid 4944] <... write resumed>) = 1048576 [pid 4944] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4945] <... ioctl resumed>) = 0 [pid 4944] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4935] <... write resumed>) = 1048576 [pid 4931] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4945] close(3) = 0 [pid 4945] mkdir("./bus", 0777) = 0 [pid 4945] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4944] <... openat resumed>) = 4 [pid 4935] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] ioctl(4, LOOP_SET_FD, 3 [pid 4935] <... futex resumed>) = 0 [pid 4935] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4931] exit_group(0) = ? [pid 4935] <... futex resumed>) = ? [pid 4949] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4947] <... write resumed>) = 1048576 [pid 4944] <... ioctl resumed>) = 0 [pid 4949] <... write resumed>) = 1048576 [pid 4940] <... mount resumed>) = 0 [pid 4940] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4940] chdir("./bus") = 0 [pid 4940] ioctl(4, LOOP_CLR_FD) = 0 [pid 4940] close(4) = 0 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] chdir("./file0" [pid 4949] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4940] <... chdir resumed>) = 0 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4949] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 4949] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4949] close(3) = 0 [pid 4949] mkdir("./bus", 0777 [pid 4944] close(3) = 0 [pid 4944] mkdir("./bus", 0777) = 0 [pid 4944] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4940] <... open resumed>) = 4 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4935] +++ exited with 0 +++ [pid 4931] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4931, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4947] munmap(0x7f19b51e4000, 1048576 [pid 310] <... openat resumed>) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 4947] <... munmap resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./153/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./153/binderfs" [pid 4947] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4940] <... mount resumed>) = 0 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4949] <... mkdir resumed>) = 0 [pid 4949] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4940] <... openat resumed>) = 6 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4939] <... futex resumed>) = 0 [pid 4940] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 118.830153][ T4940] ext4 filesystem being mounted at /root/syzkaller.URAKkl/155/bus supports timestamps until 2038 (0x7fffffff) [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4947] <... openat resumed>) = 4 [pid 4947] ioctl(4, LOOP_SET_FD, 3 [pid 4940] <... write resumed>) = 262144 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4939] <... futex resumed>) = 0 [pid 4939] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4939] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4940] <... futex resumed>) = 1 [pid 4940] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4947] <... ioctl resumed>) = 0 [ 118.870282][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 118.896022][ T4945] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/150/bus supports timestamps until 2038 (0x7fffffff) [ 118.904870][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 4947] close(3) = 0 [pid 4945] <... mount resumed>) = 0 [pid 4947] mkdir("./bus", 0777 [pid 4949] <... mount resumed>) = 0 [pid 4949] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4949] chdir("./bus") = 0 [pid 4949] ioctl(4, LOOP_CLR_FD [pid 4947] <... mkdir resumed>) = 0 [pid 4949] <... ioctl resumed>) = 0 [pid 4949] close(4 [pid 4947] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4945] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4949] <... close resumed>) = 0 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] chdir("./file0") = 0 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4939] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4949] <... open resumed>) = 4 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4942] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4942] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4949] <... futex resumed>) = 1 [pid 4949] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4945] <... openat resumed>) = 3 [pid 4945] chdir("./bus") = 0 [pid 4945] ioctl(4, LOOP_CLR_FD [pid 4944] <... mount resumed>) = 0 [pid 4940] <... write resumed>) = 1048576 [pid 4940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4939] exit_group(0) = ? [pid 4940] <... futex resumed>) = ? [pid 4940] +++ exited with 0 +++ [pid 4944] <... openat resumed>) = 3 [pid 4944] chdir("./bus") = 0 [ 118.915368][ T4949] ext4 filesystem being mounted at /root/syzkaller.69675s/153/bus supports timestamps until 2038 (0x7fffffff) [ 118.935542][ T4944] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/152/bus supports timestamps until 2038 (0x7fffffff) [pid 4944] ioctl(4, LOOP_CLR_FD [pid 4949] <... write resumed>) = 1048576 [pid 4949] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4942] <... futex resumed>) = 0 [pid 4949] <... futex resumed>) = 1 [pid 4942] exit_group(0 [pid 4949] ????( [pid 4942] <... exit_group resumed>) = ? [pid 4949] <... ???? resumed>) = ? [pid 4947] <... mount resumed>) = 0 [pid 4947] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4947] chdir("./bus") = 0 [pid 4947] ioctl(4, LOOP_CLR_FD [pid 4945] <... ioctl resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 4939] +++ exited with 0 +++ [pid 4945] close(4 [pid 4944] <... ioctl resumed>) = 0 [pid 4945] <... close resumed>) = 0 [pid 4944] close(4 [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] <... close resumed>) = 0 [pid 4945] <... futex resumed>) = 1 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] <... futex resumed>) = 1 [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./153/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 4949] +++ exited with 0 +++ [pid 4943] <... futex resumed>) = 0 [pid 4942] +++ exited with 0 +++ [pid 4941] <... futex resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4939, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] <... futex resumed>) = 0 [pid 4944] <... futex resumed>) = 0 [pid 4943] <... futex resumed>) = 1 [pid 4941] <... futex resumed>) = 1 [pid 310] getdents64(4, [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4942, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 4947] <... ioctl resumed>) = 0 [pid 4945] chdir("./file0" [pid 4944] chdir("./file0" [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 306] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4947] close(4 [pid 4945] <... chdir resumed>) = 0 [pid 4944] <... chdir resumed>) = 0 [pid 310] close(4 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4947] <... close resumed>) = 0 [pid 4945] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 306] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4947] <... futex resumed>) = 1 [pid 4946] <... futex resumed>) = 0 [pid 4945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] rmdir("./153/bus" [pid 306] <... openat resumed>) = 3 [pid 4947] chdir("./file0" [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4944] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 308] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] fstat(3, [pid 4947] <... chdir resumed>) = 0 [pid 4946] <... futex resumed>) = 0 [pid 4945] <... open resumed>) = 4 [pid 4944] <... open resumed>) = 4 [pid 310] getdents64(3, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(3, [pid 4947] <... futex resumed>) = 0 [pid 4946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4945] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] close(3 [pid 4947] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 4946] <... futex resumed>) = 0 [pid 4945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] rmdir("./153" [pid 308] fstat(3, [pid 4947] <... open resumed>) = 4 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4944] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4945] <... mount resumed>) = 0 [pid 4944] <... mount resumed>) = 0 [pid 310] mkdir("./154", 0777 [pid 308] getdents64(3, [pid 4947] <... futex resumed>) = 0 [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... mkdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4947] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4946] <... futex resumed>) = 0 [pid 4945] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4947] <... mount resumed>) = 0 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./155/binderfs", [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4946] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 308] lstat("./153/binderfs", [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4947] <... futex resumed>) = 0 [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4944] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4947] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4946] <... futex resumed>) = 0 [pid 4945] <... open resumed>) = 5 [pid 4944] <... open resumed>) = 5 [pid 310] close(3 [pid 308] unlink("./153/binderfs" [pid 306] unlink("./155/binderfs" [pid 4947] <... open resumed>) = 5 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 4947] <... futex resumed>) = 1 [pid 4946] <... futex resumed>) = 0 [ 118.969800][ T4947] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/152/bus supports timestamps until 2038 (0x7fffffff) [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4964 attached [pid 4947] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4944] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4964 [pid 4947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4946] <... futex resumed>) = 0 [pid 4945] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4944] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4964] set_robust_list(0x55555748e5e0, 24 [pid 4947] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] <... openat resumed>) = 6 [pid 4944] <... openat resumed>) = 6 [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4964] <... set_robust_list resumed>) = 0 [pid 4947] <... openat resumed>) = 6 [pid 4945] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 0 [pid 4964] chdir("./154" [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4945] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4943] <... futex resumed>) = 0 [pid 4945] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] <... write resumed>) = 262144 [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4945] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4943] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4943] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4964] <... chdir resumed>) = 0 [pid 4947] <... futex resumed>) = 1 [pid 4946] <... futex resumed>) = 0 [pid 4941] <... futex resumed>) = 1 [pid 4944] <... futex resumed>) = 0 [pid 4964] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4947] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4964] <... prctl resumed>) = 0 [pid 4947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4946] <... futex resumed>) = 0 [pid 4944] <... write resumed>) = 262144 [pid 4947] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4964] setpgid(0, 0) = 0 [ 119.012220][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 119.028949][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 4964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4947] <... write resumed>) = 262144 [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4964] <... openat resumed>) = 3 [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4944] <... futex resumed>) = 1 [pid 4941] <... futex resumed>) = 0 [pid 4964] write(3, "1000", 4 [pid 4947] <... futex resumed>) = 1 [pid 4946] <... futex resumed>) = 0 [pid 4944] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4941] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4964] <... write resumed>) = 4 [pid 4947] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4946] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4941] <... futex resumed>) = 0 [pid 4964] close(3 [pid 4946] <... futex resumed>) = 0 [pid 4941] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4964] <... close resumed>) = 0 [pid 4946] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4945] <... write resumed>) = 1048576 [pid 4964] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4945] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4964] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4964] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4945] <... futex resumed>) = 1 [pid 4943] <... futex resumed>) = 0 [pid 4945] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 119.054748][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 4943] exit_group(0./strace-static-x86_64: Process 4965 attached [pid 4964] <... clone resumed>, parent_tid=[4965], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4965 [pid 4945] <... futex resumed>) = ? [pid 4944] <... write resumed>) = 1048576 [pid 4943] <... exit_group resumed>) = ? [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4965] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4965] memfd_create("syzkaller", 0) = 3 [pid 4965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4947] <... write resumed>) = 1048576 [pid 4947] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4946] <... futex resumed>) = 0 [pid 4946] exit_group(0) = ? [pid 4944] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4944] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4941] <... futex resumed>) = 0 [pid 4941] exit_group(0 [pid 4944] <... futex resumed>) = ? [pid 4941] <... exit_group resumed>) = ? [pid 4947] <... futex resumed>) = ? [pid 4965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 4965] munmap(0x7f19b51e4000, 1048576 [pid 4947] +++ exited with 0 +++ [pid 4946] +++ exited with 0 +++ [pid 4945] +++ exited with 0 +++ [pid 4944] +++ exited with 0 +++ [pid 4943] +++ exited with 0 +++ [pid 4941] +++ exited with 0 +++ [pid 308] <... umount2 resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4946, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 307] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./152/binderfs") = 0 [ 119.090971][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4965] <... munmap resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4943, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4941, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4965] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./153/bus", [pid 309] umount2("./150", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./150", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 308] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] fstat(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 4 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 308] fstat(4, [pid 305] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./150/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(4, [pid 305] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./150/binderfs", [pid 308] getdents64(4, [pid 305] lstat("./152/binderfs", [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./150/binderfs" [pid 308] close(4 [pid 305] unlink("./152/binderfs" [pid 309] <... unlink resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 309] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] rmdir("./153/bus" [pid 305] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... rmdir resumed>) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./153") = 0 [pid 308] mkdir("./154", 0777) = 0 [ 119.130166][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 119.144456][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 119.157552][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 119.170646][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4965] <... openat resumed>) = 4 [pid 308] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 4965] ioctl(4, LOOP_SET_FD, 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./155/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./155/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./155") = 0 [pid 306] mkdir("./156", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4965] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4965] close(3 [pid 308] close(3 [pid 307] lstat("./152/bus", [pid 306] <... openat resumed>) = 3 [pid 4965] <... close resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4965] mkdir("./bus", 0777 [pid 307] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4965] <... mkdir resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] ioctl(3, LOOP_CLR_FD [pid 4965] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./152/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./152") = 0 [pid 307] mkdir("./153", 0777) = 0 [ 119.176703][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 119.184933][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 308] <... close resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4967 [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] close(3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4968 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 4968 attached ./strace-static-x86_64: Process 4967 attached ) = -1 EINVAL (Invalid argument) [pid 4968] set_robust_list(0x55555748e5e0, 24 [pid 309] lstat("./150/bus", [pid 4967] set_robust_list(0x55555748e5e0, 24 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4968] <... set_robust_list resumed>) = 0 [pid 4967] <... set_robust_list resumed>) = 0 [pid 309] umount2("./150/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./150/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, [pid 4968] chdir("./153" [pid 4967] chdir("./154" [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 4968] <... chdir resumed>) = 0 [pid 4967] <... chdir resumed>) = 0 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4 [pid 4965] <... mount resumed>) = 0 [pid 4965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4965] chdir("./bus") = 0 [pid 4965] ioctl(4, LOOP_CLR_FD [pid 309] <... close resumed>) = 0 [pid 4968] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4967] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] rmdir("./150/bus" [pid 4968] <... prctl resumed>) = 0 [pid 4967] <... prctl resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 309] getdents64(3, [pid 4967] setpgid(0, 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4968] setpgid(0, 0 [pid 4967] <... setpgid resumed>) = 0 [pid 309] close(3 [pid 4968] <... setpgid resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 4967] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] rmdir("./150" [pid 4968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4967] <... openat resumed>) = 3 [pid 309] <... rmdir resumed>) = 0 [pid 4968] <... openat resumed>) = 3 [pid 4967] write(3, "1000", 4 [pid 309] mkdir("./151", 0777 [pid 4968] write(3, "1000", 4 [pid 4967] <... write resumed>) = 4 [pid 309] <... mkdir resumed>) = 0 [pid 4968] <... write resumed>) = 4 [pid 4967] close(3 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4968] close(3 [pid 4967] <... close resumed>) = 0 [pid 4968] <... close resumed>) = 0 [pid 4967] symlink("/dev/binderfs", "./binderfs" [pid 4968] symlink("/dev/binderfs", "./binderfs" [pid 4967] <... symlink resumed>) = 0 [pid 4968] <... symlink resumed>) = 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4967] <... futex resumed>) = 0 [pid 4968] <... futex resumed>) = 0 [pid 4967] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4967] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4968] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4967] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4968] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4967] <... mprotect resumed>) = 0 [pid 4968] <... mprotect resumed>) = 0 [pid 4967] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4968] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 4971 attached [pid 4971] set_robust_list(0x7f19bd6049e0, 24 [pid 4967] <... clone resumed>, parent_tid=[4971], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4971 ./strace-static-x86_64: Process 4972 attached [pid 4972] set_robust_list(0x7f19bd6049e0, 24 [pid 4971] <... set_robust_list resumed>) = 0 [pid 4968] <... clone resumed>, parent_tid=[4972], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4972 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 4971] memfd_create("syzkaller", 0) = 3 [pid 4971] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./152/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./152/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4965] <... ioctl resumed>) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./152" [pid 4965] close(4 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4973 [pid 4965] <... close resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4964] <... futex resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4964] <... futex resumed>) = 0 [pid 4965] chdir("./file0" [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... rmdir resumed>) = 0 [pid 305] mkdir("./153", 0777 [pid 4965] <... chdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 4965] <... futex resumed>) = 1 [pid 4964] <... futex resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] ioctl(3, LOOP_CLR_FD [pid 4965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4964] <... futex resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4967] <... futex resumed>) = 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4965] <... open resumed>) = 4 [pid 309] close(3 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4964] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4964] <... futex resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4965] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4965] <... mount resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 3 [pid 4965] <... futex resumed>) = 1 [pid 4964] <... futex resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4964] <... futex resumed>) = 0 [pid 4965] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] ioctl(3, LOOP_CLR_FD [pid 4965] <... open resumed>) = 5 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4964] <... futex resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4964] <... futex resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4965] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] close(3) = 0 [pid 4965] <... openat resumed>) = 6 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4974 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4964] <... futex resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4964] <... futex resumed>) = 0 [pid 4972] <... set_robust_list resumed>) = 0 [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] memfd_create("syzkaller", 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4975 [pid 4972] <... memfd_create resumed>) = 3 [pid 4972] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4972] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4965] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4971] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4965] <... write resumed>) = 262144 ./strace-static-x86_64: Process 4973 attached ./strace-static-x86_64: Process 4975 attached [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 4974 attached [pid 4975] set_robust_list(0x55555748e5e0, 24 [pid 4974] set_robust_list(0x55555748e5e0, 24 [pid 4973] set_robust_list(0x55555748e5e0, 24 [pid 4965] <... futex resumed>) = 1 [pid 4964] <... futex resumed>) = 0 [pid 4975] <... set_robust_list resumed>) = 0 [pid 4974] <... set_robust_list resumed>) = 0 [pid 4973] <... set_robust_list resumed>) = 0 [pid 4965] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4973] chdir("./156" [pid 4975] chdir("./153" [pid 4973] <... chdir resumed>) = 0 [pid 4975] <... chdir resumed>) = 0 [pid 4974] chdir("./151" [ 119.275329][ T4965] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/154/bus supports timestamps until 2038 (0x7fffffff) [pid 4973] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4973] <... prctl resumed>) = 0 [pid 4974] <... chdir resumed>) = 0 [pid 4975] <... prctl resumed>) = 0 [pid 4974] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4973] setpgid(0, 0 [pid 4975] setpgid(0, 0 [pid 4974] <... prctl resumed>) = 0 [pid 4973] <... setpgid resumed>) = 0 [pid 4973] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4975] <... setpgid resumed>) = 0 [pid 4974] setpgid(0, 0 [pid 4973] <... openat resumed>) = 3 [pid 4975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4974] <... setpgid resumed>) = 0 [pid 4973] write(3, "1000", 4) = 4 [pid 4975] <... openat resumed>) = 3 [pid 4973] close(3 [pid 4975] write(3, "1000", 4 [pid 4974] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4973] <... close resumed>) = 0 [pid 4973] symlink("/dev/binderfs", "./binderfs" [pid 4975] <... write resumed>) = 4 [pid 4973] <... symlink resumed>) = 0 [pid 4975] close(3 [pid 4974] <... openat resumed>) = 3 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4975] <... close resumed>) = 0 [pid 4974] write(3, "1000", 4 [pid 4973] <... futex resumed>) = 0 [pid 4975] symlink("/dev/binderfs", "./binderfs" [pid 4974] <... write resumed>) = 4 [pid 4973] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4975] <... symlink resumed>) = 0 [pid 4974] close(3 [pid 4973] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] <... close resumed>) = 0 [pid 4973] <... mprotect resumed>) = 0 [pid 4975] <... futex resumed>) = 0 [pid 4974] symlink("/dev/binderfs", "./binderfs" [pid 4973] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4974] <... symlink resumed>) = 0 [pid 4972] <... write resumed>) = 1048576 [pid 4971] <... write resumed>) = 1048576 [pid 4975] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4973] <... clone resumed>, parent_tid=[4976], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4976 [pid 4975] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4975] <... mprotect resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4975] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4974] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 4973] <... futex resumed>) = 0 [pid 4971] munmap(0x7f19b51e4000, 1048576 [pid 4974] <... mmap resumed>) = 0x7f19bd5e4000 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4971] <... munmap resumed>) = 0 [pid 4975] <... clone resumed>, parent_tid=[4977], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4977 [pid 4974] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 4971] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] <... mprotect resumed>) = 0 [pid 4971] <... openat resumed>) = 4 [pid 4975] <... futex resumed>) = 0 [pid 4974] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 4971] ioctl(4, LOOP_SET_FD, 3 [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4974] <... clone resumed>, parent_tid=[4978], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4978 [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 4976 attached [pid 4976] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4976] memfd_create("syzkaller", 0 [pid 4971] <... ioctl resumed>) = 0 [pid 4976] <... memfd_create resumed>) = 3 [pid 4971] close(3 [pid 4976] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4971] <... close resumed>) = 0 [pid 4976] <... mmap resumed>) = 0x7f19b51e4000 [pid 4971] mkdir("./bus", 0777 [pid 4976] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4971] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 4977 attached [pid 4971] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4977] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4977] memfd_create("syzkaller", 0) = 3 [pid 4977] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 4972] munmap(0x7f19b51e4000, 1048576./strace-static-x86_64: Process 4978 attached [pid 4977] <... mmap resumed>) = 0x7f19b51e4000 [pid 4972] <... munmap resumed>) = 0 [pid 4977] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4978] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4972] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 4972] ioctl(4, LOOP_SET_FD, 3 [pid 4978] memfd_create("syzkaller", 0) = 3 [pid 4978] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4972] <... ioctl resumed>) = 0 [pid 4972] close(3) = 0 [pid 4972] mkdir("./bus", 0777) = 0 [pid 4972] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4976] <... write resumed>) = 1048576 [pid 4976] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4977] <... write resumed>) = 1048576 [pid 4976] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 4978] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 4977] munmap(0x7f19b51e4000, 1048576 [pid 4965] <... write resumed>) = 1048576 [pid 4977] <... munmap resumed>) = 0 [pid 4976] ioctl(4, LOOP_SET_FD, 3 [pid 4977] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4971] <... mount resumed>) = 0 [pid 4971] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4971] chdir("./bus") = 0 [pid 4971] ioctl(4, LOOP_CLR_FD [pid 4978] <... write resumed>) = 1048576 [pid 4978] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4972] <... mount resumed>) = 0 [pid 4965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] <... openat resumed>) = 4 [pid 4976] <... ioctl resumed>) = 0 [pid 4977] ioctl(4, LOOP_SET_FD, 3 [pid 4976] close(3) = 0 [pid 4976] mkdir("./bus", 0777 [pid 4978] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 4976] <... mkdir resumed>) = 0 [pid 4972] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4965] <... futex resumed>) = 0 [pid 4977] <... ioctl resumed>) = 0 [pid 4972] <... openat resumed>) = 3 [pid 4965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4964] exit_group(0 [pid 4977] close(3 [pid 4976] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4972] chdir("./bus" [pid 4965] <... futex resumed>) = ? [pid 4964] <... exit_group resumed>) = ? [pid 4978] <... openat resumed>) = 4 [pid 4977] <... close resumed>) = 0 [pid 4972] <... chdir resumed>) = 0 [pid 4971] <... ioctl resumed>) = 0 [pid 4965] +++ exited with 0 +++ [pid 4964] +++ exited with 0 +++ [pid 4972] ioctl(4, LOOP_CLR_FD [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4964, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 4972] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 4972] close(4) = 0 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4972] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... restart_syscall resumed>) = 0 [pid 310] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4968] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./154/binderfs") = 0 [pid 310] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4978] ioctl(4, LOOP_SET_FD, 3 [pid 4977] mkdir("./bus", 0777 [pid 4971] close(4 [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] <... mkdir resumed>) = 0 [pid 4968] <... futex resumed>) = 1 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] <... futex resumed>) = 0 [pid 4972] chdir("./file0") = 0 [pid 4977] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4971] <... close resumed>) = 0 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4968] <... futex resumed>) = 0 [pid 4972] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4972] <... open resumed>) = 4 [pid 4971] <... futex resumed>) = 1 [pid 4968] <... futex resumed>) = 0 [pid 4967] <... futex resumed>) = 0 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] <... futex resumed>) = 0 [pid 4968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4971] chdir("./file0" [pid 4972] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] <... chdir resumed>) = 0 [pid 4972] <... mount resumed>) = 0 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4968] <... futex resumed>) = 0 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] <... futex resumed>) = 0 [pid 4968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4972] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4971] <... futex resumed>) = 1 [pid 4967] <... futex resumed>) = 0 [pid 4971] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 119.398380][ T4971] ext4 filesystem being mounted at /root/syzkaller.69675s/154/bus supports timestamps until 2038 (0x7fffffff) [ 119.401489][ T4972] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/153/bus supports timestamps until 2038 (0x7fffffff) [ 119.431051][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4978] <... ioctl resumed>) = 0 [pid 4971] <... open resumed>) = 4 [pid 4978] close(3 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... close resumed>) = 0 [pid 4971] <... futex resumed>) = 1 [pid 4967] <... futex resumed>) = 0 [pid 4978] mkdir("./bus", 0777 [pid 4971] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... mkdir resumed>) = 0 [pid 4971] <... mount resumed>) = 0 [pid 4967] <... futex resumed>) = 0 [pid 4978] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4971] <... futex resumed>) = 0 [pid 4967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4971] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] <... open resumed>) = 5 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] <... open resumed>) = 5 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4967] <... futex resumed>) = 0 [pid 4971] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] <... openat resumed>) = 6 [pid 4967] <... futex resumed>) = 0 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4971] <... futex resumed>) = 0 [pid 4967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4971] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] <... write resumed>) = 262144 [pid 4967] <... futex resumed>) = 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4967] <... futex resumed>) = 0 [pid 4967] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4967] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4971] <... futex resumed>) = 1 [pid 4971] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4976] <... mount resumed>) = 0 [pid 4972] <... futex resumed>) = 1 [pid 4968] <... futex resumed>) = 0 [pid 4976] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4972] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... openat resumed>) = 3 [pid 4972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4968] <... futex resumed>) = 0 [pid 4976] chdir("./bus" [pid 4972] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4976] <... chdir resumed>) = 0 [pid 4972] <... openat resumed>) = 6 [pid 4976] ioctl(4, LOOP_CLR_FD [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... ioctl resumed>) = 0 [pid 4972] <... futex resumed>) = 1 [pid 4968] <... futex resumed>) = 0 [pid 4976] close(4 [pid 4972] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... close resumed>) = 0 [pid 4972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4968] <... futex resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4973] <... futex resumed>) = 0 [pid 4972] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4976] chdir("./file0") = 0 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4973] <... futex resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4973] <... futex resumed>) = 0 [pid 4976] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4976] <... open resumed>) = 4 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4973] <... futex resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4973] <... futex resumed>) = 0 [pid 4976] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4976] <... mount resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4973] <... futex resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4973] <... futex resumed>) = 0 [pid 4976] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 119.452683][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 119.471562][ T4976] ext4 filesystem being mounted at /root/syzkaller.URAKkl/156/bus supports timestamps until 2038 (0x7fffffff) [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] <... write resumed>) = 262144 [pid 4967] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4978] <... mount resumed>) = 0 [pid 4978] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 4978] chdir("./bus") = 0 [pid 4978] ioctl(4, LOOP_CLR_FD [pid 4977] <... mount resumed>) = 0 [pid 4976] <... open resumed>) = 5 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4971] <... write resumed>) = 1048576 [pid 4977] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 4972] <... futex resumed>) = 1 [pid 4971] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4968] <... futex resumed>) = 0 [pid 4972] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4971] <... futex resumed>) = 0 [pid 4968] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4972] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4971] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4972] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4968] <... futex resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4967] exit_group(0 [pid 4976] <... futex resumed>) = 1 [pid 4967] <... exit_group resumed>) = ? [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4978] <... ioctl resumed>) = 0 [pid 4978] close(4 [pid 4973] <... futex resumed>) = 0 [pid 4971] <... futex resumed>) = ? [pid 4968] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4976] <... futex resumed>) = 0 [pid 4973] <... futex resumed>) = 1 [pid 4971] +++ exited with 0 +++ [pid 4967] +++ exited with 0 +++ [pid 4976] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = 0 [pid 4976] <... openat resumed>) = 6 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4967, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4977] <... openat resumed>) = 3 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 4978] <... close resumed>) = 0 [pid 4977] chdir("./bus" [pid 4976] <... futex resumed>) = 1 [pid 4973] <... futex resumed>) = 0 [pid 4972] <... write resumed>) = 1048576 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... restart_syscall resumed>) = 0 [pid 4977] <... chdir resumed>) = 0 [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./154/bus", [pid 4977] ioctl(4, LOOP_CLR_FD [pid 4976] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4973] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4977] <... ioctl resumed>) = 0 [pid 4976] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4977] close(4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4977] <... close resumed>) = 0 [pid 310] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 4 [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 310] fstat(4, [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 4977] chdir("./file0" [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 4977] <... chdir resumed>) = 0 [pid 310] getdents64(4, [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 310] close(4 [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 310] rmdir("./154/bus" [pid 4977] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 4977] <... open resumed>) = 4 [pid 310] getdents64(3, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 310] close(3 [pid 308] <... openat resumed>) = 3 [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4972] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 4978] <... futex resumed>) = 1 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 4972] <... futex resumed>) = 1 [pid 4968] <... futex resumed>) = 0 [pid 310] rmdir("./154" [pid 308] fstat(3, [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4977] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4972] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4968] exit_group(0 [pid 310] <... rmdir resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4977] <... mount resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 4972] <... futex resumed>) = ? [pid 4968] <... exit_group resumed>) = ? [pid 310] mkdir("./155", 0777 [pid 308] getdents64(3, [pid 4978] chdir("./file0" [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4972] +++ exited with 0 +++ [pid 4968] +++ exited with 0 +++ [pid 310] <... mkdir resumed>) = 0 [pid 4978] <... chdir resumed>) = 0 [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4968, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 308] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4978] <... futex resumed>) = 1 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4977] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] lstat("./154/binderfs", [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4977] <... open resumed>) = 5 [pid 4974] <... futex resumed>) = 0 [pid 310] close(3 [ 119.519512][ T4978] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/151/bus supports timestamps until 2038 (0x7fffffff) [ 119.519543][ T4977] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/153/bus supports timestamps until 2038 (0x7fffffff) [pid 4978] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4978] <... open resumed>) = 4 [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] unlink("./154/binderfs" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4976] <... write resumed>) = 262144 [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... futex resumed>) = 1 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4994 [pid 308] <... unlink resumed>) = 0 [pid 307] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4977] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4977] <... openat resumed>) = 6 [pid 4976] <... futex resumed>) = 1 [pid 4974] <... futex resumed>) = 0 [pid 4973] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 4978] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4973] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... mount resumed>) = 0 [pid 4977] <... futex resumed>) = 1 [pid 4976] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4975] <... futex resumed>) = 0 [pid 4973] <... futex resumed>) = 0 [pid 307] fstat(3, [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4978] <... futex resumed>) = 1 [pid 4977] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4975] <... futex resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 307] getdents64(3, [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4977] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4977] <... write resumed>) = 262144 [pid 4974] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 4978] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4978] <... open resumed>) = 5 [pid 4977] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4977] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4975] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... futex resumed>) = 1 [pid 4975] <... futex resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4975] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4974] <... futex resumed>) = 0 [pid 4978] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4978] <... openat resumed>) = 6 [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 4974] <... futex resumed>) = 0 [pid 4978] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4978] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4974] <... futex resumed>) = 0 [pid 4978] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 4994 attached [pid 4978] <... write resumed>) = 262144 [pid 307] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] set_robust_list(0x55555748e5e0, 24 [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./153/binderfs", [pid 4994] <... set_robust_list resumed>) = 0 [pid 4978] <... futex resumed>) = 1 [pid 4974] <... futex resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 4994] chdir("./155" [pid 4978] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4974] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] unlink("./153/binderfs" [pid 4994] <... chdir resumed>) = 0 [pid 4974] <... futex resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 4994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4974] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4994] <... prctl resumed>) = 0 [pid 307] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4994] setpgid(0, 0) = 0 [pid 4994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4994] write(3, "1000", 4) = 4 [pid 4994] close(3) = 0 [pid 4994] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4994] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4994] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[4995], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 4995 [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4973] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4973] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 4977] <... write resumed>) = 1048576 [pid 4977] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4975] <... futex resumed>) = 0 [pid 4975] exit_group(0) = ? [pid 4977] <... futex resumed>) = ? [pid 4977] +++ exited with 0 +++ [pid 4975] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4975, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [ 119.590154][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 119.626372][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4978] <... write resumed>) = 1048576 [pid 4978] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4974] <... futex resumed>) = 0 [pid 4974] exit_group(0) = ? [pid 4978] <... futex resumed>) = ? [pid 4978] +++ exited with 0 +++ [pid 4974] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4974, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] umount2("./151", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(3, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] openat(AT_FDCWD, "./151", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] getdents64(3, [pid 309] <... openat resumed>) = 3 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] fstat(3, [pid 305] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] getdents64(3, [pid 305] lstat("./153/binderfs", [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] umount2("./151/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] unlink("./153/binderfs" [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 309] lstat("./151/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./151/binderfs") = 0 [pid 305] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4976] <... write resumed>) = 1048576 [pid 4976] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4976] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 4995 attached [pid 4995] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 4995] memfd_create("syzkaller", 0 [pid 4973] exit_group(0) = ? [pid 4976] <... futex resumed>) = ? [pid 4976] +++ exited with 0 +++ [pid 4973] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4973, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 4995] <... memfd_create resumed>) = 3 [pid 306] <... restart_syscall resumed>) = 0 [pid 4995] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./156/binderfs") = 0 [pid 306] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 119.640960][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 119.664300][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 119.672006][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 4995] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [ 119.690148][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 119.690270][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 119.715586][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 119.718065][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 4995] munmap(0x7f19b51e4000, 1048576) = 0 [pid 4995] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 4995] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4995] close(3) = 0 [pid 4995] mkdir("./bus", 0777) = 0 [ 119.728902][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 4995] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue") = 0 [pid 4995] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 305] <... umount2 resumed>) = 0 [pid 4995] <... openat resumed>) = 3 [pid 4995] chdir("./bus" [pid 305] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./153/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./153/bus") = 0 [pid 4995] <... chdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 4995] ioctl(4, LOOP_CLR_FD [pid 305] rmdir("./153") = 0 [pid 305] mkdir("./154", 0777) = 0 [ 119.794790][ T4995] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/155/bus supports timestamps until 2038 (0x7fffffff) [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 4995] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 4995] close(4) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 307] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./153/bus", [pid 305] close(3 [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./151/bus", [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... close resumed>) = 0 [pid 4995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4995] chdir("./file0" [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./151/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] <... chdir resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 4999 [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./151/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 4 [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 308] lstat("./154/bus", [pid 307] fstat(4, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] fstat(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... futex resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 306] lstat("./156/bus", [pid 4995] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(4, [pid 308] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, [pid 309] getdents64(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4 [pid 4995] <... open resumed>) = 4 [pid 309] close(4 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... close resumed>) = 0 [pid 306] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 307] rmdir("./153/bus" [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] rmdir("./151/bus" [pid 308] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... rmdir resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... openat resumed>) = 4 [pid 307] getdents64(3, [pid 306] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 4995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 4995] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] fstat(4, [pid 307] close(3 [pid 306] <... openat resumed>) = 4 [pid 4995] <... mount resumed>) = 0 [pid 309] close(3 [pid 307] <... close resumed>) = 0 [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] rmdir("./153" [pid 306] fstat(4, [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] rmdir("./151" [pid 308] getdents64(4, [pid 307] <... rmdir resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] mkdir("./154", 0777 [pid 306] getdents64(4, [pid 4995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... futex resumed>) = 0 [pid 309] mkdir("./152", 0777 [pid 308] getdents64(4, [pid 307] <... mkdir resumed>) = 0 [pid 4995] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... mkdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 4995] <... open resumed>) = 5 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] close(4 [pid 307] <... openat resumed>) = 3 [pid 306] getdents64(4, ./strace-static-x86_64: Process 4999 attached [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 4999] set_robust_list(0x55555748e5e0, 24 [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] rmdir("./154/bus" [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 4999] <... set_robust_list resumed>) = 0 [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 4999] chdir("./154" [pid 4995] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 4994] <... futex resumed>) = 0 [pid 309] close(3 [pid 308] <... rmdir resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] close(4 [pid 4999] <... chdir resumed>) = 0 [pid 4995] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 4999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 4995] <... openat resumed>) = 6 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] getdents64(3, [pid 306] <... close resumed>) = 0 [pid 4999] <... prctl resumed>) = 0 [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5000 [pid 306] rmdir("./156/bus" [pid 4999] setpgid(0, 0 [pid 4995] <... futex resumed>) = 1 [pid 4994] <... futex resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5001 [pid 308] close(3 [pid 4999] <... setpgid resumed>) = 0 [pid 4999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 4995] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 4999] <... openat resumed>) = 3 [pid 4999] write(3, "1000", 4) = 4 [pid 4999] close(3) = 0 [pid 4999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 4999] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 4999] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5002], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5002 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 4994] <... futex resumed>) = 0 [pid 308] rmdir("./154" [pid 306] getdents64(3, [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5002 attached [pid 5002] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5002] memfd_create("syzkaller", 0) = 3 [pid 5002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 306] close(3 [pid 308] mkdir("./155", 0777 [pid 306] <... close resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 306] rmdir("./156") = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 306] mkdir("./157", 0777) = 0 [pid 308] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 306] close(3 [pid 308] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5003 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5004 [pid 4995] <... write resumed>) = 262144 [pid 5002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5003 attached [pid 5003] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5003] chdir("./155" [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4994] <... futex resumed>) = 0 [pid 4995] <... futex resumed>) = 1 [pid 4994] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 4995] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] <... chdir resumed>) = 0 [pid 5003] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5003] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5004 attached [pid 5003] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5004] set_robust_list(0x55555748e5e0, 24 [pid 5003] <... openat resumed>) = 3 [pid 5004] <... set_robust_list resumed>) = 0 [pid 5004] chdir("./157") = 0 [pid 5004] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5003] write(3, "1000", 4 [pid 5004] <... prctl resumed>) = 0 [pid 5003] <... write resumed>) = 4 [pid 5004] setpgid(0, 0 [pid 5003] close(3) = 0 [pid 5004] <... setpgid resumed>) = 0 [pid 5003] symlink("/dev/binderfs", "./binderfs" [pid 5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5004] write(3, "1000", 4) = 4 [pid 5004] close(3 [pid 5003] <... symlink resumed>) = 0 [pid 5004] <... close resumed>) = 0 [pid 5004] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5003] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5003] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5003] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5003] <... clone resumed>, parent_tid=[5005], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5005 [pid 5004] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5004] <... mprotect resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5004] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5006], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5006 [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5001 attached [pid 5001] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5001] chdir("./152") = 0 ./strace-static-x86_64: Process 5000 attached ./strace-static-x86_64: Process 5005 attached [pid 5005] set_robust_list(0x7f19bd6049e0, 24 [pid 5001] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5000] set_robust_list(0x55555748e5e0, 24 [pid 5001] <... prctl resumed>) = 0 [pid 5001] setpgid(0, 0 [pid 5005] <... set_robust_list resumed>) = 0 [pid 5001] <... setpgid resumed>) = 0 [pid 5005] memfd_create("syzkaller", 0 [pid 5001] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5005] <... memfd_create resumed>) = 3 [pid 5001] write(3, "1000", 4 [pid 5000] <... set_robust_list resumed>) = 0 [pid 5005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5002] <... write resumed>) = 1048576 [pid 5001] <... write resumed>) = 4 [pid 5000] chdir("./154" [pid 5005] <... mmap resumed>) = 0x7f19b51e4000 [pid 5001] close(3 [pid 5005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] <... close resumed>) = 0 [pid 5000] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5006 attached [pid 5002] munmap(0x7f19b51e4000, 1048576 [pid 5001] symlink("/dev/binderfs", "./binderfs" [pid 5000] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5006] set_robust_list(0x7f19bd6049e0, 24 [pid 5002] <... munmap resumed>) = 0 [pid 5006] <... set_robust_list resumed>) = 0 [pid 5002] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5001] <... symlink resumed>) = 0 [pid 5000] <... prctl resumed>) = 0 [pid 5006] memfd_create("syzkaller", 0 [pid 5002] <... openat resumed>) = 4 [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] setpgid(0, 0 [pid 5006] <... memfd_create resumed>) = 3 [pid 5002] ioctl(4, LOOP_SET_FD, 3 [pid 5001] <... futex resumed>) = 0 [pid 5000] <... setpgid resumed>) = 0 [pid 5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5001] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5006] <... mmap resumed>) = 0x7f19b51e4000 [pid 5001] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5001] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5000] <... openat resumed>) = 3 [pid 5001] <... mprotect resumed>) = 0 [pid 5000] write(3, "1000", 4 [pid 5001] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5000] <... write resumed>) = 4 [pid 5000] close(3 [pid 5001] <... clone resumed>, parent_tid=[5008], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5008 [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... close resumed>) = 0 [pid 5001] <... futex resumed>) = 0 [pid 5000] symlink("/dev/binderfs", "./binderfs" [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5000] <... symlink resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5000] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5000] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5009], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5009 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5002] <... ioctl resumed>) = 0 [pid 5002] close(3) = 0 [pid 5002] mkdir("./bus", 0777) = 0 [pid 5002] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5008 attached [pid 5008] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5008] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5009 attached [pid 5009] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5008] <... memfd_create resumed>) = 3 [pid 5009] memfd_create("syzkaller", 0 [pid 5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5009] <... memfd_create resumed>) = 3 [pid 5009] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 4994] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 4994] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5009] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5005] <... write resumed>) = 1048576 [pid 4995] <... write resumed>) = 1048576 [pid 5005] munmap(0x7f19b51e4000, 1048576 [pid 4995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] <... munmap resumed>) = 0 [pid 4995] <... futex resumed>) = 0 [pid 5005] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 4995] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] <... openat resumed>) = 4 [pid 4994] exit_group(0 [pid 5005] ioctl(4, LOOP_SET_FD, 3 [pid 4995] <... futex resumed>) = ? [pid 4994] <... exit_group resumed>) = ? [pid 5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5006] <... write resumed>) = 1048576 [pid 5006] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5006] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5005] <... ioctl resumed>) = 0 [pid 5002] <... mount resumed>) = 0 [pid 5006] ioctl(4, LOOP_SET_FD, 3 [pid 5005] close(3) = 0 [pid 5005] mkdir("./bus", 0777) = 0 [pid 5005] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5008] <... write resumed>) = 1048576 [pid 5002] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5009] <... write resumed>) = 1048576 [pid 5008] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5002] <... openat resumed>) = 3 [pid 5009] munmap(0x7f19b51e4000, 1048576 [pid 5002] chdir("./bus") = 0 [pid 5009] <... munmap resumed>) = 0 [pid 5008] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5009] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5006] <... ioctl resumed>) = 0 [pid 5002] ioctl(4, LOOP_CLR_FD [pid 4995] +++ exited with 0 +++ [pid 4994] +++ exited with 0 +++ [pid 5006] close(3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4994, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5006] <... close resumed>) = 0 [pid 5006] mkdir("./bus", 0777) = 0 [pid 310] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5006] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./155/binderfs") = 0 [pid 310] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5008] <... openat resumed>) = 4 [pid 5008] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5009] <... openat resumed>) = 4 [pid 5009] ioctl(4, LOOP_SET_FD, 3 [pid 5008] close(3) = 0 [pid 5008] mkdir("./bus", 0777) = 0 [pid 5008] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5009] <... ioctl resumed>) = 0 [pid 5009] close(3) = 0 [pid 5009] mkdir("./bus", 0777) = 0 [ 120.047951][ T5002] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/154/bus supports timestamps until 2038 (0x7fffffff) [ 120.071334][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 120.084990][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5009] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5006] <... mount resumed>) = 0 [pid 5005] <... mount resumed>) = 0 [pid 5002] <... ioctl resumed>) = 0 [pid 5006] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5002] close(4 [pid 5006] <... openat resumed>) = 3 [pid 5006] chdir("./bus" [pid 5005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... openat resumed>) = 3 [pid 5006] ioctl(4, LOOP_CLR_FD [pid 5005] chdir("./bus") = 0 [pid 5005] ioctl(4, LOOP_CLR_FD [pid 5008] <... mount resumed>) = 0 [pid 5008] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5008] chdir("./bus") = 0 [ 120.099551][ T5006] ext4 filesystem being mounted at /root/syzkaller.URAKkl/157/bus supports timestamps until 2038 (0x7fffffff) [ 120.112107][ T5005] ext4 filesystem being mounted at /root/syzkaller.69675s/155/bus supports timestamps until 2038 (0x7fffffff) [ 120.131772][ T5008] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/152/bus supports timestamps until 2038 (0x7fffffff) [pid 5008] ioctl(4, LOOP_CLR_FD [pid 5009] <... mount resumed>) = 0 [pid 5009] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5006] <... ioctl resumed>) = 0 [pid 5005] <... ioctl resumed>) = 0 [pid 5002] <... close resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5008] <... ioctl resumed>) = 0 [pid 5009] <... openat resumed>) = 3 [pid 5008] close(4 [pid 5006] close(4 [pid 5005] close(4 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5009] chdir("./bus" [pid 5008] <... close resumed>) = 0 [pid 5006] <... close resumed>) = 0 [pid 5005] <... close resumed>) = 0 [pid 5002] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5009] <... chdir resumed>) = 0 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./155/bus", [pid 5009] ioctl(4, LOOP_CLR_FD [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5009] <... ioctl resumed>) = 0 [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] chdir("./file0" [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5009] close(4 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5001] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5009] <... close resumed>) = 0 [pid 5008] chdir("./file0" [pid 5006] chdir("./file0" [pid 5005] chdir("./file0" [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] <... chdir resumed>) = 0 [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... chdir resumed>) = 0 [pid 5006] <... chdir resumed>) = 0 [pid 5005] <... chdir resumed>) = 0 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 4 [pid 5009] <... futex resumed>) = 1 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... futex resumed>) = 1 [pid 5000] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = 0 [pid 310] fstat(4, [pid 5009] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 5009] chdir("./file0" [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5009] <... chdir resumed>) = 0 [pid 5008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5005] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(4, [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... open resumed>) = 4 [pid 5006] <... open resumed>) = 4 [pid 5005] <... open resumed>) = 4 [pid 5002] <... open resumed>) = 4 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 310] close(4 [pid 5009] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./155/bus" [pid 5009] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5009] <... open resumed>) = 4 [pid 5008] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5006] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5005] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(3, [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... mount resumed>) = 0 [pid 5006] <... mount resumed>) = 0 [pid 5005] <... mount resumed>) = 0 [pid 5002] <... mount resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 310] close(3 [pid 5009] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./155" [pid 5009] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5009] <... mount resumed>) = 0 [pid 5008] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5006] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5005] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] mkdir("./156", 0777 [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... open resumed>) = 5 [pid 5006] <... open resumed>) = 5 [pid 5005] <... open resumed>) = 5 [pid 5002] <... open resumed>) = 5 [pid 310] <... mkdir resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5009] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5009] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5009] <... open resumed>) = 5 [pid 5008] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5006] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5005] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(3 [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... openat resumed>) = 6 [pid 5006] <... openat resumed>) = 6 [pid 5005] <... openat resumed>) = 6 [pid 5002] <... openat resumed>) = 6 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 5009] <... futex resumed>) = 1 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5009] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5008] <... futex resumed>) = 1 [pid 5006] <... futex resumed>) = 1 [pid 5005] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... futex resumed>) = 0 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] <... futex resumed>) = 0 [pid 4999] <... futex resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5024 [pid 5009] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5008] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5004] <... futex resumed>) = 0 [pid 5003] <... futex resumed>) = 0 [pid 5002] <... write resumed>) = 262144 [pid 5001] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... openat resumed>) = 6 [pid 5008] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5006] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5005] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 4999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) ./strace-static-x86_64: Process 5024 attached [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5008] <... write resumed>) = 262144 [pid 5006] <... write resumed>) = 262144 [pid 4999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] set_robust_list(0x55555748e5e0, 24 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 4999] <... futex resumed>) = 0 [pid 5024] <... set_robust_list resumed>) = 0 [pid 5008] <... futex resumed>) = 0 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5024] chdir("./156" [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] <... chdir resumed>) = 0 [pid 5024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5024] setpgid(0, 0) = 0 [pid 5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5024] write(3, "1000", 4) = 4 [pid 5024] close(3) = 0 [pid 5024] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5024] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5024] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5024] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5025], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5025 [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5025 attached [pid 5025] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5025] memfd_create("syzkaller", 0) = 3 [pid 5025] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5005] <... write resumed>) = 262144 [pid 5009] <... futex resumed>) = 1 [pid 5001] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5000] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5001] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5009] <... write resumed>) = 262144 [pid 5001] <... futex resumed>) = 1 [pid 5000] <... futex resumed>) = 0 [pid 5001] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5008] <... futex resumed>) = 0 [ 120.145588][ T5009] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/154/bus supports timestamps until 2038 (0x7fffffff) [pid 5008] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5002] <... futex resumed>) = 1 [pid 4999] <... futex resumed>) = 0 [pid 4999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=34000000} [pid 5006] <... futex resumed>) = 1 [pid 5004] <... futex resumed>) = 0 [pid 5002] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5004] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5004] <... futex resumed>) = 0 [pid 5004] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5006] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5005] <... futex resumed>) = 1 [pid 5003] <... futex resumed>) = 0 [pid 5003] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5005] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5003] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] <... futex resumed>) = 1 [pid 5000] <... futex resumed>) = 0 [pid 5000] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5009] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5025] <... write resumed>) = 1048576 [pid 5025] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5025] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5025] ioctl(4, LOOP_SET_FD, 3 [pid 4999] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5008] <... write resumed>) = 1048576 [pid 5008] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5008] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5001] <... futex resumed>) = 0 [pid 5001] exit_group(0) = ? [pid 5025] <... ioctl resumed>) = 0 [pid 5025] close(3) = 0 [pid 5025] mkdir("./bus", 0777) = 0 [pid 5025] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5008] <... futex resumed>) = ? [pid 5008] +++ exited with 0 +++ [pid 5001] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5001, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./152", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./152", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./152/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./152/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./152/binderfs") = 0 [pid 309] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5004] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5003] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5006] <... write resumed>) = 1048576 [pid 5006] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5006] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5004] exit_group(0) = ? [pid 5000] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5000] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5006] <... futex resumed>) = ? [pid 5000] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5006] +++ exited with 0 +++ [pid 5004] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./157/binderfs") = 0 [ 120.260801][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 120.290023][ T5025] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/156/bus supports timestamps until 2038 (0x7fffffff) [pid 306] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] <... mount resumed>) = 0 [pid 5009] <... write resumed>) = 1048576 [pid 5009] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] exit_group(0 [pid 5009] <... futex resumed>) = ? [pid 5000] <... exit_group resumed>) = ? [pid 5009] +++ exited with 0 +++ [pid 5005] <... write resumed>) = 1048576 [pid 5005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5000] +++ exited with 0 +++ [pid 5005] <... futex resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5000, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./154/binderfs") = 0 [pid 307] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5003] exit_group(0 [pid 5002] <... write resumed>) = 1048576 [pid 5025] <... openat resumed>) = 3 [pid 5005] <... futex resumed>) = ? [pid 5003] <... exit_group resumed>) = ? [pid 5002] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] chdir("./bus" [pid 5005] +++ exited with 0 +++ [pid 5003] +++ exited with 0 +++ [pid 5002] <... futex resumed>) = 0 [pid 4999] exit_group(0) = ? [pid 5025] <... chdir resumed>) = 0 [pid 5025] ioctl(4, LOOP_CLR_FD) = 0 [pid 5025] close(4) = 0 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 5025] chdir("./file0" [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... chdir resumed>) = 0 [ 120.306021][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 120.334012][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 120.347740][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 5025] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... open resumed>) = 4 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 5025] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... mount resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5003, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5025] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5002] +++ exited with 0 +++ [pid 4999] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4999, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 308] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./155/binderfs") = 0 [pid 308] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5025] <... open resumed>) = 5 [pid 305] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./154/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./154/binderfs") = 0 [pid 305] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 120.347749][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 120.377226][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 120.390848][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 5025] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... openat resumed>) = 6 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5024] <... futex resumed>) = 0 [pid 5025] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5025] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5024] <... futex resumed>) = 0 [pid 5025] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... write resumed>) = 262144 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = 0 [pid 5024] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5024] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5025] <... futex resumed>) = 1 [pid 5025] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5025] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5024] <... futex resumed>) = 0 [pid 5024] exit_group(0) = ? [pid 5025] <... futex resumed>) = ? [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./157/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./157") = 0 [pid 306] mkdir("./158", 0777) = 0 [ 120.396471][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 120.404926][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 120.432701][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5025] +++ exited with 0 +++ [pid 5024] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = 0 [pid 309] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] lstat("./152/bus", [pid 306] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... close resumed>) = 0 [pid 310] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] umount2("./152/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] fstat(3, [pid 309] openat(AT_FDCWD, "./152/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5029 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... openat resumed>) = 4 [pid 310] getdents64(3, [pid 309] fstat(4, [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] getdents64(4, [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] lstat("./156/binderfs", [pid 309] getdents64(4, [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] unlink("./156/binderfs" [pid 309] close(4 [pid 310] <... unlink resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 310] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] rmdir("./152/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./152") = 0 [pid 309] mkdir("./153", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5030 ./strace-static-x86_64: Process 5029 attached [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./154/bus", [pid 5029] set_robust_list(0x55555748e5e0, 24) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./154/bus", [pid 5029] chdir("./158") = 0 [pid 5029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5029] setpgid(0, 0) = 0 [pid 5029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5029] write(3, "1000", 4) = 4 [pid 5029] close(3) = 0 [pid 5029] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5029] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5029] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5031], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5031 [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5031 attached [pid 5031] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5031] memfd_create("syzkaller", 0) = 3 [pid 5031] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5031] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5031] <... write resumed>) = 1048576 [pid 5031] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5031] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5031] ioctl(4, LOOP_SET_FD, 3 [pid 305] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 4 [pid 5031] <... ioctl resumed>) = 0 [pid 307] fstat(4, [pid 305] <... openat resumed>) = 4 [pid 5031] close(3) = 0 [pid 5031] mkdir("./bus", 0777 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] fstat(4, [pid 307] getdents64(4, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5031] <... mkdir resumed>) = 0 [pid 5031] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] close(4 [pid 305] getdents64(4, [pid 307] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] rmdir("./154/bus" [pid 305] close(4 [pid 307] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 307] getdents64(3, [pid 305] rmdir("./154/bus" [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 307] close(3 [pid 305] getdents64(3, [pid 307] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] rmdir("./154" [pid 305] close(3 [pid 307] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] rmdir("./154") = 0 [pid 305] mkdir("./155", 0777 [pid 307] mkdir("./155", 0777 [pid 308] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] <... mkdir resumed>) = 0 [pid 308] lstat("./155/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, [pid 307] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 305] <... close resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./155/bus" [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... rmdir resumed>) = 0 [pid 308] getdents64(3, [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5033 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./155") = 0 [pid 308] mkdir("./156", 0777 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5034 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5035 ./strace-static-x86_64: Process 5033 attached [pid 5033] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 5034 attached ) = 0 [pid 5034] set_robust_list(0x55555748e5e0, 24 [pid 5033] chdir("./155" [pid 5034] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5035 attached ./strace-static-x86_64: Process 5030 attached [pid 5034] chdir("./155" [pid 5033] <... chdir resumed>) = 0 [pid 5035] set_robust_list(0x55555748e5e0, 24 [pid 5030] set_robust_list(0x55555748e5e0, 24 [pid 5035] <... set_robust_list resumed>) = 0 [pid 5030] <... set_robust_list resumed>) = 0 [pid 5035] chdir("./156" [pid 5030] chdir("./153" [pid 5035] <... chdir resumed>) = 0 [pid 5030] <... chdir resumed>) = 0 [pid 5035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5030] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5035] <... prctl resumed>) = 0 [pid 5030] <... prctl resumed>) = 0 [pid 5035] setpgid(0, 0 [pid 5030] setpgid(0, 0 [pid 5035] <... setpgid resumed>) = 0 [pid 5030] <... setpgid resumed>) = 0 [pid 5035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5035] <... openat resumed>) = 3 [pid 5030] <... openat resumed>) = 3 [pid 5035] write(3, "1000", 4 [pid 5030] write(3, "1000", 4 [pid 5035] <... write resumed>) = 4 [pid 5034] <... chdir resumed>) = 0 [pid 5033] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5031] <... mount resumed>) = 0 [pid 5030] <... write resumed>) = 4 [pid 5035] close(3 [pid 5030] close(3 [pid 5035] <... close resumed>) = 0 [pid 5030] <... close resumed>) = 0 [ 120.633892][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 120.666119][ T5031] ext4 filesystem being mounted at /root/syzkaller.URAKkl/158/bus supports timestamps until 2038 (0x7fffffff) [pid 5035] symlink("/dev/binderfs", "./binderfs" [pid 5030] symlink("/dev/binderfs", "./binderfs" [pid 5035] <... symlink resumed>) = 0 [pid 5030] <... symlink resumed>) = 0 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 0 [pid 5035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5030] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5035] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5030] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5035] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5030] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5035] <... mprotect resumed>) = 0 [pid 5030] <... mprotect resumed>) = 0 [pid 5035] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5030] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5035] <... clone resumed>, parent_tid=[5038], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5038 [pid 5030] <... clone resumed>, parent_tid=[5039], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5039 [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5035] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 0 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5039 attached [pid 5039] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5039] memfd_create("syzkaller", 0) = 3 [pid 5039] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5038 attached [pid 5038] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5038] memfd_create("syzkaller", 0) = 3 [pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5034] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5033] <... prctl resumed>) = 0 [pid 5031] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5034] <... prctl resumed>) = 0 [pid 5033] setpgid(0, 0 [pid 5031] <... openat resumed>) = 3 [pid 5034] setpgid(0, 0) = 0 [pid 5033] <... setpgid resumed>) = 0 [pid 5031] chdir("./bus" [pid 5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5033] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5031] <... chdir resumed>) = 0 [pid 5034] <... openat resumed>) = 3 [pid 5034] write(3, "1000", 4 [pid 5033] <... openat resumed>) = 3 [pid 5031] ioctl(4, LOOP_CLR_FD [pid 5034] <... write resumed>) = 4 [pid 5033] write(3, "1000", 4 [pid 5031] <... ioctl resumed>) = 0 [pid 5033] <... write resumed>) = 4 [pid 5034] close(3 [pid 5033] close(3 [pid 5031] close(4 [pid 5034] <... close resumed>) = 0 [pid 5033] <... close resumed>) = 0 [pid 5031] <... close resumed>) = 0 [pid 5034] symlink("/dev/binderfs", "./binderfs" [pid 5033] symlink("/dev/binderfs", "./binderfs" [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... symlink resumed>) = 0 [pid 5033] <... symlink resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5034] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5033] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5031] chdir("./file0" [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5033] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5031] <... chdir resumed>) = 0 [pid 5034] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5033] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5039] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5039] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5033] <... mprotect resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5033] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5034] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5029] <... futex resumed>) = 0 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5034] <... clone resumed>, parent_tid=[5041], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5041 [pid 5033] <... clone resumed>, parent_tid=[5040], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5040 [pid 5031] <... open resumed>) = 4 [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5041 attached ./strace-static-x86_64: Process 5040 attached [pid 5034] <... futex resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5041] set_robust_list(0x7f19bd6049e0, 24 [pid 5040] set_robust_list(0x7f19bd6049e0, 24 [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5041] <... set_robust_list resumed>) = 0 [pid 5040] <... set_robust_list resumed>) = 0 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5031] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5041] memfd_create("syzkaller", 0 [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... memfd_create resumed>) = 3 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5041] <... mmap resumed>) = 0x7f19b51e4000 [pid 5040] memfd_create("syzkaller", 0 [pid 5031] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... memfd_create resumed>) = 3 [pid 5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5038] <... write resumed>) = 1048576 [pid 5038] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5038] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5039] <... openat resumed>) = 4 [pid 5031] <... open resumed>) = 5 [pid 310] <... umount2 resumed>) = 0 [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 120.687095][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] ioctl(4, LOOP_SET_FD, 3 [pid 5038] <... openat resumed>) = 4 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5038] ioctl(4, LOOP_SET_FD, 3 [pid 5031] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5031] <... openat resumed>) = 6 [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5041] <... write resumed>) = 1048576 [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] munmap(0x7f19b51e4000, 1048576 [pid 5031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5029] <... futex resumed>) = 0 [pid 5031] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./156/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./156/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 5031] <... write resumed>) = 262144 [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... munmap resumed>) = 0 [pid 5039] <... ioctl resumed>) = 0 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5039] close(3) = 0 [pid 5039] mkdir("./bus", 0777) = 0 [pid 5039] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5041] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5031] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./156" [pid 5029] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] mkdir("./157", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5040] <... write resumed>) = 1048576 [pid 5041] <... openat resumed>) = 4 [pid 5038] <... ioctl resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5041] ioctl(4, LOOP_SET_FD, 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5040] munmap(0x7f19b51e4000, 1048576 [pid 5038] close(3) = 0 [pid 5038] mkdir("./bus", 0777 [pid 5040] <... munmap resumed>) = 0 [pid 5038] <... mkdir resumed>) = 0 [pid 5038] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5041] <... ioctl resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5041] close(3 [pid 5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] close(3 [pid 5041] <... close resumed>) = 0 [pid 5040] <... openat resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 5041] mkdir("./bus", 0777 [pid 5040] ioctl(4, LOOP_SET_FD, 3 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5041] <... mkdir resumed>) = 0 [pid 5041] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5048 [pid 5040] <... ioctl resumed>) = 0 [pid 5040] close(3) = 0 [pid 5040] mkdir("./bus", 0777) = 0 [pid 5040] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5048 attached [pid 5039] <... mount resumed>) = 0 [pid 5031] <... write resumed>) = 1048576 [pid 5048] set_robust_list(0x55555748e5e0, 24 [pid 5039] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... set_robust_list resumed>) = 0 [pid 5039] <... openat resumed>) = 3 [pid 5031] <... futex resumed>) = 1 [pid 5029] <... futex resumed>) = 0 [pid 5048] chdir("./157" [pid 5039] chdir("./bus" [pid 5031] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5029] exit_group(0 [pid 5048] <... chdir resumed>) = 0 [pid 5039] <... chdir resumed>) = 0 [pid 5031] <... futex resumed>) = ? [pid 5029] <... exit_group resumed>) = ? [pid 5048] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5039] ioctl(4, LOOP_CLR_FD [pid 5031] +++ exited with 0 +++ [pid 5029] +++ exited with 0 +++ [pid 5048] <... prctl resumed>) = 0 [pid 5039] <... ioctl resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5029, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5048] setpgid(0, 0 [pid 5039] close(4 [pid 5048] <... setpgid resumed>) = 0 [pid 5039] <... close resumed>) = 0 [pid 5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5048] <... openat resumed>) = 3 [pid 5039] <... futex resumed>) = 1 [pid 5030] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5048] write(3, "1000", 4 [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5048] <... write resumed>) = 4 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 5048] close(3 [pid 5039] chdir("./file0" [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] fstat(3, [pid 5048] <... close resumed>) = 0 [pid 5039] <... chdir resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5048] symlink("/dev/binderfs", "./binderfs" [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] getdents64(3, [pid 5048] <... symlink resumed>) = 0 [pid 5039] <... futex resumed>) = 1 [pid 5030] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5048] <... futex resumed>) = 0 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5048] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5039] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] lstat("./158/binderfs", [pid 5048] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5039] <... open resumed>) = 4 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5048] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] unlink("./158/binderfs" [pid 5048] <... mprotect resumed>) = 0 [pid 5039] <... futex resumed>) = 1 [pid 5030] <... futex resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 5048] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5051 attached [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 5038] <... mount resumed>) = 0 [pid 5051] set_robust_list(0x7f19bd6049e0, 24 [pid 5038] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5051] <... set_robust_list resumed>) = 0 [pid 5038] <... openat resumed>) = 3 [pid 5051] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] chdir("./bus") = 0 [pid 5038] ioctl(4, LOOP_CLR_FD) = 0 [ 120.782731][ T5039] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/153/bus supports timestamps until 2038 (0x7fffffff) [ 120.799598][ T5038] ext4 filesystem being mounted at /root/syzkaller.69675s/156/bus supports timestamps until 2038 (0x7fffffff) [pid 5038] close(4 [pid 5048] <... clone resumed>, parent_tid=[5051], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5051 [pid 5039] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5038] <... close resumed>) = 0 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5038] chdir("./file0" [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... chdir resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5038] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... open resumed>) = 4 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5038] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... mount resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5038] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... open resumed>) = 5 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5038] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5038] <... openat resumed>) = 6 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... mount resumed>) = 0 [pid 5038] <... futex resumed>) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5051] <... futex resumed>) = 0 [pid 5048] <... futex resumed>) = 1 [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] memfd_create("syzkaller", 0 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5051] <... memfd_create resumed>) = 3 [pid 5038] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5039] <... futex resumed>) = 1 [pid 5030] <... futex resumed>) = 0 [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 5039] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... open resumed>) = 5 [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5030] <... futex resumed>) = 0 [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 5039] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5039] <... openat resumed>) = 6 [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5030] <... futex resumed>) = 0 [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 5039] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... mmap resumed>) = 0x7f19b51e4000 [pid 5040] <... mount resumed>) = 0 [pid 5038] <... write resumed>) = 262144 [pid 5051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5040] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... mount resumed>) = 0 [pid 5039] <... write resumed>) = 262144 [pid 5041] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... openat resumed>) = 3 [pid 5040] <... openat resumed>) = 3 [pid 5039] <... futex resumed>) = 1 [pid 5038] <... futex resumed>) = 1 [pid 5035] <... futex resumed>) = 0 [pid 5030] <... futex resumed>) = 0 [pid 5041] chdir("./bus" [pid 5039] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5030] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... chdir resumed>) = 0 [pid 5039] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5030] <... futex resumed>) = 0 [pid 5041] ioctl(4, LOOP_CLR_FD [pid 5039] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5030] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... write resumed>) = 1048576 [pid 5040] chdir("./bus" [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] munmap(0x7f19b51e4000, 1048576 [pid 5040] <... chdir resumed>) = 0 [pid 5038] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5035] <... futex resumed>) = 0 [pid 5051] <... munmap resumed>) = 0 [pid 5040] ioctl(4, LOOP_CLR_FD [pid 5038] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5035] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5039] <... write resumed>) = 1048576 [pid 5039] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5030] <... futex resumed>) = 0 [pid 5030] exit_group(0) = ? [pid 5039] <... futex resumed>) = ? [pid 5051] <... openat resumed>) = 4 [pid 5041] <... ioctl resumed>) = 0 [pid 5040] <... ioctl resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5041] close(4 [pid 5040] close(4 [pid 306] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./158/bus", [pid 5041] <... futex resumed>) = 1 [pid 5040] <... close resumed>) = 0 [pid 5034] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] <... futex resumed>) = 0 [pid 306] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] chdir("./file0" [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] <... chdir resumed>) = 0 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5034] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 4 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] <... futex resumed>) = 0 [pid 306] fstat(4, [pid 5041] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5051] ioctl(4, LOOP_SET_FD, 3 [pid 5041] <... open resumed>) = 4 [pid 5040] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5041] <... futex resumed>) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] chdir("./file0" [pid 5034] <... futex resumed>) = 0 [ 120.821696][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 120.836224][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 120.855207][ T5040] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/155/bus supports timestamps until 2038 (0x7fffffff) [ 120.867756][ T5041] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/155/bus supports timestamps until 2038 (0x7fffffff) [pid 306] close(4 [pid 5041] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... chdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5041] <... mount resumed>) = 0 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] rmdir("./158/bus" [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 5041] <... futex resumed>) = 1 [pid 5040] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5034] <... futex resumed>) = 0 [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] getdents64(3, [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] <... futex resumed>) = 0 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] close(3 [pid 5041] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... close resumed>) = 0 [pid 5040] <... open resumed>) = 4 [pid 306] rmdir("./158" [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 5040] <... futex resumed>) = 1 [pid 5033] <... futex resumed>) = 0 [pid 306] mkdir("./159", 0777 [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... mkdir resumed>) = 0 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5040] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5040] <... mount resumed>) = 0 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5033] <... futex resumed>) = 0 [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5033] <... futex resumed>) = 0 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... ioctl resumed>) = 0 [pid 5041] <... open resumed>) = 5 [pid 5040] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5039] +++ exited with 0 +++ [pid 5030] +++ exited with 0 +++ [pid 306] <... openat resumed>) = 3 [pid 5051] close(3 [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... open resumed>) = 5 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5030, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] ioctl(3, LOOP_CLR_FD [pid 5051] <... close resumed>) = 0 [pid 5041] <... futex resumed>) = 1 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5051] mkdir("./bus", 0777 [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = 1 [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... futex resumed>) = 0 [pid 306] close(3 [pid 5051] <... mkdir resumed>) = 0 [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] <... futex resumed>) = 0 [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./153", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... close resumed>) = 0 [pid 5051] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5041] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5041] <... openat resumed>) = 6 [pid 5040] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "./153", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 5040] <... openat resumed>) = 6 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./153/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5057 [pid 5041] <... futex resumed>) = 1 [pid 5040] <... futex resumed>) = 1 [pid 5034] <... futex resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./153/binderfs", [pid 5041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5034] <... futex resumed>) = 0 [pid 5033] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5041] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5040] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] unlink("./153/binderfs") = 0 [pid 309] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5057 attached [pid 5057] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5057] chdir("./159") = 0 [pid 5057] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5057] setpgid(0, 0) = 0 [pid 5057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5057] write(3, "1000", 4) = 4 [pid 5057] close(3) = 0 [pid 5057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5057] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5057] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5058], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5058 [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5058 attached [pid 5058] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5058] memfd_create("syzkaller", 0) = 3 [pid 5058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5040] <... write resumed>) = 262144 [pid 5041] <... write resumed>) = 262144 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5038] <... write resumed>) = 1048576 [pid 5035] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5040] <... futex resumed>) = 1 [pid 5038] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... futex resumed>) = 0 [pid 5058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5051] <... mount resumed>) = 0 [pid 5041] <... futex resumed>) = 1 [pid 5040] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5038] <... futex resumed>) = 0 [pid 5034] <... futex resumed>) = 0 [pid 5033] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... write resumed>) = 1048576 [pid 5058] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5058] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5058] ioctl(4, LOOP_SET_FD, 3 [pid 5051] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5051] chdir("./bus") = 0 [pid 5051] ioctl(4, LOOP_CLR_FD [pid 5041] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5040] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5040] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5038] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5035] exit_group(0 [pid 5034] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... futex resumed>) = 0 [pid 5041] <... futex resumed>) = 0 [pid 5038] <... futex resumed>) = ? [pid 5035] <... exit_group resumed>) = ? [pid 5034] <... futex resumed>) = 1 [pid 5033] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5041] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5038] +++ exited with 0 +++ [pid 5034] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... ioctl resumed>) = 0 [pid 5051] <... ioctl resumed>) = 0 [pid 5035] +++ exited with 0 +++ [pid 5058] close(3 [pid 5051] close(4 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5035, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5058] <... close resumed>) = 0 [pid 308] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [ 120.936516][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 120.951039][ T5051] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/157/bus supports timestamps until 2038 (0x7fffffff) [ 120.967206][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./156/binderfs") = 0 [pid 308] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5041] <... write resumed>) = 1048576 [pid 5041] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5034] <... futex resumed>) = 0 [pid 5034] exit_group(0) = ? [pid 5041] <... futex resumed>) = ? [pid 5041] +++ exited with 0 +++ [pid 5034] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 307] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./155/binderfs") = 0 [pid 307] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] mkdir("./bus", 0777 [pid 5040] <... write resumed>) = 1048576 [pid 5040] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5033] <... futex resumed>) = 0 [pid 5033] exit_group(0) = ? [pid 5040] <... futex resumed>) = ? [pid 5058] <... mkdir resumed>) = 0 [pid 5040] +++ exited with 0 +++ [pid 5033] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5033, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 5051] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./155/binderfs", [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5048] <... futex resumed>) = 0 [pid 305] unlink("./155/binderfs" [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [pid 305] <... unlink resumed>) = 0 [pid 5051] chdir("./file0" [pid 305] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5051] <... chdir resumed>) = 0 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [pid 5051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5048] <... futex resumed>) = 0 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5048] <... futex resumed>) = 0 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5048] <... futex resumed>) = 0 [pid 5051] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... openat resumed>) = 6 [pid 5048] <... futex resumed>) = 0 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 0 [pid 5048] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5051] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 121.000070][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5051] <... write resumed>) = 262144 [pid 5048] <... futex resumed>) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5048] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5048] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5051] <... futex resumed>) = 1 [pid 5051] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5048] <... futex resumed>) = 0 [pid 5048] exit_group(0) = ? [pid 5051] <... futex resumed>) = ? [ 121.049645][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 121.052311][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 121.075476][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 309] <... umount2 resumed>) = 0 [pid 5058] <... mount resumed>) = 0 [pid 5051] +++ exited with 0 +++ [pid 5048] +++ exited with 0 +++ [pid 309] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5048, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5058] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5058] chdir("./bus") = 0 [pid 310] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./157/binderfs") = 0 [pid 310] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5058] ioctl(4, LOOP_CLR_FD [pid 309] lstat("./153/bus", [pid 5058] <... ioctl resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5058] close(4 [pid 309] umount2("./153/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 121.084591][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 121.099421][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 121.102210][ T5058] ext4 filesystem being mounted at /root/syzkaller.URAKkl/159/bus supports timestamps until 2038 (0x7fffffff) [ 121.133785][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "./153/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./153/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./153") = 0 [pid 309] mkdir("./154", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5058] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] chdir("./file0" [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5058] <... chdir resumed>) = 0 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... open resumed>) = 4 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... mount resumed>) = 0 [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5058] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... open resumed>) = 5 [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5058] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... openat resumed>) = 6 [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... futex resumed>) = 0 [pid 5057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5058] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5057] <... futex resumed>) = 0 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./156/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./156/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./156") = 0 [pid 308] mkdir("./157", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5058] <... write resumed>) = 262144 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5057] <... futex resumed>) = 0 [pid 5058] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5058] <... write resumed>) = 1048576 [pid 5058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5057] <... futex resumed>) = 0 [pid 5058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5057] exit_group(0 [pid 5058] <... futex resumed>) = ? [pid 5057] <... exit_group resumed>) = ? [ 121.147655][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 5058] +++ exited with 0 +++ [pid 5057] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 310] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] ioctl(3, LOOP_CLR_FD [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] lstat("./157/bus", [pid 308] close(3 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... close resumed>) = 0 [pid 310] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5064 [pid 310] <... openat resumed>) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./157/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./157") = 0 [pid 310] mkdir("./158", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5065 ./strace-static-x86_64: Process 5064 attached [pid 5064] set_robust_list(0x55555748e5e0, 24) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 5064] chdir("./157") = 0 [pid 5064] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5064] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 5065 attached [pid 309] <... close resumed>) = 0 [pid 307] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5057, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5064] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5064] write(3, "1000", 4) = 4 [pid 5064] close(3) = 0 [pid 307] lstat("./155/bus", [pid 5064] symlink("/dev/binderfs", "./binderfs" [pid 5065] set_robust_list(0x55555748e5e0, 24 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5066 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] <... set_robust_list resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./155/bus", [pid 307] <... openat resumed>) = 4 [pid 306] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] fstat(4, [pid 306] <... openat resumed>) = 3 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] chdir("./158" [pid 5064] <... symlink resumed>) = 0 [pid 307] getdents64(4, [pid 306] fstat(3, [pid 305] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5066 attached [pid 5065] <... chdir resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5065] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] getdents64(4, [pid 306] getdents64(3, [pid 5065] <... prctl resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5065] setpgid(0, 0 [pid 307] close(4 [pid 306] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5065] <... setpgid resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... openat resumed>) = 4 [pid 5065] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] rmdir("./155/bus" [pid 306] lstat("./159/binderfs", [pid 305] fstat(4, [pid 5065] <... openat resumed>) = 3 [pid 307] <... rmdir resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5065] write(3, "1000", 4 [pid 307] getdents64(3, [pid 306] unlink("./159/binderfs" [pid 305] getdents64(4, [pid 5065] <... write resumed>) = 4 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... unlink resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5066] set_robust_list(0x55555748e5e0, 24 [pid 5065] close(3 [pid 5064] <... futex resumed>) = 0 [pid 307] close(3 [pid 306] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(4, [pid 5066] <... set_robust_list resumed>) = 0 [pid 5065] <... close resumed>) = 0 [pid 5064] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5066] chdir("./154" [pid 5065] symlink("/dev/binderfs", "./binderfs" [pid 5064] <... mmap resumed>) = 0x7f19bd5e4000 [pid 305] close(4 [pid 5066] <... chdir resumed>) = 0 [pid 5065] <... symlink resumed>) = 0 [pid 5064] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 305] <... close resumed>) = 0 [pid 5066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... mprotect resumed>) = 0 [pid 305] rmdir("./155/bus" [pid 5066] <... prctl resumed>) = 0 [pid 5065] <... futex resumed>) = 0 [pid 5064] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] <... rmdir resumed>) = 0 [pid 5066] setpgid(0, 0 [pid 5065] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] getdents64(3, [pid 5066] <... setpgid resumed>) = 0 [pid 5065] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5064] <... clone resumed>, parent_tid=[5067], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5067 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5065] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(3 [pid 5066] <... openat resumed>) = 3 [pid 5065] <... mprotect resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5066] write(3, "1000", 4 [pid 5065] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] rmdir("./155" [pid 5066] <... write resumed>) = 4 [pid 305] <... rmdir resumed>) = 0 [pid 5066] close(3 [pid 5065] <... clone resumed>, parent_tid=[5068], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5068 [pid 305] mkdir("./156", 0777 [pid 5066] <... close resumed>) = 0 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... mkdir resumed>) = 0 [pid 5066] symlink("/dev/binderfs", "./binderfs" [pid 5065] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5066] <... symlink resumed>) = 0 [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] <... openat resumed>) = 3 [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5066] <... futex resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] close(3 [pid 5066] <... mmap resumed>) = 0x7f19bd5e4000 [pid 305] <... close resumed>) = 0 [pid 5066] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5066] <... mprotect resumed>) = 0 [pid 5066] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5069 [pid 5066] <... clone resumed>, parent_tid=[5070], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5070 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5069 attached [pid 5069] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5069] chdir("./156"./strace-static-x86_64: Process 5070 attached [pid 5070] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5070] memfd_create("syzkaller", 0 [pid 5069] <... chdir resumed>) = 0 [pid 5069] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5069] setpgid(0, 0) = 0 [pid 5069] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] <... memfd_create resumed>) = 3 [pid 5069] <... openat resumed>) = 3 [pid 5070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5069] write(3, "1000", 4) = 4 [pid 5069] close(3) = 0 [pid 5069] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5069] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5069] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5071], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5071 [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] rmdir("./155") = 0 [pid 307] mkdir("./156", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5072 ./strace-static-x86_64: Process 5071 attached [pid 5071] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5071] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5072 attached ) = 3 [pid 5072] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5072] chdir("./156" [pid 5071] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5072] <... chdir resumed>) = 0 [pid 5072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5072] setpgid(0, 0) = 0 [pid 5072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5072] <... openat resumed>) = 3 [pid 5072] write(3, "1000", 4) = 4 [pid 5072] close(3) = 0 [pid 5072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5072] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5072] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5068 attached [pid 5068] set_robust_list(0x7f19bd6049e0, 24 [pid 5072] <... clone resumed>, parent_tid=[5073], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5073 [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5067 attached [pid 5068] memfd_create("syzkaller", 0) = 3 [pid 5067] set_robust_list(0x7f19bd6049e0, 24 [pid 5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5067] <... set_robust_list resumed>) = 0 [pid 5068] <... mmap resumed>) = 0x7f19b51e4000 [pid 5067] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5073 attached ) = 3 [pid 5073] set_robust_list(0x7f19bd6049e0, 24 [pid 5070] <... write resumed>) = 1048576 [pid 5073] <... set_robust_list resumed>) = 0 [pid 5067] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5073] memfd_create("syzkaller", 0) = 3 [pid 5073] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5070] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5071] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5070] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5070] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5070] close(3) = 0 [pid 5070] mkdir("./bus", 0777) = 0 [ 121.297614][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5070] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5071] <... write resumed>) = 1048576 [pid 5073] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5071] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5071] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5071] ioctl(4, LOOP_SET_FD, 3 [pid 5073] <... write resumed>) = 1048576 [pid 5073] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5073] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5071] <... ioctl resumed>) = 0 [pid 5071] close(3) = 0 [pid 5071] mkdir("./bus", 0777) = 0 [pid 5071] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5073] <... openat resumed>) = 4 [pid 5073] ioctl(4, LOOP_SET_FD, 3 [pid 5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5067] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5073] <... ioctl resumed>) = 0 [pid 5073] close(3) = 0 [pid 5073] mkdir("./bus", 0777) = 0 [pid 5073] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5067] <... write resumed>) = 1048576 [pid 5067] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5067] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5067] ioctl(4, LOOP_SET_FD, 3 [pid 5068] <... write resumed>) = 1048576 [pid 5068] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5068] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5067] <... ioctl resumed>) = 0 [pid 5067] close(3) = 0 [pid 5067] mkdir("./bus", 0777 [pid 5068] <... openat resumed>) = 4 [ 121.347255][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 121.373929][ T5070] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/154/bus supports timestamps until 2038 (0x7fffffff) [pid 5068] ioctl(4, LOOP_SET_FD, 3 [pid 5070] <... mount resumed>) = 0 [pid 5067] <... mkdir resumed>) = 0 [pid 5067] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5070] chdir("./bus") = 0 [pid 5070] ioctl(4, LOOP_CLR_FD [pid 5071] <... mount resumed>) = 0 [pid 5071] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5071] chdir("./bus") = 0 [pid 5071] ioctl(4, LOOP_CLR_FD [pid 5073] <... mount resumed>) = 0 [pid 5073] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5073] chdir("./bus") = 0 [ 121.399087][ T5071] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/156/bus supports timestamps until 2038 (0x7fffffff) [ 121.412715][ T5073] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/156/bus supports timestamps until 2038 (0x7fffffff) [pid 5073] ioctl(4, LOOP_CLR_FD [pid 306] <... umount2 resumed>) = 0 [pid 5073] <... ioctl resumed>) = 0 [pid 5071] <... ioctl resumed>) = 0 [pid 5070] <... ioctl resumed>) = 0 [pid 5068] <... ioctl resumed>) = 0 [pid 306] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] close(4 [pid 5071] close(4 [pid 5070] close(4 [pid 5068] close(3 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... close resumed>) = 0 [pid 5071] <... close resumed>) = 0 [pid 5070] <... close resumed>) = 0 [pid 306] lstat("./159/bus", [pid 5068] <... close resumed>) = 0 [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] mkdir("./bus", 0777 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mkdir resumed>) = 0 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5066] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5073] chdir("./file0" [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] chdir("./file0" [pid 5070] chdir("./file0" [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 4 [pid 5073] <... chdir resumed>) = 0 [pid 5071] <... chdir resumed>) = 0 [pid 5070] <... chdir resumed>) = 0 [pid 306] fstat(4, [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5073] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5073] <... open resumed>) = 4 [pid 5071] <... open resumed>) = 4 [pid 5070] <... open resumed>) = 4 [pid 306] close(4 [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] rmdir("./159/bus" [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] getdents64(3, [pid 5073] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5070] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5073] <... mount resumed>) = 0 [pid 5071] <... mount resumed>) = 0 [pid 5070] <... mount resumed>) = 0 [pid 306] close(3 [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] rmdir("./159" [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] mkdir("./160", 0777 [pid 5073] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5070] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... mkdir resumed>) = 0 [pid 5073] <... open resumed>) = 5 [pid 5071] <... open resumed>) = 5 [pid 5070] <... open resumed>) = 5 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 3 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] close(3 [pid 5073] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5070] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... close resumed>) = 0 [pid 5073] <... openat resumed>) = 6 [pid 5071] <... openat resumed>) = 6 [pid 5070] <... openat resumed>) = 6 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5066] <... futex resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5089 ./strace-static-x86_64: Process 5089 attached [pid 5073] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... mount resumed>) = 0 [pid 5067] <... mount resumed>) = 0 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5072] <... futex resumed>) = 0 [pid 5071] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5069] <... futex resumed>) = 0 [pid 5068] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5067] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5066] <... futex resumed>) = 0 [pid 5089] set_robust_list(0x55555748e5e0, 24 [pid 5073] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5071] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5070] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] <... openat resumed>) = 3 [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] <... openat resumed>) = 3 [pid 5089] <... set_robust_list resumed>) = 0 [pid 5068] chdir("./bus" [pid 5067] chdir("./bus" [pid 5089] chdir("./160" [pid 5068] <... chdir resumed>) = 0 [pid 5067] <... chdir resumed>) = 0 [pid 5089] <... chdir resumed>) = 0 [pid 5068] ioctl(4, LOOP_CLR_FD [pid 5067] ioctl(4, LOOP_CLR_FD [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5068] <... ioctl resumed>) = 0 [pid 5067] <... ioctl resumed>) = 0 [pid 5089] <... prctl resumed>) = 0 [pid 5068] close(4 [pid 5067] close(4 [pid 5089] setpgid(0, 0 [pid 5073] <... write resumed>) = 262144 [pid 5068] <... close resumed>) = 0 [pid 5067] <... close resumed>) = 0 [pid 5089] <... setpgid resumed>) = 0 [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 1 [pid 5089] <... openat resumed>) = 3 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5089] write(3, "1000", 4 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... write resumed>) = 4 [pid 5068] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 1 [pid 5064] <... futex resumed>) = 1 [pid 5089] close(3 [pid 5068] chdir("./file0" [pid 5067] chdir("./file0" [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] <... close resumed>) = 0 [pid 5089] symlink("/dev/binderfs", "./binderfs" [pid 5068] <... chdir resumed>) = 0 [pid 5067] <... chdir resumed>) = 0 [pid 5089] <... symlink resumed>) = 0 [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 1 [pid 5065] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5089] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5067] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5089] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5089] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5068] <... open resumed>) = 4 [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... open resumed>) = 4 [pid 5089] <... clone resumed>, parent_tid=[5090], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5090 [pid 5068] <... futex resumed>) = 1 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 0 [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5068] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 0 [pid 5068] <... mount resumed>) = 0 [pid 5067] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... mount resumed>) = 0 [pid 5068] <... futex resumed>) = 1 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 0 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 0 [pid 5068] <... open resumed>) = 5 [pid 5067] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] <... open resumed>) = 5 [pid 5068] <... futex resumed>) = 1 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] <... futex resumed>) = 0 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] <... futex resumed>) = 1 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] <... futex resumed>) = 0 [pid 5068] <... openat resumed>) = 6 [pid 5067] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5067] <... openat resumed>) = 6 [pid 5065] <... futex resumed>) = 0 [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... write resumed>) = 262144 [pid 5070] <... write resumed>) = 262144 [pid 5068] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5073] <... futex resumed>) = 1 [pid 5072] <... futex resumed>) = 0 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] <... futex resumed>) = 1 [pid 5065] <... futex resumed>) = 0 [pid 5064] <... futex resumed>) = 0 [pid 5073] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5072] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5071] <... futex resumed>) = 1 [pid 5070] <... futex resumed>) = 1 [pid 5069] <... futex resumed>) = 0 [pid 5068] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5066] <... futex resumed>) = 0 [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] <... futex resumed>) = 0 [pid 5069] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5072] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5069] <... futex resumed>) = 0 [pid 5066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5069] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5090 attached [pid 5090] set_robust_list(0x7f19bd6049e0, 24) = 0 [ 121.496234][ T5068] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/158/bus supports timestamps until 2038 (0x7fffffff) [ 121.509211][ T5067] ext4 filesystem being mounted at /root/syzkaller.69675s/157/bus supports timestamps until 2038 (0x7fffffff) [pid 5067] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5067] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5090] memfd_create("syzkaller", 0) = 3 [pid 5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5067] <... write resumed>) = 262144 [pid 5070] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5071] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5068] <... write resumed>) = 262144 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5068] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 1 [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5068] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5065] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] <... futex resumed>) = 0 [pid 5065] <... futex resumed>) = 0 [pid 5064] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5065] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... write resumed>) = 1048576 [pid 5090] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5090] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5090] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5090] close(3) = 0 [pid 5090] mkdir("./bus", 0777) = 0 [pid 5090] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5072] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5069] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5066] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5064] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5065] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5073] <... write resumed>) = 1048576 [pid 5073] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5072] exit_group(0) = ? [pid 5073] +++ exited with 0 +++ [pid 5072] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5072, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./156/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./156/binderfs" [pid 5070] <... write resumed>) = 1048576 [pid 307] <... unlink resumed>) = 0 [pid 5071] <... write resumed>) = 1048576 [ 121.599873][ T5090] ext4 filesystem being mounted at /root/syzkaller.URAKkl/160/bus supports timestamps until 2038 (0x7fffffff) [pid 5070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... mount resumed>) = 0 [pid 5071] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5070] <... futex resumed>) = 0 [pid 5068] <... write resumed>) = 1048576 [pid 5090] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5071] <... futex resumed>) = 0 [pid 5070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5069] exit_group(0 [pid 5068] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5066] exit_group(0 [pid 5065] exit_group(0 [pid 5090] <... openat resumed>) = 3 [pid 5070] <... futex resumed>) = ? [pid 5069] <... exit_group resumed>) = ? [pid 5068] <... futex resumed>) = ? [pid 5066] <... exit_group resumed>) = ? [pid 5065] <... exit_group resumed>) = ? [pid 5090] chdir("./bus" [pid 5071] +++ exited with 0 +++ [pid 5070] +++ exited with 0 +++ [pid 5069] +++ exited with 0 +++ [pid 5068] +++ exited with 0 +++ [pid 5066] +++ exited with 0 +++ [pid 5065] +++ exited with 0 +++ [pid 5090] <... chdir resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5069, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5090] ioctl(4, LOOP_CLR_FD [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5065, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5090] <... ioctl resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 5090] close(4) = 0 [pid 5067] <... write resumed>) = 1048576 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5066, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5067] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... futex resumed>) = 1 [pid 5067] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 5090] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5067] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... restart_syscall resumed>) = 0 [pid 5090] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5064] exit_group(0 [pid 5090] chdir("./file0" [pid 5089] <... futex resumed>) = 0 [pid 5067] <... futex resumed>) = ? [pid 5064] <... exit_group resumed>) = ? [pid 5090] <... chdir resumed>) = 0 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5067] +++ exited with 0 +++ [pid 5064] +++ exited with 0 +++ [pid 310] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./154", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5090] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5064, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./158/binderfs") = 0 [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = 1 [pid 309] openat(AT_FDCWD, "./154", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... openat resumed>) = 3 [pid 308] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] fstat(3, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] getdents64(3, [pid 305] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] fstat(3, [pid 305] fstat(3, [pid 5090] <... open resumed>) = 4 [pid 309] umount2("./154/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5089] <... futex resumed>) = 0 [pid 5090] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5090] <... mount resumed>) = 0 [pid 5089] <... futex resumed>) = 0 [pid 305] getdents64(3, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] getdents64(3, [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5090] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] lstat("./154/binderfs", [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5090] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] unlink("./154/binderfs" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./156/binderfs", [pid 5090] <... open resumed>) = 5 [pid 5089] <... futex resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 308] lstat("./157/binderfs", [pid 309] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./156/binderfs" [pid 308] unlink("./157/binderfs" [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... unlink resumed>) = 0 [pid 5090] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... unlink resumed>) = 0 [pid 305] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5090] <... openat resumed>) = 6 [pid 5089] <... futex resumed>) = 0 [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... futex resumed>) = 0 [pid 5089] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5090] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... write resumed>) = 262144 [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] <... futex resumed>) = 0 [pid 5089] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5089] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5090] <... futex resumed>) = 1 [ 121.652796][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 121.668974][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 121.700679][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 121.716727][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 121.730333][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5090] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5089] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 121.730557][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 121.743252][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 121.758179][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 121.769760][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5090] <... write resumed>) = 1048576 [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./156/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./156/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./156") = 0 [pid 307] mkdir("./157", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 5090] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5089] exit_group(0 [pid 307] <... close resumed>) = 0 [pid 5089] <... exit_group resumed>) = ? [pid 5090] <... futex resumed>) = ? [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5090] +++ exited with 0 +++ [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5094 ./strace-static-x86_64: Process 5094 attached [pid 5094] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5094] chdir("./157") = 0 [pid 5094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5094] setpgid(0, 0) = 0 [pid 5094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5094] write(3, "1000", 4) = 4 [pid 5094] close(3) = 0 [pid 5094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5094] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5094] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5095], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5095 [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5095 attached [pid 5095] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5095] memfd_create("syzkaller", 0) = 3 [pid 5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5095] munmap(0x7f19b51e4000, 1048576) = 0 [ 121.792780][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5095] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5089] +++ exited with 0 +++ [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./157/bus") = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./157") = 0 [pid 308] mkdir("./158", 0777) = 0 [pid 306] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./160/binderfs") = 0 [ 121.858920][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 121.872452][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5095] <... openat resumed>) = 4 [pid 308] <... openat resumed>) = 3 [pid 5095] ioctl(4, LOOP_SET_FD, 3 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./154/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./154/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./154/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./154/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./154") = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 309] mkdir("./155", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./156/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./156/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./156") = 0 [pid 305] mkdir("./157", 0777 [pid 310] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5095] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5095] close(3) = 0 [pid 5095] mkdir("./bus", 0777) = 0 [pid 5095] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 309] <... openat resumed>) = 3 [pid 308] close(3 [pid 306] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5097 ./strace-static-x86_64: Process 5097 attached [pid 5097] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5097] chdir("./157") = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] symlink("/dev/binderfs", "./binderfs" [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5097] <... symlink resumed>) = 0 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5097] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5097] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5098], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5098 [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5098] memfd_create("syzkaller", 0) = 3 [pid 5098] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5099 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5101 ./strace-static-x86_64: Process 5099 attached [pid 5099] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5099] chdir("./158") = 0 [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5099] <... openat resumed>) = 3 [pid 310] lstat("./158/bus", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./160/bus", [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5099] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5101 attached ) = 0x7f19bd5e4000 [pid 5099] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5101] set_robust_list(0x55555748e5e0, 24 [pid 5099] <... mprotect resumed>) = 0 [pid 5099] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5101] <... set_robust_list resumed>) = 0 [pid 5101] chdir("./155" [pid 5099] <... clone resumed>, parent_tid=[5102], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5102 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5099] <... futex resumed>) = 0 [pid 5101] <... chdir resumed>) = 0 [pid 306] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 4 [pid 306] fstat(4, [pid 310] <... openat resumed>) = 4 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 310] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... close resumed>) = 0 [pid 310] getdents64(4, [pid 306] rmdir("./160/bus" [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 310] close(4 [pid 306] getdents64(3, [pid 310] <... close resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] rmdir("./158/bus" [pid 306] close(3 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... rmdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5101] <... openat resumed>) = 3 [pid 306] rmdir("./160" [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 310] close(3 [pid 5101] write(3, "1000", 4) = 4 [pid 5098] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] <... close resumed>) = 0 [pid 306] mkdir("./161", 0777 [pid 310] rmdir("./158" [pid 5101] close(3) = 0 [pid 5101] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5101] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 306] <... mkdir resumed>) = 0 [pid 5101] <... mprotect resumed>) = 0 [pid 5101] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] <... rmdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 310] mkdir("./159", 0777 [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5101] <... clone resumed>, parent_tid=[5103], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5103 [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] <... mkdir resumed>) = 0 [pid 306] close(3./strace-static-x86_64: Process 5102 attached [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... openat resumed>) = 3 [pid 5102] set_robust_list(0x7f19bd6049e0, 24 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5105 [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5106 [pid 5102] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5103 attached [pid 5103] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5102] memfd_create("syzkaller", 0 [pid 5103] memfd_create("syzkaller", 0 [pid 5102] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x55555748e5e0, 24 [pid 5103] <... memfd_create resumed>) = 3 [pid 5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5105] <... set_robust_list resumed>) = 0 [pid 5103] <... mmap resumed>) = 0x7f19b51e4000 [pid 5105] chdir("./161") = 0 [pid 5102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5105] setpgid(0, 0) = 0 [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5102] <... mmap resumed>) = 0x7f19b51e4000 [pid 5105] <... openat resumed>) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3) = 0 [pid 5105] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5098] <... write resumed>) = 1048576 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5105] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5106 attached [pid 5105] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5106] set_robust_list(0x55555748e5e0, 24 [pid 5105] <... mprotect resumed>) = 0 [pid 5098] munmap(0x7f19b51e4000, 1048576 [pid 5106] <... set_robust_list resumed>) = 0 [pid 5105] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5098] <... munmap resumed>) = 0 [pid 5106] chdir("./159" [pid 5098] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5106] <... chdir resumed>) = 0 [pid 5105] <... clone resumed>, parent_tid=[5107], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5107 [pid 5098] <... openat resumed>) = 4 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] ioctl(4, LOOP_SET_FD, 3 [pid 5106] <... prctl resumed>) = 0 [pid 5106] setpgid(0, 0 [pid 5105] <... futex resumed>) = 0 [pid 5106] <... setpgid resumed>) = 0 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [pid 5106] close(3) = 0 [pid 5106] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5106] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5106] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5109], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5109 [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5098] <... ioctl resumed>) = 0 [pid 5098] close(3) = 0 [pid 5098] mkdir("./bus", 0777) = 0 [pid 5098] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5109] memfd_create("syzkaller", 0) = 3 [pid 5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5107 attached [pid 5102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5095] <... mount resumed>) = 0 [pid 5107] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5095] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5107] memfd_create("syzkaller", 0) = 3 [pid 5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5095] <... openat resumed>) = 3 [pid 5102] <... write resumed>) = 1048576 [pid 5098] <... mount resumed>) = 0 [pid 5095] chdir("./bus" [pid 5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5107] <... write resumed>) = 1048576 [pid 5102] munmap(0x7f19b51e4000, 1048576 [pid 5098] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5095] <... chdir resumed>) = 0 [pid 5107] munmap(0x7f19b51e4000, 1048576 [pid 5102] <... munmap resumed>) = 0 [pid 5098] <... openat resumed>) = 3 [pid 5095] ioctl(4, LOOP_CLR_FD [pid 5102] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5107] <... munmap resumed>) = 0 [pid 5098] chdir("./bus" [pid 5095] <... ioctl resumed>) = 0 [pid 5103] <... write resumed>) = 1048576 [pid 5107] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5103] munmap(0x7f19b51e4000, 1048576 [pid 5102] <... openat resumed>) = 4 [pid 5098] <... chdir resumed>) = 0 [pid 5095] close(4 [pid 5107] <... openat resumed>) = 4 [pid 5102] ioctl(4, LOOP_SET_FD, 3 [pid 5098] ioctl(4, LOOP_CLR_FD [pid 5107] ioctl(4, LOOP_SET_FD, 3 [pid 5103] <... munmap resumed>) = 0 [pid 5098] <... ioctl resumed>) = 0 [pid 5095] <... close resumed>) = 0 [pid 5103] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5098] close(4 [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = 0 [pid 5095] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... write resumed>) = 1048576 [pid 5107] <... ioctl resumed>) = 0 [pid 5103] <... openat resumed>) = 4 [pid 5102] close(3 [pid 5098] <... close resumed>) = 0 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... futex resumed>) = 0 [pid 5095] chdir("./file0") = 0 [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5095] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5109] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5109] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5107] close(3 [pid 5103] ioctl(4, LOOP_SET_FD, 3 [pid 5102] <... close resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] ioctl(4, LOOP_SET_FD, 3 [pid 5107] <... close resumed>) = 0 [pid 5102] mkdir("./bus", 0777 [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5107] mkdir("./bus", 0777 [pid 5103] <... ioctl resumed>) = 0 [pid 5102] <... mkdir resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... mkdir resumed>) = 0 [pid 5103] close(3 [pid 5102] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 1 [pid 5095] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5109] <... ioctl resumed>) = 0 [pid 5109] close(3) = 0 [pid 5109] mkdir("./bus", 0777 [pid 5107] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5103] <... close resumed>) = 0 [pid 5098] chdir("./file0" [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... open resumed>) = 4 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... mkdir resumed>) = 0 [pid 5103] mkdir("./bus", 0777 [pid 5098] <... chdir resumed>) = 0 [pid 5109] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... mkdir resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5098] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5094] <... futex resumed>) = 0 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... mount resumed>) = 0 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] <... open resumed>) = 4 [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = 0 [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5094] <... futex resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5095] <... open resumed>) = 5 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 122.101972][ T5095] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/157/bus supports timestamps until 2038 (0x7fffffff) [ 122.121966][ T5098] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/157/bus supports timestamps until 2038 (0x7fffffff) [pid 5098] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] <... mount resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5094] <... futex resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] <... openat resumed>) = 6 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5097] <... futex resumed>) = 0 [pid 5095] <... futex resumed>) = 0 [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5094] <... futex resumed>) = 0 [pid 5098] <... open resumed>) = 5 [pid 5095] <... write resumed>) = 262144 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... mount resumed>) = 0 [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5107] chdir("./bus") = 0 [pid 5107] ioctl(4, LOOP_CLR_FD) = 0 [pid 5107] close(4) = 0 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] chdir("./file0" [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... chdir resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... open resumed>) = 4 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5107] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] <... mount resumed>) = 0 [pid 5098] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = 1 [ 122.176475][ T5102] ext4 filesystem being mounted at /root/syzkaller.69675s/158/bus supports timestamps until 2038 (0x7fffffff) [ 122.176483][ T5107] ext4 filesystem being mounted at /root/syzkaller.URAKkl/161/bus supports timestamps until 2038 (0x7fffffff) [ 122.211898][ T5109] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/159/bus supports timestamps until 2038 (0x7fffffff) [pid 5105] <... futex resumed>) = 0 [pid 5098] <... openat resumed>) = 6 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... mount resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5097] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5098] <... futex resumed>) = 0 [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5094] <... futex resumed>) = 0 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5102] <... openat resumed>) = 3 [pid 5098] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5097] <... futex resumed>) = 0 [pid 5095] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5094] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5107] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] chdir("./bus" [pid 5098] <... write resumed>) = 262144 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] <... chdir resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] ioctl(4, LOOP_CLR_FD [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5102] <... ioctl resumed>) = 0 [pid 5098] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5097] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] close(4 [pid 5097] <... futex resumed>) = 0 [pid 5102] <... close resumed>) = 0 [pid 5097] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5099] <... futex resumed>) = 0 [pid 5102] chdir("./file0" [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... chdir resumed>) = 0 [pid 5099] <... futex resumed>) = 0 [pid 5107] <... open resumed>) = 5 [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... mount resumed>) = 0 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] <... futex resumed>) = 0 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5103] <... mount resumed>) = 0 [pid 5102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... openat resumed>) = 3 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5099] <... futex resumed>) = 0 [pid 5109] chdir("./bus" [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] <... futex resumed>) = 0 [pid 5103] <... openat resumed>) = 3 [pid 5102] <... open resumed>) = 4 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... chdir resumed>) = 0 [pid 5107] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] chdir("./bus" [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5109] ioctl(4, LOOP_CLR_FD [pid 5107] <... openat resumed>) = 6 [pid 5103] <... chdir resumed>) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... write resumed>) = 1048576 [pid 5103] ioctl(4, LOOP_CLR_FD [pid 5102] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5099] <... futex resumed>) = 0 [pid 5098] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... ioctl resumed>) = 0 [pid 5103] <... ioctl resumed>) = 0 [pid 5102] <... mount resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5098] <... futex resumed>) = 1 [pid 5097] <... futex resumed>) = 0 [pid 5095] <... write resumed>) = 1048576 [pid 5109] close(4 [pid 5107] <... futex resumed>) = 1 [pid 5105] <... futex resumed>) = 0 [pid 5103] close(4 [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5098] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5097] exit_group(0 [pid 5107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5103] <... close resumed>) = 0 [pid 5102] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5098] <... futex resumed>) = ? [pid 5097] <... exit_group resumed>) = ? [pid 5095] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5099] <... futex resumed>) = 0 [pid 5098] +++ exited with 0 +++ [pid 5097] +++ exited with 0 +++ [pid 5103] <... futex resumed>) = 1 [pid 5102] <... open resumed>) = 5 [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5095] <... futex resumed>) = 1 [pid 5094] <... futex resumed>) = 0 [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5095] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5094] exit_group(0 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5102] <... futex resumed>) = 0 [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5095] <... futex resumed>) = ? [pid 5094] <... exit_group resumed>) = ? [pid 5103] chdir("./file0" [pid 5102] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = 0 [pid 5095] +++ exited with 0 +++ [pid 5094] +++ exited with 0 +++ [pid 5103] <... chdir resumed>) = 0 [pid 5102] <... openat resumed>) = 6 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5103] <... futex resumed>) = 1 [pid 5102] <... futex resumed>) = 0 [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5102] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5109] <... close resumed>) = 0 [pid 5107] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5102] <... write resumed>) = 262144 [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5105] <... futex resumed>) = 0 [pid 5103] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5099] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5094, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5103] <... open resumed>) = 4 [pid 5102] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5102] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5099] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5107] <... write resumed>) = 262144 [pid 5106] <... futex resumed>) = 0 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5099] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 5109] chdir("./file0" [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... restart_syscall resumed>) = 0 [pid 5106] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... chdir resumed>) = 0 [pid 5103] <... mount resumed>) = 0 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 307] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5103] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] <... open resumed>) = 5 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 5103] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5103] <... openat resumed>) = 6 [pid 307] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5106] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 307] fstat(3, [pid 305] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 5103] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5101] <... futex resumed>) = 0 [pid 307] getdents64(3, [pid 5109] <... open resumed>) = 4 [pid 5103] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] fstat(3, [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5103] <... write resumed>) = 262144 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5107] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5107] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] getdents64(3, [pid 5106] <... futex resumed>) = 0 [pid 5105] <... futex resumed>) = 0 [pid 5103] <... futex resumed>) = 1 [pid 5101] <... futex resumed>) = 0 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 122.225031][ T5103] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/155/bus supports timestamps until 2038 (0x7fffffff) [pid 5101] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] lstat("./157/binderfs", [pid 5109] <... mount resumed>) = 0 [pid 5105] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5101] <... futex resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5101] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] unlink("./157/binderfs" [pid 305] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5106] <... futex resumed>) = 0 [pid 307] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] lstat("./157/binderfs", [pid 5109] <... open resumed>) = 5 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 305] unlink("./157/binderfs" [pid 5109] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5109] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5106] <... futex resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 5102] <... write resumed>) = 1048576 [pid 5102] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5099] <... futex resumed>) = 0 [pid 5099] exit_group(0) = ? [pid 5102] <... futex resumed>) = ? [pid 5102] +++ exited with 0 +++ [pid 5099] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 308] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5109] <... futex resumed>) = 1 [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5109] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5109] <... write resumed>) = 262144 [pid 308] <... openat resumed>) = 3 [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, [pid 5103] <... write resumed>) = 1048576 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5103] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5101] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5101] exit_group(0 [pid 308] lstat("./158/binderfs", [pid 5101] <... exit_group resumed>) = ? [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5103] <... futex resumed>) = ? [pid 308] unlink("./158/binderfs") = 0 [pid 308] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5106] <... futex resumed>) = 0 [pid 5109] <... futex resumed>) = 1 [pid 5109] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5105] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5106] <... futex resumed>) = 0 [pid 5106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5103] +++ exited with 0 +++ [pid 5101] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [ 122.297047][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 122.310317][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.332773][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./155", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./155", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5107] <... write resumed>) = 1048576 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 5107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5107] <... futex resumed>) = 0 [pid 309] umount2("./155/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5105] exit_group(0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5105] <... exit_group resumed>) = ? [pid 309] lstat("./155/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./155/binderfs") = 0 [ 122.346951][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.356332][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 122.360563][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5109] <... write resumed>) = 1048576 [pid 5106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5106] exit_group(0 [pid 5109] <... futex resumed>) = ? [pid 5106] <... exit_group resumed>) = ? [pid 5109] +++ exited with 0 +++ [pid 5107] +++ exited with 0 +++ [pid 5106] +++ exited with 0 +++ [pid 5105] +++ exited with 0 +++ [pid 305] <... umount2 resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 310] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 310] fstat(3, [pid 306] fstat(3, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 306] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./159/binderfs", [pid 306] lstat("./161/binderfs", [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./159/binderfs" [pid 306] unlink("./161/binderfs" [pid 310] <... unlink resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 310] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./157/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./157") = 0 [ 122.395737][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.417865][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] mkdir("./158", 0777) = 0 [ 122.439889][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 122.440382][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.454356][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 122.468047][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./157/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./157/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./157" [pid 305] close(3 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./158", 0777 [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... mkdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5124 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5125 ./strace-static-x86_64: Process 5124 attached [pid 5124] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5124] chdir("./158"./strace-static-x86_64: Process 5125 attached ) = 0 [pid 5125] set_robust_list(0x55555748e5e0, 24 [pid 5124] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5124] setpgid(0, 0) = 0 [pid 5125] <... set_robust_list resumed>) = 0 [pid 5125] chdir("./158") = 0 [pid 5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5125] setpgid(0, 0 [pid 5124] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5125] <... setpgid resumed>) = 0 [pid 5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5124] <... openat resumed>) = 3 [pid 5124] write(3, "1000", 4 [pid 5125] <... openat resumed>) = 3 [pid 5125] write(3, "1000", 4 [pid 5124] <... write resumed>) = 4 [pid 5125] <... write resumed>) = 4 [pid 5125] close(3 [pid 5124] close(3 [pid 5125] <... close resumed>) = 0 [pid 5124] <... close resumed>) = 0 [pid 5125] symlink("/dev/binderfs", "./binderfs" [pid 5124] symlink("/dev/binderfs", "./binderfs" [pid 5125] <... symlink resumed>) = 0 [pid 5124] <... symlink resumed>) = 0 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5124] <... futex resumed>) = 0 [pid 5124] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5125] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5125] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5124] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5124] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5125] <... mprotect resumed>) = 0 [pid 5124] <... mprotect resumed>) = 0 [pid 5124] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5125] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... clone resumed>, parent_tid=[5126], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5126 ./strace-static-x86_64: Process 5126 attached [pid 5126] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5125] <... clone resumed>, parent_tid=[5127], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5127 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] memfd_create("syzkaller", 0) = 3 [pid 5126] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5125] <... futex resumed>) = 0 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5126] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 ./strace-static-x86_64: Process 5127 attached [pid 5127] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5127] memfd_create("syzkaller", 0) = 3 [pid 5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5126] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5126] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5127] <... write resumed>) = 1048576 [pid 5127] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5127] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5126] <... openat resumed>) = 4 [pid 308] <... umount2 resumed>) = 0 [pid 5127] ioctl(4, LOOP_SET_FD, 3 [pid 5126] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./158/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./158/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./158") = 0 [pid 308] mkdir("./159", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 309] <... umount2 resumed>) = 0 [pid 5127] <... ioctl resumed>) = 0 [pid 5127] close(3) = 0 [pid 5127] mkdir("./bus", 0777) = 0 [pid 5127] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... umount2 resumed>) = 0 [pid 309] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5126] <... ioctl resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./155/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./155/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./155/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5126] close(3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5126] <... close resumed>) = 0 [pid 308] close(3 [pid 306] lstat("./161/bus", [pid 5126] mkdir("./bus", 0777 [pid 308] <... close resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5126] <... mkdir resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5126] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 309] getdents64(4, [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5130 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, [pid 310] <... umount2 resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(4, [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] lstat("./159/bus", [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] getdents64(4, [pid 309] close(4 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] <... close resumed>) = 0 [pid 306] close(4 [pid 309] rmdir("./155/bus" [pid 306] <... close resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 306] rmdir("./161/bus" [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3 [pid 306] <... rmdir resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./155" [pid 306] getdents64(3, [pid 310] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... rmdir resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] mkdir("./156", 0777 [pid 306] close(3 [pid 310] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... mkdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... openat resumed>) = 4 [pid 309] <... openat resumed>) = 3 [pid 306] rmdir("./161" [pid 310] fstat(4, [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] <... rmdir resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] close(3 [pid 306] mkdir("./162", 0777 [pid 310] getdents64(4, [pid 309] <... close resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5133 ./strace-static-x86_64: Process 5133 attached ./strace-static-x86_64: Process 5130 attached [pid 5130] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5133] set_robust_list(0x55555748e5e0, 24 [pid 5130] chdir("./159") = 0 [pid 5130] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5133] <... set_robust_list resumed>) = 0 [pid 5130] <... prctl resumed>) = 0 [pid 5133] chdir("./156" [pid 5130] setpgid(0, 0) = 0 [pid 5133] <... chdir resumed>) = 0 [pid 5130] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5133] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5130] <... openat resumed>) = 3 [pid 5133] <... prctl resumed>) = 0 [pid 5130] write(3, "1000", 4 [pid 5133] setpgid(0, 0 [pid 5130] <... write resumed>) = 4 [pid 5133] <... setpgid resumed>) = 0 [pid 5130] close(3 [pid 5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5130] <... close resumed>) = 0 [pid 5133] <... openat resumed>) = 3 [pid 5130] symlink("/dev/binderfs", "./binderfs" [pid 5133] write(3, "1000", 4 [pid 5130] <... symlink resumed>) = 0 [pid 5133] <... write resumed>) = 4 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] close(3 [pid 5130] <... futex resumed>) = 0 [pid 5133] <... close resumed>) = 0 [pid 5130] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5133] symlink("/dev/binderfs", "./binderfs" [pid 5130] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5133] <... symlink resumed>) = 0 [pid 5130] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... mprotect resumed>) = 0 [pid 5133] <... futex resumed>) = 0 [pid 5130] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5133] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5130] <... clone resumed>, parent_tid=[5136], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5136 [pid 5133] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5130] <... futex resumed>) = 0 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5133] <... clone resumed>, parent_tid=[5137], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5137 [pid 5126] <... mount resumed>) = 0 [pid 310] getdents64(4, [pid 306] <... openat resumed>) = 3 [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5137 attached [pid 5137] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5137] memfd_create("syzkaller", 0) = 3 [pid 5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 310] close(4 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5136 attached [pid 310] <... close resumed>) = 0 [pid 5127] <... mount resumed>) = 0 [pid 5126] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 306] close(3 [pid 310] rmdir("./159/bus" [pid 306] <... close resumed>) = 0 [pid 5136] set_robust_list(0x7f19bd6049e0, 24 [pid 5127] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5126] <... openat resumed>) = 3 [pid 310] <... rmdir resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5136] <... set_robust_list resumed>) = 0 [pid 5126] chdir("./bus" [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5126] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 5138 attached [pid 5136] memfd_create("syzkaller", 0 [pid 5126] ioctl(4, LOOP_CLR_FD [pid 310] close(3 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5138 [pid 5126] <... ioctl resumed>) = 0 [pid 5126] close(4 [pid 310] <... close resumed>) = 0 [pid 5138] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5136] <... memfd_create resumed>) = 3 [pid 5126] <... close resumed>) = 0 [pid 310] rmdir("./159" [pid 5136] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 5127] <... openat resumed>) = 3 [pid 5126] <... futex resumed>) = 1 [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] <... futex resumed>) = 0 [pid 5138] chdir("./162") = 0 [pid 5138] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5138] setpgid(0, 0) = 0 [pid 5138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5138] write(3, "1000", 4) = 4 [pid 5138] close(3) = 0 [pid 5138] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5136] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5127] chdir("./bus" [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./160", 0777 [pid 5126] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5126] chdir("./file0") = 0 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] <... mkdir resumed>) = 0 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5138] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5138] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5138] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5126] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 310] <... openat resumed>) = 3 [pid 5138] <... clone resumed>, parent_tid=[5139], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5139 [pid 5127] <... chdir resumed>) = 0 [pid 5126] <... open resumed>) = 4 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] ioctl(3, LOOP_CLR_FD [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5138] <... futex resumed>) = 0 [pid 5127] ioctl(4, LOOP_CLR_FD [pid 5126] <... futex resumed>) = 0 [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5127] <... ioctl resumed>) = 0 [pid 5126] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5124] <... futex resumed>) = 0 [pid 310] close(3 [pid 5126] <... mount resumed>) = 0 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] close(4 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... close resumed>) = 0 [pid 5126] <... futex resumed>) = 0 [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5127] <... close resumed>) = 0 [pid 5126] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5124] <... futex resumed>) = 0 [pid 5126] <... open resumed>) = 5 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5140 [pid 5127] <... futex resumed>) = 1 [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] chdir("./file0" [pid 5125] <... futex resumed>) = 0 [pid 5124] <... futex resumed>) = 1 [pid 5126] <... futex resumed>) = 0 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5126] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... chdir resumed>) = 0 [pid 5126] <... openat resumed>) = 6 [ 122.737177][ T5126] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/158/bus supports timestamps until 2038 (0x7fffffff) [ 122.749040][ T5127] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/158/bus supports timestamps until 2038 (0x7fffffff) [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5140 attached ./strace-static-x86_64: Process 5139 attached [pid 5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5136] <... write resumed>) = 1048576 [pid 5127] <... futex resumed>) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 5127] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... open resumed>) = 4 [pid 5126] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5127] <... futex resumed>) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5126] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... mount resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 5127] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... open resumed>) = 5 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 5127] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... openat resumed>) = 6 [pid 5126] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5124] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5127] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5125] <... futex resumed>) = 0 [pid 5127] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5127] <... write resumed>) = 262144 [pid 5126] <... write resumed>) = 262144 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] munmap(0x7f19b51e4000, 1048576 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5127] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5125] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] set_robust_list(0x55555748e5e0, 24 [pid 5139] set_robust_list(0x7f19bd6049e0, 24 [pid 5137] <... write resumed>) = 1048576 [pid 5136] <... munmap resumed>) = 0 [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... futex resumed>) = 0 [pid 5140] <... set_robust_list resumed>) = 0 [pid 5139] <... set_robust_list resumed>) = 0 [pid 5137] munmap(0x7f19b51e4000, 1048576 [pid 5136] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5126] <... futex resumed>) = 1 [pid 5125] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5124] <... futex resumed>) = 0 [pid 5140] chdir("./160" [pid 5139] memfd_create("syzkaller", 0 [pid 5137] <... munmap resumed>) = 0 [pid 5136] <... openat resumed>) = 4 [pid 5126] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5124] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] <... chdir resumed>) = 0 [pid 5139] <... memfd_create resumed>) = 3 [pid 5137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5136] ioctl(4, LOOP_SET_FD, 3 [pid 5124] <... futex resumed>) = 0 [pid 5140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5137] <... openat resumed>) = 4 [pid 5136] <... ioctl resumed>) = 0 [pid 5127] <... write resumed>) = 1048576 [pid 5124] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] <... prctl resumed>) = 0 [pid 5139] <... mmap resumed>) = 0x7f19b51e4000 [pid 5137] ioctl(4, LOOP_SET_FD, 3 [pid 5136] close(3 [pid 5127] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] setpgid(0, 0 [pid 5136] <... close resumed>) = 0 [pid 5127] <... futex resumed>) = 1 [pid 5125] <... futex resumed>) = 0 [pid 5140] <... setpgid resumed>) = 0 [pid 5136] mkdir("./bus", 0777 [pid 5127] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5126] <... write resumed>) = 1048576 [pid 5125] exit_group(0 [pid 5140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5127] <... futex resumed>) = ? [pid 5126] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5125] <... exit_group resumed>) = ? [pid 5140] <... openat resumed>) = 3 [pid 5136] <... mkdir resumed>) = 0 [pid 5127] +++ exited with 0 +++ [pid 5126] <... futex resumed>) = 1 [pid 5124] <... futex resumed>) = 0 [pid 5140] write(3, "1000", 4 [pid 5136] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5126] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5124] exit_group(0 [pid 5140] <... write resumed>) = 4 [pid 5124] <... exit_group resumed>) = ? [pid 5140] close(3 [pid 5126] <... futex resumed>) = ? [pid 5140] <... close resumed>) = 0 [pid 5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5137] <... ioctl resumed>) = 0 [pid 5126] +++ exited with 0 +++ [pid 5125] +++ exited with 0 +++ [pid 5124] +++ exited with 0 +++ [pid 5140] symlink("/dev/binderfs", "./binderfs" [pid 5137] close(3 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5124, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5140] <... symlink resumed>) = 0 [pid 5137] <... close resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] mkdir("./bus", 0777 [pid 307] <... restart_syscall resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5137] <... mkdir resumed>) = 0 [pid 5140] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5137] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5140] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5140] <... mprotect resumed>) = 0 [pid 307] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5140] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5143 attached [pid 307] fstat(3, [pid 305] fstat(3, [pid 5143] set_robust_list(0x7f19bd6049e0, 24 [pid 5140] <... clone resumed>, parent_tid=[5143], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5143 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] <... set_robust_list resumed>) = 0 [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 305] getdents64(3, [pid 5143] memfd_create("syzkaller", 0 [pid 5140] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5143] <... memfd_create resumed>) = 3 [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] <... mmap resumed>) = 0x7f19b51e4000 [pid 307] lstat("./158/binderfs", [pid 305] lstat("./158/binderfs", [pid 5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./158/binderfs" [pid 305] unlink("./158/binderfs" [pid 307] <... unlink resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 307] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] <... write resumed>) = 1048576 [pid 5143] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5143] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5143] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5143] close(3) = 0 [pid 5143] mkdir("./bus", 0777) = 0 [ 122.862783][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 122.875850][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.889834][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5143] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5139] <... write resumed>) = 1048576 [pid 5139] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5139] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5139] ioctl(4, LOOP_SET_FD, 3 [pid 5136] <... mount resumed>) = 0 [pid 5139] <... ioctl resumed>) = 0 [pid 5136] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5139] close(3) = 0 [pid 5139] mkdir("./bus", 0777) = 0 [pid 5136] <... openat resumed>) = 3 [pid 5136] chdir("./bus" [pid 5139] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5136] <... chdir resumed>) = 0 [pid 5136] ioctl(4, LOOP_CLR_FD [pid 5137] <... mount resumed>) = 0 [pid 5143] <... mount resumed>) = 0 [pid 5137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5137] chdir("./bus") = 0 [pid 5137] ioctl(4, LOOP_CLR_FD [pid 5143] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5143] chdir("./bus") = 0 [ 122.890153][ T5136] ext4 filesystem being mounted at /root/syzkaller.69675s/159/bus supports timestamps until 2038 (0x7fffffff) [ 122.912332][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 122.932874][ T5137] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/156/bus supports timestamps until 2038 (0x7fffffff) [ 122.942459][ T5143] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/160/bus supports timestamps until 2038 (0x7fffffff) [pid 5143] ioctl(4, LOOP_CLR_FD [pid 5139] <... mount resumed>) = 0 [pid 5139] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5139] chdir("./bus") = 0 [pid 5139] ioctl(4, LOOP_CLR_FD [pid 5137] <... ioctl resumed>) = 0 [pid 5136] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 5137] close(4) = 0 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5143] <... ioctl resumed>) = 0 [pid 5143] close(4) = 0 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5143] chdir("./file0" [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... chdir resumed>) = 0 [pid 5136] close(4 [pid 5133] <... futex resumed>) = 0 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... close resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 1 [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 307] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... futex resumed>) = 1 [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] chdir("./file0" [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... futex resumed>) = 0 [pid 307] lstat("./158/bus", [pid 5143] <... open resumed>) = 4 [pid 5137] <... chdir resumed>) = 0 [pid 5136] chdir("./file0" [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... chdir resumed>) = 0 [pid 307] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 1 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] <... futex resumed>) = 1 [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] <... futex resumed>) = 0 [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 4 [pid 5143] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 5143] <... mount resumed>) = 0 [pid 5137] <... open resumed>) = 4 [pid 5136] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5137] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [ 122.959907][ T5139] ext4 filesystem being mounted at /root/syzkaller.URAKkl/162/bus supports timestamps until 2038 (0x7fffffff) [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5137] <... mount resumed>) = 0 [pid 5136] <... open resumed>) = 4 [pid 307] getdents64(4, [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = 1 [pid 5136] <... futex resumed>) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5143] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5130] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5137] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5136] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] close(4 [pid 5136] <... mount resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... close resumed>) = 0 [pid 5136] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 0 [pid 307] rmdir("./158/bus" [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] <... futex resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5136] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./158") = 0 [pid 307] mkdir("./159", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5137] <... open resumed>) = 5 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5137] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] <... openat resumed>) = 6 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5137] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] <... open resumed>) = 5 [pid 5139] <... ioctl resumed>) = 0 [pid 5137] <... write resumed>) = 262144 [pid 307] <... openat resumed>) = 3 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] close(4 [pid 5136] <... open resumed>) = 5 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... close resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 0 [pid 307] close(3 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... close resumed>) = 0 [pid 5143] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] chdir("./file0" [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] <... futex resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5133] <... futex resumed>) = 0 [pid 5137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5133] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... openat resumed>) = 6 [pid 5138] <... futex resumed>) = 0 [pid 5137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5133] <... futex resumed>) = 0 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5137] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5136] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5133] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... chdir resumed>) = 0 [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5154 attached [pid 5154] set_robust_list(0x55555748e5e0, 24 [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... openat resumed>) = 6 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5154 [pid 5143] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5143] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5140] <... futex resumed>) = 0 [pid 5139] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5143] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 0 [pid 5136] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... set_robust_list resumed>) = 0 [pid 5154] chdir("./159") = 0 [pid 5154] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5154] setpgid(0, 0) = 0 [pid 5154] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5154] write(3, "1000", 4) = 4 [pid 5154] close(3) = 0 [pid 5154] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5154] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5154] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5155], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5155 [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5130] <... futex resumed>) = 0 [pid 5139] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5136] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5136] <... write resumed>) = 262144 ./strace-static-x86_64: Process 5155 attached [pid 5155] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5155] memfd_create("syzkaller", 0) = 3 [pid 5139] <... open resumed>) = 4 [pid 5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5143] <... write resumed>) = 262144 [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] <... futex resumed>) = 0 [pid 5139] <... futex resumed>) = 1 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5136] <... futex resumed>) = 1 [pid 5130] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 1 [pid 5140] <... futex resumed>) = 0 [pid 5138] <... futex resumed>) = 0 [pid 5130] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5130] <... futex resumed>) = 0 [pid 5140] <... futex resumed>) = 0 [pid 5139] <... mount resumed>) = 0 [pid 5136] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5143] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5130] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 0 [pid 5139] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] <... open resumed>) = 5 [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5139] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 305] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5139] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5138] <... futex resumed>) = 0 [pid 305] lstat("./158/bus", [pid 5139] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5137] <... write resumed>) = 1048576 [pid 5137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5133] <... futex resumed>) = 0 [pid 5133] exit_group(0) = ? [pid 5137] <... futex resumed>) = ? [pid 5137] +++ exited with 0 +++ [pid 5133] +++ exited with 0 +++ [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 305] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... restart_syscall resumed>) = 0 [pid 309] umount2("./156", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... openat resumed>) = 4 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./156", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, [pid 305] fstat(4, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] getdents64(4, [pid 309] umount2("./156/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./156/binderfs", [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./156/binderfs" [pid 305] getdents64(4, [pid 309] <... unlink resumed>) = 0 [pid 309] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./158/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./158") = 0 [pid 305] mkdir("./159", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5155] <... write resumed>) = 1048576 [pid 5155] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5155] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5155] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5155] close(3) = 0 [pid 5155] mkdir("./bus", 0777) = 0 [pid 5155] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5157 attached [pid 5157] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5157] chdir("./159" [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5157 [pid 5139] <... write resumed>) = 262144 [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5138] <... futex resumed>) = 0 [pid 5138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5157] <... chdir resumed>) = 0 [pid 5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5139] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5157] setpgid(0, 0) = 0 [pid 5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5157] write(3, "1000", 4) = 4 [pid 5157] close(3) = 0 [pid 5157] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5157] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5157] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5159], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5159 [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5159 attached [pid 5159] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5130] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5159] memfd_create("syzkaller", 0) = 3 [pid 5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 123.102264][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 123.122958][ T5155] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/159/bus supports timestamps until 2038 (0x7fffffff) [pid 5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5138] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5155] <... mount resumed>) = 0 [pid 5155] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5155] chdir("./bus") = 0 [pid 5155] ioctl(4, LOOP_CLR_FD) = 0 [pid 5155] close(4) = 0 [pid 5159] <... write resumed>) = 1048576 [pid 5143] <... write resumed>) = 1048576 [pid 5136] <... write resumed>) = 1048576 [pid 5159] munmap(0x7f19b51e4000, 1048576 [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... munmap resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5155] chdir("./file0" [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... openat resumed>) = 4 [pid 5155] <... chdir resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5143] <... futex resumed>) = 0 [pid 5136] <... futex resumed>) = 0 [pid 5159] ioctl(4, LOOP_SET_FD, 3 [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5130] exit_group(0 [pid 5140] exit_group(0 [pid 5155] <... open resumed>) = 4 [pid 5154] <... futex resumed>) = 0 [pid 5140] <... exit_group resumed>) = ? [pid 5130] <... exit_group resumed>) = ? [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5155] <... mount resumed>) = 0 [pid 5154] <... futex resumed>) = 0 [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5155] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 123.141179][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... ioctl resumed>) = 0 [pid 5155] <... open resumed>) = 5 [pid 5143] +++ exited with 0 +++ [pid 5140] +++ exited with 0 +++ [pid 5139] <... write resumed>) = 1048576 [pid 5136] +++ exited with 0 +++ [pid 5130] +++ exited with 0 +++ [pid 5159] close(3 [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5130, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5159] <... close resumed>) = 0 [pid 5155] <... futex resumed>) = 1 [pid 5154] <... futex resumed>) = 0 [pid 5159] mkdir("./bus", 0777 [pid 5155] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... mkdir resumed>) = 0 [pid 5155] <... openat resumed>) = 6 [pid 5154] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5140, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5155] <... futex resumed>) = 0 [pid 5154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5155] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 5155] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5154] <... futex resumed>) = 0 [pid 310] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] fstat(3, [pid 5155] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5155] <... write resumed>) = 262144 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] getdents64(3, [pid 310] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] <... openat resumed>) = 3 [pid 308] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] fstat(3, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] lstat("./159/binderfs", [pid 310] getdents64(3, [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./159/binderfs" [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... unlink resumed>) = 0 [pid 310] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./160/binderfs", [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5154] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5155] <... futex resumed>) = 1 [pid 5155] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./160/binderfs") = 0 [pid 310] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5139] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5138] exit_group(0) = ? [pid 5139] <... futex resumed>) = ? [pid 5155] <... write resumed>) = 1048576 [pid 5155] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5154] <... futex resumed>) = 0 [pid 5154] exit_group(0) = ? [pid 5155] <... futex resumed>) = ? [ 123.205249][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 123.234266][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] <... umount2 resumed>) = 0 [pid 5139] +++ exited with 0 +++ [pid 5138] +++ exited with 0 +++ [pid 309] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./156/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./156/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./156/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./156/bus") = 0 [pid 309] getdents64(3, [pid 5155] +++ exited with 0 +++ [pid 5154] +++ exited with 0 +++ [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./156") = 0 [pid 309] mkdir("./157", 0777 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5154, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5138, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5164 ./strace-static-x86_64: Process 5164 attached [pid 5164] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5164] chdir("./157") = 0 [pid 5164] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5164] setpgid(0, 0) = 0 [pid 5164] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5164] write(3, "1000", 4) = 4 [pid 5164] close(3) = 0 [pid 5164] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5164] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5164] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5165], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5165 [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5165 attached [pid 5165] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5165] memfd_create("syzkaller", 0) = 3 [pid 5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(3, [pid 307] getdents64(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] getdents64(3, [pid 307] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] lstat("./159/binderfs", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./159/binderfs" [pid 306] unlink("./162/binderfs" [pid 5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... unlink resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 307] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 123.248054][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 123.249213][ T5159] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/159/bus supports timestamps until 2038 (0x7fffffff) [ 123.279569][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] <... write resumed>) = 1048576 [pid 5165] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5165] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5159] <... mount resumed>) = 0 [pid 5159] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5159] chdir("./bus") = 0 [pid 5159] ioctl(4, LOOP_CLR_FD [pid 5165] <... openat resumed>) = 4 [pid 5159] <... ioctl resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5165] ioctl(4, LOOP_SET_FD, 3 [pid 5159] close(4 [pid 310] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./160/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./160/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./160") = 0 [pid 310] mkdir("./161", 0777) = 0 [ 123.298618][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 123.312269][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 123.317949][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 5165] <... ioctl resumed>) = 0 [pid 5159] <... close resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 308] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5165] close(3 [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5165] <... close resumed>) = 0 [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5165] mkdir("./bus", 0777 [pid 5159] chdir("./file0" [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... mkdir resumed>) = 0 [pid 5159] <... chdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... futex resumed>) = 0 [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] lstat("./159/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./159/bus") = 0 [pid 5157] <... futex resumed>) = 0 [pid 5159] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./159") = 0 [ 123.344517][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 308] mkdir("./160", 0777 [pid 5159] <... open resumed>) = 4 [pid 308] <... mkdir resumed>) = 0 [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5159] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5157] <... futex resumed>) = 0 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] <... mount resumed>) = 0 [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5159] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 5157] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] <... open resumed>) = 5 [pid 5157] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] close(3 [pid 307] lstat("./159/bus", [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5157] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... close resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5159] <... futex resumed>) = 0 [pid 5157] <... mmap resumed>) = 0x7f19b52c3000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5167 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5159] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5157] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5157] <... mprotect resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5169 [pid 307] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5157] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] <... openat resumed>) = 4 [pid 307] fstat(4, [pid 5157] <... clone resumed>, parent_tid=[5170], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5170 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5157] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5157] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5157] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./159/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./159") = 0 [pid 307] mkdir("./160", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 306] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5171 ./strace-static-x86_64: Process 5170 attached ./strace-static-x86_64: Process 5167 attached [pid 5170] set_robust_list(0x7f19b52e39e0, 24 [pid 5167] set_robust_list(0x55555748e5e0, 24 [pid 5170] <... set_robust_list resumed>) = 0 [pid 5167] <... set_robust_list resumed>) = 0 [pid 5170] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5167] chdir("./161" [pid 5170] <... openat resumed>) = 6 [pid 5167] <... chdir resumed>) = 0 [pid 306] lstat("./162/bus", [pid 5170] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5169 attached ) = 1 [pid 5167] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5157] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5170] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5169] set_robust_list(0x55555748e5e0, 24 [pid 5167] <... prctl resumed>) = 0 [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... set_robust_list resumed>) = 0 [pid 5167] setpgid(0, 0 [pid 5159] <... futex resumed>) = 0 [pid 5157] <... futex resumed>) = 1 [pid 306] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5169] chdir("./160" [pid 5167] <... setpgid resumed>) = 0 [pid 5159] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5169] <... chdir resumed>) = 0 [pid 5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5169] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5167] <... openat resumed>) = 3 [pid 5169] <... prctl resumed>) = 0 [pid 5167] write(3, "1000", 4 [pid 5169] setpgid(0, 0 [pid 5167] <... write resumed>) = 4 [pid 5169] <... setpgid resumed>) = 0 [pid 5167] close(3 [pid 5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5167] <... close resumed>) = 0 [pid 5169] <... openat resumed>) = 3 [pid 5169] write(3, "1000", 4 [pid 5167] symlink("/dev/binderfs", "./binderfs" [pid 5169] <... write resumed>) = 4 [pid 5167] <... symlink resumed>) = 0 [pid 5169] close(3 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... close resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5169] symlink("/dev/binderfs", "./binderfs" [pid 5167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5169] <... symlink resumed>) = 0 [pid 5167] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5169] <... futex resumed>) = 0 [pid 5167] <... mprotect resumed>) = 0 [pid 5169] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5167] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5169] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5169] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5167] <... clone resumed>, parent_tid=[5172], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5172 [pid 5169] <... mprotect resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5167] <... futex resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5169] <... clone resumed>, parent_tid=[5173], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5173 [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5173 attached [pid 5173] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5173] memfd_create("syzkaller", 0) = 3 [pid 5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5159] <... write resumed>) = 262144 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5172 attached [pid 5172] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 306] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, [pid 5172] memfd_create("syzkaller", 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... memfd_create resumed>) = 3 [pid 5172] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5157] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5157] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5159] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5171 attached [pid 306] close(4) = 0 [pid 306] rmdir("./162/bus") = 0 [pid 306] getdents64(3, [pid 5171] set_robust_list(0x55555748e5e0, 24 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5171] <... set_robust_list resumed>) = 0 [pid 306] close(3 [pid 5171] chdir("./160" [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./162" [pid 5171] <... chdir resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 5171] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] mkdir("./163", 0777 [pid 5171] <... prctl resumed>) = 0 [pid 5171] setpgid(0, 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5171] <... setpgid resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5171] <... openat resumed>) = 3 [pid 306] close(3 [pid 5171] write(3, "1000", 4 [pid 306] <... close resumed>) = 0 [pid 5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5172] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5171] <... write resumed>) = 4 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5171] close(3) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5175 [pid 5171] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5171] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5171] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5175 attached , parent_tid=[5176], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5176 [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] set_robust_list(0x55555748e5e0, 24 [pid 5171] <... futex resumed>) = 0 [pid 5175] <... set_robust_list resumed>) = 0 [pid 5175] chdir("./163") = 0 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5175] setpgid(0, 0) = 0 [pid 5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5175] write(3, "1000", 4) = 4 [pid 5175] close(3) = 0 [pid 5175] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 5176 attached [pid 5173] <... write resumed>) = 1048576 [pid 5159] <... write resumed>) = 1048576 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] set_robust_list(0x7f19bd6049e0, 24 [pid 5159] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... set_robust_list resumed>) = 0 [pid 5172] <... write resumed>) = 1048576 [pid 5159] <... futex resumed>) = 1 [pid 5157] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = 0 [pid 5175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5175] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5175] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5177], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5177 [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5173] munmap(0x7f19b51e4000, 1048576 [pid 5157] exit_group(0 [pid 5159] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5170] <... futex resumed>) = ? [pid 5159] <... futex resumed>) = ? [pid 5157] <... exit_group resumed>) = ? [pid 5170] +++ exited with 0 +++ [pid 5173] <... munmap resumed>) = 0 [pid 5173] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5173] ioctl(4, LOOP_SET_FD, 3 [pid 5172] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5172] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5165] <... mount resumed>) = 0 [pid 5165] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5165] chdir("./bus") = 0 [pid 5165] ioctl(4, LOOP_CLR_FD [pid 5173] <... ioctl resumed>) = 0 [pid 5172] <... openat resumed>) = 4 [pid 5173] close(3 [pid 5172] ioctl(4, LOOP_SET_FD, 3 [pid 5173] <... close resumed>) = 0 [pid 5173] mkdir("./bus", 0777) = 0 [pid 5173] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5177 attached [pid 5176] memfd_create("syzkaller", 0 [pid 5172] <... ioctl resumed>) = 0 [pid 5165] <... ioctl resumed>) = 0 [pid 5172] close(3 [pid 5165] close(4 [pid 5172] <... close resumed>) = 0 [pid 5165] <... close resumed>) = 0 [pid 5172] mkdir("./bus", 0777 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... mkdir resumed>) = 0 [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5172] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5165] chdir("./file0" [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... chdir resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... open resumed>) = 4 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... memfd_create resumed>) = 3 [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5159] +++ exited with 0 +++ [pid 5157] +++ exited with 0 +++ [pid 5165] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... mount resumed>) = 0 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5165] <... open resumed>) = 5 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5165] <... openat resumed>) = 6 [pid 5164] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 0 [pid 5164] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5165] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] set_robust_list(0x7f19bd6049e0, 24 [pid 5176] <... mmap resumed>) = 0x7f19b51e4000 [pid 5165] <... write resumed>) = 262144 [pid 5164] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 123.494129][ T5165] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/157/bus supports timestamps until 2038 (0x7fffffff) [pid 305] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5177] <... set_robust_list resumed>) = 0 [pid 5176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] <... openat resumed>) = 3 [pid 5177] memfd_create("syzkaller", 0 [pid 5173] <... mount resumed>) = 0 [pid 305] fstat(3, [pid 5177] <... memfd_create resumed>) = 3 [pid 5173] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] getdents64(3, [pid 5177] <... mmap resumed>) = 0x7f19b51e4000 [pid 5173] <... openat resumed>) = 3 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5173] chdir("./bus" [pid 305] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5173] <... chdir resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5173] ioctl(4, LOOP_CLR_FD [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 305] unlink("./159/binderfs" [pid 5173] <... ioctl resumed>) = 0 [pid 5165] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5164] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] <... write resumed>) = 1048576 [pid 5173] close(4 [pid 5164] <... futex resumed>) = 0 [pid 5176] munmap(0x7f19b51e4000, 1048576 [pid 5173] <... close resumed>) = 0 [pid 5164] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... write resumed>) = 1048576 [pid 5177] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5177] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 123.554976][ T5173] ext4 filesystem being mounted at /root/syzkaller.69675s/160/bus supports timestamps until 2038 (0x7fffffff) [ 123.575465][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 123.590538][ T5172] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/161/bus supports timestamps until 2038 (0x7fffffff) [pid 5177] ioctl(4, LOOP_SET_FD, 3 [pid 5176] <... munmap resumed>) = 0 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... mount resumed>) = 0 [pid 5165] <... write resumed>) = 1048576 [pid 5176] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5173] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5173] chdir("./file0" [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... chdir resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5173] <... open resumed>) = 4 [pid 5169] <... futex resumed>) = 0 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... openat resumed>) = 4 [pid 5173] <... mount resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5176] ioctl(4, LOOP_SET_FD, 3 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... futex resumed>) = 0 [pid 5169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5173] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... ioctl resumed>) = 0 [pid 5176] <... ioctl resumed>) = 0 [pid 5169] <... futex resumed>) = 0 [pid 5177] close(3 [pid 5176] close(3 [pid 5173] <... open resumed>) = 5 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5176] <... close resumed>) = 0 [pid 5176] mkdir("./bus", 0777 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... mkdir resumed>) = 0 [pid 5176] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5173] <... futex resumed>) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... close resumed>) = 0 [pid 5173] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5177] mkdir("./bus", 0777 [pid 5173] <... openat resumed>) = 6 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5169] <... futex resumed>) = 0 [pid 5177] <... mkdir resumed>) = 0 [pid 5173] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5172] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5169] <... futex resumed>) = 0 [pid 5165] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5165] <... futex resumed>) = 1 [pid 5164] <... futex resumed>) = 0 [pid 5164] exit_group(0) = ? [pid 5173] <... write resumed>) = 262144 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5169] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5169] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5173] <... futex resumed>) = 1 [pid 5173] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5165] +++ exited with 0 +++ [pid 5164] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5164, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] umount2("./157", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5172] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./157", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./157/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./157/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./157/binderfs") = 0 [ 123.600365][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 123.642836][ T5176] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/160/bus supports timestamps until 2038 (0x7fffffff) [pid 309] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5173] <... write resumed>) = 1048576 [pid 5173] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5169] <... futex resumed>) = 0 [pid 5169] exit_group(0) = ? [pid 5173] <... futex resumed>) = ? [pid 5173] +++ exited with 0 +++ [pid 5169] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./160/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./160/binderfs") = 0 [pid 308] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] <... mount resumed>) = 0 [pid 5176] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5176] chdir("./bus") = 0 [pid 5176] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] close(4 [pid 5172] chdir("./bus") = 0 [ 123.663163][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 123.683046][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 123.699158][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5172] ioctl(4, LOOP_CLR_FD [pid 5177] <... mount resumed>) = 0 [pid 5177] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5177] chdir("./bus") = 0 [pid 5177] ioctl(4, LOOP_CLR_FD) = 0 [pid 5176] <... close resumed>) = 0 [pid 5172] <... ioctl resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 5177] close(4 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] close(4 [pid 305] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] <... futex resumed>) = 1 [pid 5172] <... close resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5176] chdir("./file0" [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... chdir resumed>) = 0 [pid 5172] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5167] <... futex resumed>) = 0 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5176] <... futex resumed>) = 0 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5172] chdir("./file0" [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] lstat("./159/bus", [pid 5176] <... futex resumed>) = 0 [pid 5172] <... chdir resumed>) = 0 [pid 5171] <... futex resumed>) = 1 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5176] <... open resumed>) = 4 [pid 5172] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5176] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5172] <... open resumed>) = 4 [pid 5176] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 4 [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 305] fstat(4, [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5172] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] getdents64(4, [pid 5176] <... mount resumed>) = 0 [pid 5172] <... mount resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] getdents64(4, [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(4 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5172] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] rmdir("./159/bus" [pid 5176] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5176] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rmdir resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./159") = 0 [pid 305] mkdir("./160", 0777) = 0 [ 123.703991][ T5177] ext4 filesystem being mounted at /root/syzkaller.URAKkl/163/bus supports timestamps until 2038 (0x7fffffff) [ 123.713623][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5177] <... close resumed>) = 0 [pid 5172] <... open resumed>) = 5 [pid 305] <... openat resumed>) = 3 [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5172] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5177] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... openat resumed>) = 6 [pid 5177] chdir("./file0" [pid 5175] <... futex resumed>) = 0 [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... chdir resumed>) = 0 [pid 5172] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5167] <... futex resumed>) = 0 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] <... write resumed>) = 262144 [pid 5177] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5175] <... futex resumed>) = 0 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] ioctl(3, LOOP_CLR_FD [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] <... open resumed>) = 4 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5177] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5167] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = 0 [pid 5167] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5177] <... mount resumed>) = 0 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] <... open resumed>) = 5 [pid 5172] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 308] <... umount2 resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5177] <... futex resumed>) = 1 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 5177] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5176] <... futex resumed>) = 1 [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5171] <... futex resumed>) = 0 [pid 309] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 5176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5177] <... open resumed>) = 5 [pid 5175] <... futex resumed>) = 0 [pid 5171] <... futex resumed>) = 0 [pid 309] lstat("./157/bus", [pid 305] <... close resumed>) = 0 [pid 5176] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5176] <... openat resumed>) = 6 [pid 309] umount2("./157/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5176] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./157/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 4 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 309] fstat(4, [pid 5176] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5177] <... futex resumed>) = 0 [pid 5175] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] lstat("./160/bus", [pid 5177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5190 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... futex resumed>) = 0 [pid 5172] <... write resumed>) = 1048576 [pid 308] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5177] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5177] <... openat resumed>) = 6 [pid 5172] <... futex resumed>) = 1 [pid 5167] <... futex resumed>) = 0 [pid 309] getdents64(4, [pid 308] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5167] exit_group(0 [pid 308] <... openat resumed>) = 4 [pid 5177] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5172] <... futex resumed>) = ? [pid 5167] <... exit_group resumed>) = ? [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] fstat(4, [pid 5177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5172] +++ exited with 0 +++ [pid 5167] +++ exited with 0 +++ [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5175] <... futex resumed>) = 0 [pid 308] getdents64(4, [pid 5177] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5177] <... write resumed>) = 262144 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] getdents64(4, [pid 308] getdents64(4, [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5177] <... futex resumed>) = 1 [pid 5175] <... futex resumed>) = 0 [pid 309] close(4 [pid 308] close(4 [pid 5177] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... close resumed>) = 0 ./strace-static-x86_64: Process 5190 attached [pid 5176] <... write resumed>) = 262144 [pid 5175] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... close resumed>) = 0 [pid 308] rmdir("./160/bus" [pid 5190] set_robust_list(0x55555748e5e0, 24 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] rmdir("./157/bus" [pid 5190] <... set_robust_list resumed>) = 0 [pid 5176] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 5190] chdir("./160" [pid 5176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(3, [pid 309] getdents64(3, [pid 308] getdents64(3, [pid 5190] <... chdir resumed>) = 0 [pid 5176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5171] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5176] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(3, [pid 309] close(3 [pid 308] close(3 [pid 5190] <... prctl resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... close resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5190] setpgid(0, 0 [pid 310] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] rmdir("./157" [pid 5190] <... setpgid resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... rmdir resumed>) = 0 [pid 308] rmdir("./160" [pid 5190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] lstat("./161/binderfs", [pid 309] mkdir("./158", 0777 [pid 5190] <... openat resumed>) = 3 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 5190] write(3, "1000", 4 [pid 310] unlink("./161/binderfs" [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5190] <... write resumed>) = 4 [pid 310] <... unlink resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 308] mkdir("./161", 0777 [pid 5190] close(3 [pid 310] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] ioctl(3, LOOP_CLR_FD [pid 5190] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5190] symlink("/dev/binderfs", "./binderfs" [pid 309] close(3 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5191 ./strace-static-x86_64: Process 5191 attached [pid 5191] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5191] chdir("./161") = 0 [pid 5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5191] setpgid(0, 0) = 0 [pid 5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5191] write(3, "1000", 4) = 4 [pid 5191] close(3) = 0 [pid 5191] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5191] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5191] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5191] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5192], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5192 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5192 attached [pid 5192] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5192] memfd_create("syzkaller", 0) = 3 [pid 5192] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5192] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5177] <... write resumed>) = 1048576 [pid 5177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5175] <... futex resumed>) = 0 [pid 5177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5175] exit_group(0 [pid 5177] <... futex resumed>) = ? [pid 5175] <... exit_group resumed>) = ? [pid 5190] <... symlink resumed>) = 0 [pid 5177] +++ exited with 0 +++ [pid 5176] <... write resumed>) = 1048576 [pid 5175] +++ exited with 0 +++ [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5193 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5176] <... futex resumed>) = 1 [pid 5171] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5171] exit_group(0 [pid 5190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5171] <... exit_group resumed>) = ? [pid 5176] <... futex resumed>) = ? [pid 5192] <... write resumed>) = 1048576 [pid 5192] munmap(0x7f19b51e4000, 1048576 [pid 5176] +++ exited with 0 +++ [pid 5171] +++ exited with 0 +++ [pid 5190] <... mmap resumed>) = 0x7f19bd5e4000 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5190] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 306] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5190] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5190] <... clone resumed>, parent_tid=[5194], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5194 [pid 307] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 5190] <... futex resumed>) = 0 [pid 307] fstat(3, [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(3, [pid 307] getdents64(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] getdents64(3, [pid 307] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] lstat("./160/binderfs", [pid 306] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] unlink("./160/binderfs" [pid 306] lstat("./163/binderfs", [pid 307] <... unlink resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] unlink("./163/binderfs") = 0 ./strace-static-x86_64: Process 5194 attached [pid 306] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5194] set_robust_list(0x7f19bd6049e0, 24 [pid 5192] <... munmap resumed>) = 0 [ 123.849753][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 123.887265][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5192] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5192] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5193 attached [pid 5193] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5193] chdir("./158") = 0 [pid 5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5193] setpgid(0, 0) = 0 [pid 5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5193] write(3, "1000", 4) = 4 [pid 5193] close(3) = 0 [pid 5193] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5193] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5193] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5195], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5195 [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5195 attached [pid 5195] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5195] memfd_create("syzkaller", 0) = 3 [pid 5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5192] <... ioctl resumed>) = 0 [pid 5192] close(3 [pid 5194] <... set_robust_list resumed>) = 0 [pid 5192] <... close resumed>) = 0 [pid 5194] memfd_create("syzkaller", 0 [pid 5192] mkdir("./bus", 0777 [pid 5194] <... memfd_create resumed>) = 3 [pid 5192] <... mkdir resumed>) = 0 [pid 5192] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 123.900816][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 123.919356][ T387] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 123.919478][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5195] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5195] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5195] ioctl(4, LOOP_SET_FD, 3 [pid 5194] <... write resumed>) = 1048576 [pid 5194] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5194] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5192] <... mount resumed>) = 0 [pid 5192] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5192] chdir("./bus") = 0 [ 123.948549][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 123.979535][ T5192] ext4 filesystem being mounted at /root/syzkaller.69675s/161/bus supports timestamps until 2038 (0x7fffffff) [pid 5192] ioctl(4, LOOP_CLR_FD [pid 5195] <... ioctl resumed>) = 0 [pid 5195] close(3 [pid 5194] <... openat resumed>) = 4 [pid 5192] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5195] <... close resumed>) = 0 [pid 5194] ioctl(4, LOOP_SET_FD, 3 [pid 5195] mkdir("./bus", 0777) = 0 [pid 5195] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5192] close(4 [pid 307] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5194] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5194] close(3) = 0 [pid 5194] mkdir("./bus", 0777) = 0 [pid 307] lstat("./160/bus", [pid 306] lstat("./163/bus", [pid 5194] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 4 [pid 306] <... openat resumed>) = 4 [pid 307] fstat(4, [pid 306] fstat(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 306] getdents64(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, [pid 306] getdents64(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4 [pid 306] close(4 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./160/bus") = 0 [pid 306] <... close resumed>) = 0 [pid 307] getdents64(3, [pid 306] rmdir("./163/bus" [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./160" [pid 306] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./161", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./163") = 0 [pid 306] mkdir("./164", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5192] <... close resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5192] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./161/bus", [pid 307] close(3 [pid 306] close(3 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] chdir("./file0" [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5192] <... chdir resumed>) = 0 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5192] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5191] <... futex resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5206 attached ./strace-static-x86_64: Process 5205 attached [pid 5195] <... mount resumed>) = 0 [pid 5194] <... mount resumed>) = 0 [pid 5192] <... open resumed>) = 4 [pid 310] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5195] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5205] set_robust_list(0x55555748e5e0, 24 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 4 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5205 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5206 [pid 5206] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5205] <... set_robust_list resumed>) = 0 [pid 5195] <... openat resumed>) = 3 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 310] fstat(4, [pid 5194] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5206] chdir("./164" [pid 5205] chdir("./161" [pid 5195] chdir("./bus" [pid 5192] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5191] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 5195] <... chdir resumed>) = 0 [pid 5192] <... mount resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] ioctl(4, LOOP_CLR_FD [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5194] chdir("./bus" [pid 5195] <... ioctl resumed>) = 0 [pid 5192] <... futex resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 5194] <... chdir resumed>) = 0 [pid 5194] ioctl(4, LOOP_CLR_FD) = 0 [pid 5195] close(4 [pid 5191] <... futex resumed>) = 0 [pid 5205] <... chdir resumed>) = 0 [pid 5192] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5195] <... close resumed>) = 0 [pid 5194] close(4) = 0 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5194] chdir("./file0" [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... chdir resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5206] <... chdir resumed>) = 0 [pid 5206] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5206] setpgid(0, 0) = 0 [pid 5206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5206] write(3, "1000", 4) = 4 [pid 5206] close(3) = 0 [pid 5206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5206] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5206] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5207], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5207 [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... open resumed>) = 4 [pid 5192] <... open resumed>) = 5 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(4 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5190] <... futex resumed>) = 0 [pid 5194] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... mount resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... open resumed>) = 5 [pid 5190] <... futex resumed>) = 0 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] <... openat resumed>) = 6 [pid 5190] <... futex resumed>) = 0 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5194] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5195] <... futex resumed>) = 1 [pid 5194] <... write resumed>) = 262144 [pid 5193] <... futex resumed>) = 0 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5205] <... prctl resumed>) = 0 [pid 5195] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] rmdir("./161/bus" [pid 5205] setpgid(0, 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5192] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 0 [pid 5190] <... futex resumed>) = 0 [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5194] <... futex resumed>) = 1 [pid 5194] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5192] <... openat resumed>) = 6 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] chdir("./file0") = 0 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... setpgid resumed>) = 0 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 1 [pid 310] getdents64(3, [pid 5191] <... futex resumed>) = 0 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5191] <... futex resumed>) = 0 [pid 5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5207 attached [pid 5207] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5207] memfd_create("syzkaller", 0) = 3 [pid 5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5192] <... write resumed>) = 262144 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5193] <... futex resumed>) = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(3 [pid 5195] <... open resumed>) = 4 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 5205] <... openat resumed>) = 3 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 310] rmdir("./161" [pid 5205] write(3, "1000", 4 [pid 5195] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 5193] <... futex resumed>) = 0 [pid 5195] <... mount resumed>) = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... write resumed>) = 4 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] mkdir("./162", 0777 [pid 5205] close(3 [pid 5195] <... futex resumed>) = 0 [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... mkdir resumed>) = 0 [pid 5205] <... close resumed>) = 0 [pid 5195] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5205] symlink("/dev/binderfs", "./binderfs" [pid 5195] <... open resumed>) = 5 [pid 310] <... openat resumed>) = 3 [pid 5205] <... symlink resumed>) = 0 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5205] <... futex resumed>) = 0 [pid 5195] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 5193] <... futex resumed>) = 0 [ 124.118665][ T5194] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/160/bus supports timestamps until 2038 (0x7fffffff) [ 124.131927][ T5195] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/158/bus supports timestamps until 2038 (0x7fffffff) [pid 5205] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... close resumed>) = 0 [pid 5195] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] <... mmap resumed>) = 0x7f19bd5e4000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5195] <... openat resumed>) = 6 [pid 5205] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5208 [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5195] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... mprotect resumed>) = 0 [pid 5195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5193] <... futex resumed>) = 0 [pid 5195] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5205] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5195] <... write resumed>) = 262144 [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] <... clone resumed>, parent_tid=[5209], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5209 [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5192] <... futex resumed>) = 1 [pid 5191] <... futex resumed>) = 0 [pid 5205] <... futex resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5191] <... futex resumed>) = 0 [pid 5191] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5208 attached [pid 5208] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5208] chdir("./162" [pid 5192] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5208] <... chdir resumed>) = 0 [pid 5208] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5208] setpgid(0, 0) = 0 [pid 5208] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5208] write(3, "1000", 4) = 4 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] close(3) = 0 [pid 5208] symlink("/dev/binderfs", "./binderfs" [pid 5195] <... futex resumed>) = 1 [pid 5193] <... futex resumed>) = 0 [pid 5208] <... symlink resumed>) = 0 [pid 5195] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5193] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5193] <... futex resumed>) = 0 [pid 5208] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5209 attached [pid 5208] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5207] <... write resumed>) = 1048576 [pid 5193] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] set_robust_list(0x7f19bd6049e0, 24 [pid 5208] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5209] <... set_robust_list resumed>) = 0 [pid 5208] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5209] memfd_create("syzkaller", 0 [pid 5208] <... mprotect resumed>) = 0 [pid 5209] <... memfd_create resumed>) = 3 [pid 5208] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5208] <... clone resumed>, parent_tid=[5210], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5210 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5207] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5207] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5207] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5210 attached [pid 5210] set_robust_list(0x7f19bd6049e0, 24 [pid 5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5210] <... set_robust_list resumed>) = 0 [pid 5210] memfd_create("syzkaller", 0) = 3 [pid 5210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5190] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5190] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5207] <... ioctl resumed>) = 0 [pid 5207] close(3) = 0 [pid 5207] mkdir("./bus", 0777) = 0 [pid 5207] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5194] <... write resumed>) = 1048576 [pid 5194] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5190] exit_group(0) = ? [pid 5209] <... write resumed>) = 1048576 [pid 5209] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5209] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5209] ioctl(4, LOOP_SET_FD, 3 [pid 5210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5191] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5210] <... write resumed>) = 1048576 [pid 5193] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5207] <... mount resumed>) = 0 [pid 5192] <... write resumed>) = 1048576 [pid 5210] munmap(0x7f19b51e4000, 1048576 [pid 5209] <... ioctl resumed>) = 0 [pid 5207] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5192] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... munmap resumed>) = 0 [pid 5209] close(3 [pid 5207] <... openat resumed>) = 3 [pid 5192] <... futex resumed>) = 0 [pid 5210] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5209] <... close resumed>) = 0 [pid 5207] chdir("./bus" [pid 5192] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] <... openat resumed>) = 4 [pid 5209] mkdir("./bus", 0777 [pid 5207] <... chdir resumed>) = 0 [pid 5210] ioctl(4, LOOP_SET_FD, 3 [pid 5209] <... mkdir resumed>) = 0 [pid 5207] ioctl(4, LOOP_CLR_FD [pid 5209] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5210] <... ioctl resumed>) = 0 [pid 5207] <... ioctl resumed>) = 0 [pid 5210] close(3 [pid 5207] close(4 [pid 5210] <... close resumed>) = 0 [pid 5207] <... close resumed>) = 0 [pid 5210] mkdir("./bus", 0777 [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5210] <... mkdir resumed>) = 0 [pid 5207] <... futex resumed>) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5210] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5194] +++ exited with 0 +++ [pid 5190] +++ exited with 0 +++ [pid 5207] chdir("./file0" [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... chdir resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... open resumed>) = 4 [pid 5191] exit_group(0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5190, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... mount resumed>) = 0 [pid 5191] <... exit_group resumed>) = ? [pid 5192] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5207] <... futex resumed>) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... open resumed>) = 5 [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... openat resumed>) = 6 [pid 5192] +++ exited with 0 +++ [pid 5191] +++ exited with 0 +++ [pid 305] <... restart_syscall resumed>) = 0 [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5206] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5207] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5206] <... futex resumed>) = 0 [pid 5207] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... write resumed>) = 262144 [pid 5195] <... write resumed>) = 1048576 [pid 305] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] fstat(3, [pid 5206] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5207] <... futex resumed>) = 1 [pid 5206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5195] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 5207] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5206] <... futex resumed>) = 0 [pid 308] fstat(3, [pid 305] getdents64(3, [pid 5206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5195] <... futex resumed>) = 0 [pid 5193] exit_group(0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5193] <... exit_group resumed>) = ? [pid 308] getdents64(3, [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./160/binderfs", [pid 308] lstat("./161/binderfs", [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./160/binderfs" [pid 308] unlink("./161/binderfs" [pid 305] <... unlink resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 305] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5195] +++ exited with 0 +++ [pid 5193] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./158", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./158", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./158/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./158/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./158/binderfs") = 0 [ 124.231692][ T5207] ext4 filesystem being mounted at /root/syzkaller.URAKkl/164/bus supports timestamps until 2038 (0x7fffffff) [ 124.291483][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 124.296917][ T5209] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/161/bus supports timestamps until 2038 (0x7fffffff) [ 124.316265][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 124.316291][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5209] <... mount resumed>) = 0 [pid 5207] <... write resumed>) = 1048576 [pid 5207] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5207] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5210] <... mount resumed>) = 0 [pid 5210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5210] chdir("./bus") = 0 [pid 5210] ioctl(4, LOOP_CLR_FD) = 0 [pid 5210] close(4) = 0 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5206] exit_group(0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5207] <... futex resumed>) = ? [pid 5206] <... exit_group resumed>) = ? [pid 5207] +++ exited with 0 +++ [pid 5206] +++ exited with 0 +++ [pid 5210] <... futex resumed>) = 1 [pid 5210] chdir("./file0") = 0 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [pid 5210] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5208] <... futex resumed>) = 0 [pid 5208] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5208] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5210] <... futex resumed>) = 1 [ 124.331455][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 124.343781][ T5210] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/162/bus supports timestamps until 2038 (0x7fffffff) [ 124.358780][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5210] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5209] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5206, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5210] <... write resumed>) = 1048576 [pid 5209] chdir("./bus" [pid 306] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5208] <... futex resumed>) = 0 [pid 5210] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5208] exit_group(0 [pid 5210] <... futex resumed>) = ? [pid 5208] <... exit_group resumed>) = ? [pid 5210] +++ exited with 0 +++ [pid 5208] +++ exited with 0 +++ [pid 5209] <... chdir resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] ioctl(4, LOOP_CLR_FD [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5208, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./162/binderfs") = 0 [pid 306] <... openat resumed>) = 3 [pid 310] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./164/binderfs") = 0 [ 124.380819][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 124.410717][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 124.423691][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... ioctl resumed>) = 0 [pid 5209] close(4 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./160/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./160/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./160") = 0 [pid 305] mkdir("./161", 0777) = 0 [ 124.424665][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 124.442755][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5209] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5220 ./strace-static-x86_64: Process 5220 attached [pid 5220] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5220] chdir("./161" [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5209] chdir("./file0" [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... chdir resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5209] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5220] <... chdir resumed>) = 0 [pid 5220] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5220] setpgid(0, 0 [pid 5209] <... open resumed>) = 4 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5209] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... mount resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5205] <... futex resumed>) = 0 [pid 5209] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5209] <... open resumed>) = 5 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5220] <... setpgid resumed>) = 0 [pid 5220] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5220] write(3, "1000", 4) = 4 [pid 5220] close(3) = 0 [pid 5220] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5220] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 5220] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5221], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5221 [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5221 attached [pid 5221] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5221] memfd_create("syzkaller", 0) = 3 [pid 5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] <... umount2 resumed>) = 0 [pid 5205] <... futex resumed>) = 0 [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = 0 [pid 5209] <... openat resumed>) = 6 [pid 5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5209] <... futex resumed>) = 1 [pid 5205] <... futex resumed>) = 0 [pid 309] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5205] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./162/bus", [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5209] <... write resumed>) = 262144 [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] lstat("./158/bus", [pid 308] lstat("./161/bus", [pid 310] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] umount2("./158/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... openat resumed>) = 4 [pid 309] openat(AT_FDCWD, "./158/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] fstat(4, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... openat resumed>) = 4 [pid 308] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] getdents64(4, [pid 309] fstat(4, [pid 308] <... openat resumed>) = 4 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] fstat(4, [pid 310] getdents64(4, [pid 309] getdents64(4, [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, [pid 310] <... close resumed>) = 0 [pid 310] rmdir("./162/bus" [pid 309] getdents64(4, [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5221] <... write resumed>) = 1048576 [pid 310] <... rmdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] getdents64(4, [pid 310] getdents64(3, [pid 309] close(4 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] <... close resumed>) = 0 [pid 308] close(4 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 309] rmdir("./158/bus" [pid 308] <... close resumed>) = 0 [pid 5205] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5205] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] rmdir("./161/bus" [pid 5205] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... rmdir resumed>) = 0 [pid 5221] munmap(0x7f19b51e4000, 1048576 [pid 5209] <... futex resumed>) = 1 [pid 310] rmdir("./162" [pid 309] getdents64(3, [pid 308] <... rmdir resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] getdents64(3, [pid 310] mkdir("./163", 0777 [pid 5209] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 309] close(3 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5221] <... munmap resumed>) = 0 [pid 5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] <... mkdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] close(3 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... close resumed>) = 0 [pid 309] rmdir("./158") = 0 [pid 308] rmdir("./161") = 0 [pid 309] mkdir("./159", 0777) = 0 [pid 308] mkdir("./162", 0777 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5209] <... write resumed>) = 1048576 [pid 5209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5205] <... futex resumed>) = 0 [pid 5209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5205] exit_group(0) = ? [pid 5209] <... futex resumed>) = 231 [pid 5221] <... openat resumed>) = 4 [pid 5221] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5221] close(3) = 0 [pid 310] <... openat resumed>) = 3 [pid 5221] mkdir("./bus", 0777 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5223 attached [pid 5221] <... mkdir resumed>) = 0 [pid 5209] +++ exited with 0 +++ [pid 5205] +++ exited with 0 +++ [pid 5221] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5223 [pid 308] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 309] close(3 [pid 308] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5223] set_robust_list(0x55555748e5e0, 24 [pid 307] <... openat resumed>) = 3 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5224 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5225 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5225 attached [pid 5223] <... set_robust_list resumed>) = 0 [pid 307] getdents64(3, [pid 5223] chdir("./163" [pid 5225] set_robust_list(0x55555748e5e0, 24 [pid 5223] <... chdir resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5225] <... set_robust_list resumed>) = 0 [pid 5223] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 5225] chdir("./159" [pid 5223] <... prctl resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./161/binderfs", [pid 5225] <... chdir resumed>) = 0 [pid 5223] setpgid(0, 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./161/binderfs") = 0 [pid 307] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./164/bus") = 0 ./strace-static-x86_64: Process 5224 attached [pid 5224] set_robust_list(0x55555748e5e0, 24 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5224] <... set_robust_list resumed>) = 0 [pid 5224] chdir("./162" [pid 306] close(3) = 0 [pid 5224] <... chdir resumed>) = 0 [pid 306] rmdir("./164") = 0 [pid 5224] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5224] setpgid(0, 0) = 0 [pid 5224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] mkdir("./165", 0777 [pid 5224] write(3, "1000", 4 [pid 306] <... mkdir resumed>) = 0 [pid 5224] <... write resumed>) = 4 [pid 5224] close(3) = 0 [pid 5224] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5224] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5224] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 5224] <... clone resumed>, parent_tid=[5227], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5227 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5228 [pid 5223] <... setpgid resumed>) = 0 [pid 5225] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5228 attached [pid 5228] set_robust_list(0x55555748e5e0, 24 [pid 5225] <... prctl resumed>) = 0 [pid 5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5225] setpgid(0, 0./strace-static-x86_64: Process 5227 attached ) = 0 [pid 5223] <... openat resumed>) = 3 [pid 5227] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5228] <... set_robust_list resumed>) = 0 [pid 5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5223] write(3, "1000", 4 [pid 5225] <... openat resumed>) = 3 [pid 5223] <... write resumed>) = 4 [pid 5228] chdir("./165" [pid 5225] write(3, "1000", 4 [pid 5223] close(3) = 0 [pid 5228] <... chdir resumed>) = 0 [pid 5225] <... write resumed>) = 4 [pid 5227] memfd_create("syzkaller", 0 [pid 5228] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5225] close(3 [pid 5223] symlink("/dev/binderfs", "./binderfs" [pid 5228] <... prctl resumed>) = 0 [pid 5225] <... close resumed>) = 0 [pid 5223] <... symlink resumed>) = 0 [pid 5227] <... memfd_create resumed>) = 3 [pid 5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5228] setpgid(0, 0) = 0 [pid 5228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5228] write(3, "1000", 4) = 4 [pid 5228] close(3) = 0 [pid 5228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5228] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5228] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5230], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5230 [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] symlink("/dev/binderfs", "./binderfs" [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] <... symlink resumed>) = 0 [pid 5223] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5223] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5230 attached [pid 5225] <... futex resumed>) = 0 [pid 5223] <... mprotect resumed>) = 0 [pid 5221] <... mount resumed>) = 0 [pid 5230] set_robust_list(0x7f19bd6049e0, 24 [pid 5225] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5230] <... set_robust_list resumed>) = 0 [pid 5223] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5225] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5230] memfd_create("syzkaller", 0 [pid 5225] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5223] <... clone resumed>, parent_tid=[5231], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5231 [pid 5230] <... memfd_create resumed>) = 3 [pid 5225] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5230] <... mmap resumed>) = 0x7f19b51e4000 [pid 5223] <... futex resumed>) = 0 [pid 5221] <... openat resumed>) = 3 [pid 5225] <... clone resumed>, parent_tid=[5232], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5232 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] chdir("./bus" [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5221] <... chdir resumed>) = 0 [pid 5221] ioctl(4, LOOP_CLR_FD) = 0 [pid 5221] close(4) = 0 [pid 5230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5221] chdir("./file0" [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5221] <... chdir resumed>) = 0 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 5221] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5231 attached [pid 5231] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5231] memfd_create("syzkaller", 0 [pid 5221] <... open resumed>) = 4 [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... memfd_create resumed>) = 3 [pid 5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5232 attached [pid 5232] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5232] memfd_create("syzkaller", 0) = 3 [pid 5232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5221] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5230] <... write resumed>) = 1048576 [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] munmap(0x7f19b51e4000, 1048576 [pid 5221] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5230] <... munmap resumed>) = 0 [pid 5227] <... write resumed>) = 1048576 [pid 5221] <... mount resumed>) = 0 [pid 5227] munmap(0x7f19b51e4000, 1048576 [pid 5230] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... munmap resumed>) = 0 [pid 5221] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 5227] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 5221] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 124.631328][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 124.648957][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 124.664105][ T5221] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/161/bus supports timestamps until 2038 (0x7fffffff) [pid 5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5231] <... write resumed>) = 1048576 [pid 5231] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5231] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5232] <... write resumed>) = 1048576 [pid 5232] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5232] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5230] <... openat resumed>) = 4 [pid 5227] <... openat resumed>) = 4 [pid 5221] <... open resumed>) = 5 [pid 307] <... umount2 resumed>) = 0 [pid 5232] <... openat resumed>) = 4 [pid 5231] <... openat resumed>) = 4 [pid 5230] ioctl(4, LOOP_SET_FD, 3 [pid 5227] ioctl(4, LOOP_SET_FD, 3 [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5221] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] lstat("./161/bus", [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] ioctl(4, LOOP_SET_FD, 3 [pid 5231] ioctl(4, LOOP_SET_FD, 3 [pid 5221] <... openat resumed>) = 6 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5221] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 4 [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] fstat(4, [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5221] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] getdents64(4, [pid 5221] <... write resumed>) = 262144 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5230] <... ioctl resumed>) = 0 [pid 5221] <... futex resumed>) = 1 [pid 5220] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5230] close(3 [pid 5221] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5220] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(4 [pid 5230] <... close resumed>) = 0 [pid 5221] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5220] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 5230] mkdir("./bus", 0777 [pid 5221] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5220] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] rmdir("./161/bus" [pid 5231] <... ioctl resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5227] <... ioctl resumed>) = 0 [pid 5231] close(3 [pid 5230] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5227] close(3 [pid 307] <... rmdir resumed>) = 0 [pid 5231] <... close resumed>) = 0 [pid 5227] <... close resumed>) = 0 [pid 307] getdents64(3, [pid 5231] mkdir("./bus", 0777 [pid 5227] mkdir("./bus", 0777 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5232] <... ioctl resumed>) = 0 [pid 5231] <... mkdir resumed>) = 0 [pid 5227] <... mkdir resumed>) = 0 [pid 307] close(3 [pid 5232] close(3 [pid 5231] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5227] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5232] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 5232] mkdir("./bus", 0777) = 0 [pid 5232] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] rmdir("./161") = 0 [pid 307] mkdir("./162", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5231] <... mount resumed>) = 0 [pid 5231] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5231] chdir("./bus") = 0 [pid 5231] ioctl(4, LOOP_CLR_FD) = 0 [pid 5231] close(4 [pid 5220] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5243 ./strace-static-x86_64: Process 5243 attached [pid 5231] <... close resumed>) = 0 [pid 5243] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5243] chdir("./162" [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... chdir resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5243] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] <... prctl resumed>) = 0 [pid 5221] <... write resumed>) = 1048576 [pid 5231] <... futex resumed>) = 1 [pid 5231] chdir("./file0") = 0 [pid 5243] setpgid(0, 0 [pid 5221] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... futex resumed>) = 1 [pid 5231] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5243] <... setpgid resumed>) = 0 [pid 5221] <... futex resumed>) = 0 [pid 5220] exit_group(0 [pid 5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5221] ????( [pid 5220] <... exit_group resumed>) = ? [pid 5243] <... openat resumed>) = 3 [pid 5231] <... open resumed>) = 4 [pid 5221] <... ???? resumed>) = ? [pid 5243] write(3, "1000", 4) = 4 [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] close(3 [pid 5231] <... futex resumed>) = 1 [pid 5223] <... futex resumed>) = 0 [pid 5231] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... close resumed>) = 0 [pid 5231] <... mount resumed>) = 0 [pid 5223] <... futex resumed>) = 0 [pid 5243] symlink("/dev/binderfs", "./binderfs" [pid 5221] +++ exited with 0 +++ [pid 5220] +++ exited with 0 +++ [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5220, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5231] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5243] <... symlink resumed>) = 0 [pid 5231] <... open resumed>) = 5 [pid 5223] <... futex resumed>) = 0 [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] <... futex resumed>) = 0 [pid 5231] <... openat resumed>) = 6 [pid 5223] <... futex resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 5243] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5243] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5231] <... futex resumed>) = 0 [pid 5223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5231] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] <... mprotect resumed>) = 0 [pid 5231] <... write resumed>) = 262144 [pid 5223] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, [pid 5243] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5243] <... clone resumed>, parent_tid=[5244], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5244 [pid 305] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5243] <... futex resumed>) = 0 [pid 305] lstat("./161/binderfs", [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5230] <... mount resumed>) = 0 [pid 305] unlink("./161/binderfs" [pid 5230] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 305] <... unlink resumed>) = 0 [pid 5230] <... openat resumed>) = 3 [ 124.778433][ T5230] ext4 filesystem being mounted at /root/syzkaller.URAKkl/165/bus supports timestamps until 2038 (0x7fffffff) [ 124.780986][ T5231] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/163/bus supports timestamps until 2038 (0x7fffffff) [ 124.807287][ T5227] ext4 filesystem being mounted at /root/syzkaller.69675s/162/bus supports timestamps until 2038 (0x7fffffff) [pid 305] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5230] chdir("./bus") = 0 [pid 5230] ioctl(4, LOOP_CLR_FD) = 0 [pid 5230] close(4) = 0 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] chdir("./file0" [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... chdir resumed>) = 0 [pid 5228] <... futex resumed>) = 0 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... futex resumed>) = 0 [pid 5228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5230] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... mount resumed>) = 0 [pid 5227] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5227] chdir("./bus") = 0 [pid 5227] ioctl(4, LOOP_CLR_FD) = 0 [pid 5227] close(4) = 0 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = 1 [pid 5227] chdir("./file0" [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] <... futex resumed>) = 0 [pid 5223] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5223] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] <... futex resumed>) = 1 [pid 5231] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5227] <... chdir resumed>) = 0 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... open resumed>) = 4 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5227] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... mount resumed>) = 0 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5227] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... open resumed>) = 5 [pid 5224] <... futex resumed>) = 0 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5227] <... openat resumed>) = 6 [pid 5224] <... futex resumed>) = 0 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] <... futex resumed>) = 0 [pid 5224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5227] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... open resumed>) = 4 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5230] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... mount resumed>) = 0 [pid 5227] <... write resumed>) = 262144 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5244 attached [pid 5230] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5230] <... open resumed>) = 5 [pid 5244] set_robust_list(0x7f19bd6049e0, 24 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5244] <... set_robust_list resumed>) = 0 [pid 5230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5230] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] memfd_create("syzkaller", 0 [pid 5230] <... openat resumed>) = 6 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... memfd_create resumed>) = 3 [pid 5230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5228] <... futex resumed>) = 0 [pid 5244] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5230] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... mmap resumed>) = 0x7f19b51e4000 [pid 5230] <... write resumed>) = 262144 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5230] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 124.852567][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5244] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5228] <... futex resumed>) = 0 [pid 5231] <... write resumed>) = 1048576 [pid 5228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5223] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5224] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5223] exit_group(0 [pid 5231] <... futex resumed>) = ? [pid 5224] <... futex resumed>) = 0 [pid 5223] <... exit_group resumed>) = ? [pid 5231] +++ exited with 0 +++ [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5223] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 5232] <... mount resumed>) = 0 [pid 5232] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5232] chdir("./bus") = 0 [pid 5232] ioctl(4, LOOP_CLR_FD) = 0 [pid 5232] close(4) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... restart_syscall resumed>) = 0 [pid 310] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./163/binderfs") = 0 [pid 310] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5232] <... futex resumed>) = 1 [pid 5232] chdir("./file0" [pid 5227] <... futex resumed>) = 1 [pid 5224] <... futex resumed>) = 0 [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=45000000} [pid 5232] <... chdir resumed>) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 1 [pid 5232] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5244] <... write resumed>) = 1048576 [pid 5244] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5244] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5244] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5244] close(3) = 0 [pid 5244] mkdir("./bus", 0777) = 0 [pid 5244] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5227] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5232] <... open resumed>) = 4 [pid 5230] <... write resumed>) = 1048576 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... futex resumed>) = 1 [pid 5230] <... futex resumed>) = 1 [pid 5228] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5232] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... mount resumed>) = 0 [pid 5225] <... futex resumed>) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... open resumed>) = 5 [pid 5225] <... futex resumed>) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... openat resumed>) = 6 [pid 5225] <... futex resumed>) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 0 [pid 5225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5232] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5228] exit_group(0 [pid 5225] <... futex resumed>) = 0 [pid 5230] <... futex resumed>) = ? [pid 5228] <... exit_group resumed>) = ? [pid 5230] +++ exited with 0 +++ [ 124.893171][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 124.893265][ T5232] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/159/bus supports timestamps until 2038 (0x7fffffff) [ 124.928586][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... write resumed>) = 262144 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5225] <... futex resumed>) = 0 [pid 5225] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5225] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5224] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5224] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5232] <... futex resumed>) = 1 [pid 5232] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5227] <... write resumed>) = 1048576 [pid 5227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5227] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5224] exit_group(0) = ? [pid 5227] <... futex resumed>) = ? [pid 5228] +++ exited with 0 +++ [pid 5227] +++ exited with 0 +++ [pid 5224] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5224, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5228, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = 0 [pid 308] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 308] fstat(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./161/bus", [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] lstat("./162/binderfs", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./162/binderfs" [pid 306] lstat("./165/binderfs", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... unlink resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 124.968300][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 124.989143][ T5244] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/162/bus supports timestamps until 2038 (0x7fffffff) [pid 306] unlink("./165/binderfs" [pid 5225] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] <... unlink resumed>) = 0 [pid 305] <... openat resumed>) = 4 [pid 306] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./161/bus" [pid 5232] <... write resumed>) = 1048576 [pid 305] <... rmdir resumed>) = 0 [pid 5232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] getdents64(3, [pid 5244] <... mount resumed>) = 0 [pid 5244] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5232] <... futex resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5244] <... openat resumed>) = 3 [pid 5232] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] close(3 [pid 5244] chdir("./bus") = 0 [pid 305] <... close resumed>) = 0 [pid 5244] ioctl(4, LOOP_CLR_FD [pid 5225] exit_group(0) = ? [ 125.015412][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.028723][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 125.044748][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5232] <... futex resumed>) = ? [pid 305] rmdir("./161") = 0 [pid 305] mkdir("./162", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5244] <... ioctl resumed>) = 0 [pid 5244] close(4) = 0 [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] chdir("./file0" [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] <... chdir resumed>) = 0 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] <... open resumed>) = 4 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5243] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5244] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5244] <... mount resumed>) = 0 [pid 5243] <... futex resumed>) = 0 [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5244] <... futex resumed>) = 0 [pid 5243] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5244] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./163/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./163/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./163") = 0 [pid 310] mkdir("./164", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5244] <... open resumed>) = 5 [pid 5232] +++ exited with 0 +++ [pid 5225] +++ exited with 0 +++ [pid 305] <... openat resumed>) = 3 [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] ioctl(3, LOOP_CLR_FD [pid 5244] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5244] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] umount2("./159", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 5244] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./159", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... close resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 5244] <... openat resumed>) = 6 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] umount2("./159/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./159/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./159/binderfs" [pid 5244] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 310] close(3 [pid 309] <... unlink resumed>) = 0 [ 125.046757][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5244] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5244] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5243] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5250 [pid 5244] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5250 attached [pid 5250] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5250] chdir("./162") = 0 [pid 5250] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5250] setpgid(0, 0) = 0 [pid 5250] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5250] write(3, "1000", 4) = 4 [pid 5250] close(3) = 0 [pid 5250] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5250] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5250] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5251], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5251 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5251 attached [pid 5244] <... write resumed>) = 262144 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5251] set_robust_list(0x7f19bd6049e0, 24 [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./165/bus", [pid 5244] <... futex resumed>) = 1 [pid 5243] <... futex resumed>) = 0 [pid 5251] <... set_robust_list resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5244] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5243] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5252 [pid 306] <... openat resumed>) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 5243] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5243] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./165/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./165") = 0 [pid 306] mkdir("./166", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5252 attached [pid 5252] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5251] memfd_create("syzkaller", 0) = 3 [pid 5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5252] chdir("./164") = 0 [pid 5252] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5252] setpgid(0, 0) = 0 [pid 5252] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5252] write(3, "1000", 4) = 4 [pid 5252] close(3) = 0 [pid 5252] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5252] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5252] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5252] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5253], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5253 [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5253 attached [pid 5253] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5253] memfd_create("syzkaller", 0) = 3 [pid 5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5254 [pid 308] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./162/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5254 attached [pid 5254] set_robust_list(0x55555748e5e0, 24 [pid 5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5254] <... set_robust_list resumed>) = 0 [pid 5254] chdir("./166" [pid 308] <... openat resumed>) = 4 [pid 5254] <... chdir resumed>) = 0 [pid 5254] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5254] setpgid(0, 0) = 0 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./162/bus" [pid 5254] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] <... rmdir resumed>) = 0 [pid 308] getdents64(3, [pid 5254] write(3, "1000", 4 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5254] <... write resumed>) = 4 [pid 5254] close(3 [pid 308] close(3) = 0 [pid 5254] <... close resumed>) = 0 [pid 308] rmdir("./162" [pid 5254] symlink("/dev/binderfs", "./binderfs" [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./163", 0777 [pid 5254] <... symlink resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... mkdir resumed>) = 0 [pid 5254] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5254] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5254] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5255], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5255 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5253] <... write resumed>) = 1048576 [ 125.107270][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.124366][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5253] munmap(0x7f19b51e4000, 1048576 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./159/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./159/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./159/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./159/bus") = 0 [pid 308] <... openat resumed>) = 3 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./159" [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] <... rmdir resumed>) = 0 [pid 308] close(3 [pid 309] mkdir("./160", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5256 [pid 5253] <... munmap resumed>) = 0 [pid 5253] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5253] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5255 attached [pid 5255] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5243] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5255] memfd_create("syzkaller", 0) = 3 [pid 5255] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5244] <... write resumed>) = 1048576 [pid 5244] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5244] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5243] exit_group(0) = ? [pid 5244] <... futex resumed>) = ? [pid 5251] <... write resumed>) = 1048576 [pid 5253] <... ioctl resumed>) = 0 [pid 5253] close(3 [pid 308] <... close resumed>) = 0 [pid 5253] <... close resumed>) = 0 [pid 5253] mkdir("./bus", 0777) = 0 [pid 5253] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5258 ./strace-static-x86_64: Process 5256 attached [pid 5256] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5256] chdir("./160") = 0 [pid 5256] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5256] setpgid(0, 0) = 0 [pid 5256] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5256] write(3, "1000", 4) = 4 [pid 5256] close(3) = 0 [pid 5256] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5256] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5256] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5260], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5260 [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5244] +++ exited with 0 +++ [pid 5243] +++ exited with 0 +++ [pid 5251] munmap(0x7f19b51e4000, 1048576 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, [pid 5251] <... munmap resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 307] unlink("./162/binderfs" [pid 5251] <... openat resumed>) = 4 [pid 307] <... unlink resumed>) = 0 [pid 5251] ioctl(4, LOOP_SET_FD, 3 [pid 307] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5258 attached [pid 5258] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5255] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5258] chdir("./163") = 0 [pid 5258] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5258] setpgid(0, 0) = 0 [pid 5258] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5258] write(3, "1000", 4) = 4 [pid 5255] <... write resumed>) = 1048576 [pid 5258] close(3) = 0 [pid 5258] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5258] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5258] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5263], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5263 [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5260 attached ) = 0 [pid 5260] set_robust_list(0x7f19bd6049e0, 24 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5260] <... set_robust_list resumed>) = 0 [pid 5260] memfd_create("syzkaller", 0) = 3 [pid 5260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5263 attached [pid 5251] <... ioctl resumed>) = 0 [pid 5251] close(3 [pid 5263] set_robust_list(0x7f19bd6049e0, 24 [pid 5251] <... close resumed>) = 0 [pid 5263] <... set_robust_list resumed>) = 0 [pid 5253] <... mount resumed>) = 0 [pid 5251] mkdir("./bus", 0777 [pid 5263] memfd_create("syzkaller", 0 [pid 5253] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5251] <... mkdir resumed>) = 0 [pid 5263] <... memfd_create resumed>) = 3 [pid 5253] <... openat resumed>) = 3 [pid 5251] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5263] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5255] munmap(0x7f19b51e4000, 1048576 [pid 5253] chdir("./bus" [pid 5263] <... mmap resumed>) = 0x7f19b51e4000 [pid 5253] <... chdir resumed>) = 0 [pid 5263] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5253] ioctl(4, LOOP_CLR_FD) = 0 [pid 5253] close(4) = 0 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5253] chdir("./file0" [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... chdir resumed>) = 0 [pid 5252] <... futex resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 0 [pid 5252] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... write resumed>) = 1048576 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5253] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] munmap(0x7f19b51e4000, 1048576 [pid 5253] <... open resumed>) = 4 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5253] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... mount resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5253] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... open resumed>) = 5 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5253] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... openat resumed>) = 6 [pid 5255] <... munmap resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5253] <... futex resumed>) = 1 [pid 5252] <... futex resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5253] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5252] <... futex resumed>) = 0 [pid 5253] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... munmap resumed>) = 0 [ 125.211718][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.226018][ T5253] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/164/bus supports timestamps until 2038 (0x7fffffff) [ 125.238920][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5260] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5263] <... write resumed>) = 1048576 [pid 5253] <... write resumed>) = 262144 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5253] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5263] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5263] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5252] <... futex resumed>) = 0 [pid 5252] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5252] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5253] <... futex resumed>) = 0 [pid 5253] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5251] <... mount resumed>) = 0 [pid 5251] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5251] chdir("./bus") = 0 [pid 5251] ioctl(4, LOOP_CLR_FD [pid 5263] <... openat resumed>) = 4 [pid 5260] <... openat resumed>) = 4 [pid 5255] <... openat resumed>) = 4 [pid 5263] ioctl(4, LOOP_SET_FD, 3 [pid 5260] ioctl(4, LOOP_SET_FD, 3 [pid 5263] <... ioctl resumed>) = 0 [pid 5263] close(3) = 0 [pid 5263] mkdir("./bus", 0777) = 0 [pid 5255] ioctl(4, LOOP_SET_FD, 3 [pid 5263] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5251] <... ioctl resumed>) = 0 [pid 5251] close(4 [pid 5253] <... write resumed>) = 1048576 [pid 307] <... umount2 resumed>) = 0 [pid 5260] <... ioctl resumed>) = 0 [pid 5253] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5252] <... futex resumed>) = 0 [pid 5252] exit_group(0) = ? [pid 5253] <... futex resumed>) = ? [pid 5260] close(3) = 0 [pid 5251] <... close resumed>) = 0 [pid 307] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] mkdir("./bus", 0777) = 0 [pid 5260] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] <... futex resumed>) = 0 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 1 [pid 5251] chdir("./file0" [pid 5255] <... ioctl resumed>) = 0 [pid 5251] <... chdir resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5255] close(3 [pid 5253] +++ exited with 0 +++ [pid 5252] +++ exited with 0 +++ [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... close resumed>) = 0 [pid 5251] <... futex resumed>) = 1 [pid 5250] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5252, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5255] mkdir("./bus", 0777 [pid 5251] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 5255] <... mkdir resumed>) = 0 [pid 5251] <... open resumed>) = 4 [pid 5250] <... futex resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 5255] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5251] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] lstat("./162/bus", [pid 5251] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5251] <... mount resumed>) = 0 [pid 5250] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5251] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... openat resumed>) = 3 [pid 5251] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(3, [pid 5251] <... open resumed>) = 5 [pid 5250] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(3, [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5251] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5251] <... openat resumed>) = 6 [pid 5250] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] lstat("./164/binderfs", [pid 307] <... openat resumed>) = 4 [pid 5251] <... futex resumed>) = 0 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5251] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] unlink("./164/binderfs" [pid 307] fstat(4, [pid 5251] <... write resumed>) = 262144 [pid 5250] <... futex resumed>) = 0 [ 125.294346][ T5251] EXT4-fs mount: 229 callbacks suppressed [ 125.294360][ T5251] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 125.309341][ T5251] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/162/bus supports timestamps until 2038 (0x7fffffff) [pid 310] <... unlink resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./162/bus" [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5251] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... rmdir resumed>) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./162") = 0 [pid 307] mkdir("./163", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 5250] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5273 ./strace-static-x86_64: Process 5273 attached [pid 5255] <... mount resumed>) = 0 [pid 5250] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] set_robust_list(0x55555748e5e0, 24 [pid 5250] <... futex resumed>) = 1 [pid 5273] <... set_robust_list resumed>) = 0 [pid 5250] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5273] chdir("./163") = 0 [pid 5273] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5273] setpgid(0, 0) = 0 [pid 5273] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5273] write(3, "1000", 4) = 4 [pid 5273] close(3) = 0 [pid 5273] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5273] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5273] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5274], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5274 [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5255] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5255] chdir("./bus") = 0 [pid 5255] ioctl(4, LOOP_CLR_FD) = 0 [pid 5255] close(4) = 0 [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... futex resumed>) = 1 [pid 5255] chdir("./file0") = 0 [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... futex resumed>) = 1 [pid 5255] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000./strace-static-x86_64: Process 5274 attached [pid 5274] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5274] memfd_create("syzkaller", 0) = 3 [pid 5274] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 125.359245][ T5255] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 125.359828][ T5263] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 125.368749][ T5255] ext4 filesystem being mounted at /root/syzkaller.URAKkl/166/bus supports timestamps until 2038 (0x7fffffff) [ 125.392906][ T5263] ext4 filesystem being mounted at /root/syzkaller.69675s/163/bus supports timestamps until 2038 (0x7fffffff) [pid 5274] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5263] <... mount resumed>) = 0 [pid 5251] <... futex resumed>) = 0 [pid 5251] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5274] <... write resumed>) = 1048576 [pid 5263] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5274] munmap(0x7f19b51e4000, 1048576 [pid 5263] <... openat resumed>) = 3 [pid 5274] <... munmap resumed>) = 0 [pid 5263] chdir("./bus" [pid 5274] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5263] <... chdir resumed>) = 0 [pid 5274] <... openat resumed>) = 4 [pid 5263] ioctl(4, LOOP_CLR_FD [pid 5274] ioctl(4, LOOP_SET_FD, 3 [pid 5263] <... ioctl resumed>) = 0 [pid 5263] close(4 [pid 5255] <... open resumed>) = 4 [pid 5274] <... ioctl resumed>) = 0 [pid 5263] <... close resumed>) = 0 [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5258] <... futex resumed>) = 0 [pid 5274] close(3 [pid 5263] chdir("./file0" [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... close resumed>) = 0 [pid 5263] <... chdir resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [ 125.407954][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.423090][ T5260] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 125.437111][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5274] mkdir("./bus", 0777 [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] <... write resumed>) = 1048576 [pid 5274] <... mkdir resumed>) = 0 [pid 5263] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5263] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] <... open resumed>) = 4 [pid 5258] <... futex resumed>) = 0 [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5250] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... mount resumed>) = 0 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... futex resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5250] exit_group(0 [pid 5263] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5254] <... futex resumed>) = 0 [pid 5251] <... futex resumed>) = ? [pid 5250] <... exit_group resumed>) = ? [pid 5263] <... mount resumed>) = 0 [pid 5258] <... futex resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] <... mount resumed>) = 0 [pid 5263] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5251] +++ exited with 0 +++ [pid 5250] +++ exited with 0 +++ [pid 5263] <... open resumed>) = 5 [pid 5258] <... futex resumed>) = 0 [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5263] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5263] <... openat resumed>) = 6 [pid 5258] <... futex resumed>) = 0 [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 0 [pid 5258] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5263] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5258] <... futex resumed>) = 0 [pid 5255] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5250, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... openat resumed>) = 3 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 5260] chdir("./bus" [pid 5255] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... chdir resumed>) = 0 [pid 5255] <... open resumed>) = 5 [pid 5260] ioctl(4, LOOP_CLR_FD [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... ioctl resumed>) = 0 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5260] close(4 [pid 5255] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5263] <... write resumed>) = 262144 [pid 5260] <... close resumed>) = 0 [pid 5255] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] fstat(3, [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5258] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5258] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... futex resumed>) = 1 [pid 5263] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5255] <... openat resumed>) = 6 [pid 5260] <... futex resumed>) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5260] chdir("./file0" [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5255] <... futex resumed>) = 1 [pid 5254] <... futex resumed>) = 0 [pid 305] getdents64(3, [pid 5260] <... chdir resumed>) = 0 [pid 5256] <... futex resumed>) = 0 [pid 5255] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... futex resumed>) = 0 [pid 5256] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5254] <... futex resumed>) = 0 [pid 305] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] lstat("./162/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5260] <... open resumed>) = 4 [pid 305] unlink("./162/binderfs") = 0 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5260] <... futex resumed>) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5260] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5260] <... mount resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5255] <... write resumed>) = 262144 [ 125.439422][ T5260] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/160/bus supports timestamps until 2038 (0x7fffffff) [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5254] <... futex resumed>) = 0 [pid 5254] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5254] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... open resumed>) = 5 [pid 5255] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5256] <... futex resumed>) = 0 [pid 5260] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5260] <... openat resumed>) = 6 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5256] <... futex resumed>) = 0 [pid 5260] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5263] <... write resumed>) = 1048576 [pid 5263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5258] <... futex resumed>) = 0 [pid 5258] exit_group(0) = ? [pid 5263] <... futex resumed>) = ? [pid 5260] <... write resumed>) = 262144 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5256] <... futex resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5260] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5256] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5256] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 5263] +++ exited with 0 +++ [pid 5258] +++ exited with 0 +++ [pid 310] getdents64(4, [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5258, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, [pid 310] close(4 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./163/binderfs" [pid 310] <... close resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 308] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] rmdir("./164/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [ 125.500208][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 310] rmdir("./164") = 0 [pid 5260] <... write resumed>) = 1048576 [pid 5254] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 310] mkdir("./165", 0777 [pid 5260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5256] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5255] <... write resumed>) = 1048576 [pid 5255] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5255] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... mkdir resumed>) = 0 [pid 5256] exit_group(0 [pid 5260] <... futex resumed>) = 0 [pid 5260] ????( [pid 5256] <... exit_group resumed>) = ? [pid 5260] <... ???? resumed>) = ? [pid 5260] +++ exited with 0 +++ [pid 5256] +++ exited with 0 +++ [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5254] exit_group(0 [pid 5255] <... futex resumed>) = ? [pid 5254] <... exit_group resumed>) = ? [pid 5255] +++ exited with 0 +++ [pid 5254] +++ exited with 0 +++ [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5280 ./strace-static-x86_64: Process 5280 attached [pid 5280] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5280] chdir("./165") = 0 [pid 5280] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5280] setpgid(0, 0) = 0 [pid 5280] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5280] write(3, "1000", 4) = 4 [pid 5280] close(3) = 0 [pid 5280] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5280] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5280] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5281], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5281 [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5281 attached [pid 5281] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5281] memfd_create("syzkaller", 0) = 3 [pid 5281] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5256, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5254, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 309] umount2("./160", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./160", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 306] fstat(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 306] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./160/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./160/binderfs", [pid 306] lstat("./166/binderfs", [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./160/binderfs" [pid 306] unlink("./166/binderfs" [pid 309] <... unlink resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 309] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... mmap resumed>) = 0x7f19b51e4000 [ 125.553907][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 125.558766][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.570622][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 125.594561][ T5274] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 5281] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5281] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5281] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5274] <... mount resumed>) = 0 [pid 5274] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5274] chdir("./bus") = 0 [pid 5274] ioctl(4, LOOP_CLR_FD [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./162/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./162/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./162") = 0 [pid 305] mkdir("./163", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5282 ./strace-static-x86_64: Process 5282 attached [pid 5282] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5282] chdir("./163") = 0 [pid 5282] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5282] setpgid(0, 0) = 0 [pid 5282] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5282] write(3, "1000", 4) = 4 [pid 5282] close(3) = 0 [pid 5282] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5282] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [ 125.623423][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.623687][ T5274] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/163/bus supports timestamps until 2038 (0x7fffffff) [ 125.647328][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.660899][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5282] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5283], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5283 [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5283 attached [pid 5283] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5283] memfd_create("syzkaller", 0) = 3 [pid 5283] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5283] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5281] <... openat resumed>) = 4 [pid 5281] ioctl(4, LOOP_SET_FD, 3 [pid 5283] <... write resumed>) = 1048576 [pid 5283] munmap(0x7f19b51e4000, 1048576 [pid 5281] <... ioctl resumed>) = 0 [pid 5274] <... ioctl resumed>) = 0 [pid 5274] close(4 [pid 5281] close(3 [pid 5274] <... close resumed>) = 0 [pid 5281] <... close resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] mkdir("./bus", 0777 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 5281] <... mkdir resumed>) = 0 [pid 5274] chdir("./file0" [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... chdir resumed>) = 0 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... umount2 resumed>) = 0 [pid 5274] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... open resumed>) = 4 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... mount resumed>) = 0 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... open resumed>) = 5 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5274] <... openat resumed>) = 6 [pid 5273] <... futex resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5274] <... futex resumed>) = 0 [pid 5273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5274] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] lstat("./166/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] lstat("./163/bus", [pid 306] <... openat resumed>) = 4 [pid 5283] <... munmap resumed>) = 0 [pid 306] fstat(4, [pid 5283] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5274] <... write resumed>) = 262144 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(4, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(4, [pid 308] <... openat resumed>) = 4 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] fstat(4, [pid 306] close(4 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... close resumed>) = 0 [pid 308] getdents64(4, [pid 306] rmdir("./166/bus" [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... rmdir resumed>) = 0 [pid 308] getdents64(4, [pid 306] getdents64(3, [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 306] close(3 [pid 308] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 308] rmdir("./163/bus" [pid 306] rmdir("./166" [pid 308] <... rmdir resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(3, [pid 306] mkdir("./167", 0777 [pid 5274] <... futex resumed>) = 1 [pid 5273] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 5273] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5274] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5273] <... futex resumed>) = 0 [pid 308] rmdir("./163" [pid 5273] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./164", 0777) = 0 [ 125.681098][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5274] <... write resumed>) = 1048576 [pid 5274] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5273] <... futex resumed>) = 0 [pid 5273] exit_group(0) = ? [pid 5274] <... futex resumed>) = ? [pid 5281] <... mount resumed>) = 0 [pid 5281] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5281] chdir("./bus") = 0 [pid 5281] ioctl(4, LOOP_CLR_FD) = 0 [pid 5281] close(4 [pid 5283] <... openat resumed>) = 4 [pid 308] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 5283] ioctl(4, LOOP_SET_FD, 3 [pid 308] ioctl(3, LOOP_CLR_FD [ 125.736017][ T5281] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 125.745442][ T5281] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/165/bus supports timestamps until 2038 (0x7fffffff) [pid 306] ioctl(3, LOOP_CLR_FD [pid 5283] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5281] <... close resumed>) = 0 [pid 5274] +++ exited with 0 +++ [pid 5273] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5283] close(3 [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5283] <... close resumed>) = 0 [pid 5281] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] close(3 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5273, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 306] close(3 [pid 5283] mkdir("./bus", 0777 [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./160/bus", [pid 308] <... close resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 5283] <... mkdir resumed>) = 0 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5283] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5281] chdir("./file0" [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./160/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... chdir resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./160/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5281] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] fstat(4, [pid 307] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5288 attached [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... openat resumed>) = 3 [pid 5288] set_robust_list(0x55555748e5e0, 24 [pid 5281] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(4, [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5288 [pid 307] fstat(3, ./strace-static-x86_64: Process 5289 attached [pid 5288] <... set_robust_list resumed>) = 0 [pid 5281] <... open resumed>) = 4 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5289 [pid 5289] set_robust_list(0x55555748e5e0, 24 [pid 5288] chdir("./164" [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 307] getdents64(3, [pid 5289] <... set_robust_list resumed>) = 0 [pid 5288] <... chdir resumed>) = 0 [pid 5281] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5289] chdir("./167" [pid 5288] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(4 [pid 307] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] <... chdir resumed>) = 0 [pid 5288] <... prctl resumed>) = 0 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5289] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5288] setpgid(0, 0 [pid 5281] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] rmdir("./160/bus" [pid 307] lstat("./163/binderfs", [pid 5289] <... prctl resumed>) = 0 [pid 5288] <... setpgid resumed>) = 0 [pid 5281] <... mount resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5289] setpgid(0, 0 [pid 5288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(3, [pid 307] unlink("./163/binderfs" [pid 5289] <... setpgid resumed>) = 0 [pid 5288] <... openat resumed>) = 3 [pid 5281] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... unlink resumed>) = 0 [pid 5289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5288] write(3, "1000", 4 [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 307] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5289] <... openat resumed>) = 3 [pid 5288] <... write resumed>) = 4 [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 5289] write(3, "1000", 4 [pid 5288] close(3 [pid 5281] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] rmdir("./160" [pid 5289] <... write resumed>) = 4 [pid 5288] <... close resumed>) = 0 [pid 5281] <... open resumed>) = 5 [pid 309] <... rmdir resumed>) = 0 [pid 5289] close(3 [pid 5288] symlink("/dev/binderfs", "./binderfs" [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5281] <... openat resumed>) = 6 [pid 5280] <... futex resumed>) = 0 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... close resumed>) = 0 [pid 5288] <... symlink resumed>) = 0 [pid 5280] <... futex resumed>) = 0 [pid 309] mkdir("./161", 0777 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5292 [pid 5289] symlink("/dev/binderfs", "./binderfs" [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... symlink resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5288] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5288] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5288] <... clone resumed>, parent_tid=[5293], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5293 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5288] <... futex resumed>) = 0 [pid 5289] <... mprotect resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5289] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5294], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5294 [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5281] <... write resumed>) = 262144 ./strace-static-x86_64: Process 5294 attached ./strace-static-x86_64: Process 5293 attached ./strace-static-x86_64: Process 5292 attached [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] set_robust_list(0x7f19bd6049e0, 24 [pid 5292] set_robust_list(0x55555748e5e0, 24 [pid 5281] <... futex resumed>) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5294] <... set_robust_list resumed>) = 0 [pid 5292] <... set_robust_list resumed>) = 0 [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] memfd_create("syzkaller", 0 [pid 5292] chdir("./161" [pid 5281] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5280] <... futex resumed>) = 0 [pid 5294] <... memfd_create resumed>) = 3 [ 125.830965][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 125.861632][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5292] <... chdir resumed>) = 0 [pid 5281] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5280] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5292] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] <... mmap resumed>) = 0x7f19b51e4000 [pid 5292] <... prctl resumed>) = 0 [pid 5294] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5292] setpgid(0, 0) = 0 [pid 5292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5292] write(3, "1000", 4) = 4 [pid 5292] close(3) = 0 [pid 5292] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] set_robust_list(0x7f19bd6049e0, 24 [pid 5292] <... futex resumed>) = 0 [pid 5293] <... set_robust_list resumed>) = 0 [pid 5292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5293] memfd_create("syzkaller", 0 [pid 5292] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5293] <... memfd_create resumed>) = 3 [pid 5292] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5293] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5292] <... mprotect resumed>) = 0 [pid 5293] <... mmap resumed>) = 0x7f19b51e4000 [pid 5292] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5295], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5295 ./strace-static-x86_64: Process 5295 attached [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] set_robust_list(0x7f19bd6049e0, 24 [pid 5292] <... futex resumed>) = 0 [pid 5295] <... set_robust_list resumed>) = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5295] memfd_create("syzkaller", 0) = 3 [pid 5295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5294] <... write resumed>) = 1048576 [pid 5294] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5283] <... mount resumed>) = 0 [pid 5283] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5294] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5283] chdir("./bus") = 0 [pid 5283] ioctl(4, LOOP_CLR_FD [pid 5295] <... write resumed>) = 1048576 [pid 5295] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5295] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5293] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5281] <... write resumed>) = 1048576 [pid 5281] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5280] <... futex resumed>) = 0 [pid 5281] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5280] exit_group(0) = ? [pid 5293] munmap(0x7f19b51e4000, 1048576 [pid 5281] <... futex resumed>) = ? [pid 5293] <... munmap resumed>) = 0 [ 125.861807][ T5283] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 125.885246][ T5283] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/163/bus supports timestamps until 2038 (0x7fffffff) [pid 5293] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5294] <... openat resumed>) = 4 [pid 5294] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5294] close(3) = 0 [pid 5294] mkdir("./bus", 0777) = 0 [pid 5294] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... umount2 resumed>) = 0 [pid 5283] <... ioctl resumed>) = 0 [pid 5293] <... openat resumed>) = 4 [pid 5283] close(4 [pid 5293] ioctl(4, LOOP_SET_FD, 3 [pid 5283] <... close resumed>) = 0 [pid 5295] <... openat resumed>) = 4 [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5295] ioctl(4, LOOP_SET_FD, 3 [pid 5283] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5283] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] <... futex resumed>) = 0 [pid 5283] chdir("./file0" [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] lstat("./163/bus", [pid 5293] <... ioctl resumed>) = 0 [pid 5283] <... chdir resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5282] <... futex resumed>) = 0 [pid 307] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] close(3 [pid 5283] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5283] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5293] <... close resumed>) = 0 [pid 5293] mkdir("./bus", 0777) = 0 [pid 307] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5293] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5283] <... open resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] fstat(4, [pid 5282] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... mount resumed>) = 0 [pid 307] getdents64(4, [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5282] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5281] +++ exited with 0 +++ [pid 5280] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5280, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./163/bus" [pid 5295] <... ioctl resumed>) = 0 [pid 310] <... restart_syscall resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5295] close(3) = 0 [pid 5295] mkdir("./bus", 0777) = 0 [pid 5295] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5283] <... open resumed>) = 5 [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5282] <... futex resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5282] <... futex resumed>) = 0 [pid 5283] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] close(3 [pid 5283] <... openat resumed>) = 6 [pid 310] <... openat resumed>) = 3 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./163" [pid 310] fstat(3, [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5282] <... futex resumed>) = 0 [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./165/binderfs" [pid 307] <... rmdir resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] mkdir("./164", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5302 ./strace-static-x86_64: Process 5302 attached [pid 5302] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5283] <... write resumed>) = 262144 [ 125.970682][ T5294] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 125.987544][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5302] chdir("./164" [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... chdir resumed>) = 0 [pid 5294] <... mount resumed>) = 0 [pid 5283] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5294] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5283] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5282] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... openat resumed>) = 3 [pid 5282] <... futex resumed>) = 0 [pid 5302] <... prctl resumed>) = 0 [pid 5283] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5282] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] setpgid(0, 0 [pid 5294] chdir("./bus" [pid 5283] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5302] <... setpgid resumed>) = 0 [pid 5294] <... chdir resumed>) = 0 [pid 5302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5294] ioctl(4, LOOP_CLR_FD [pid 5302] <... openat resumed>) = 3 [pid 5294] <... ioctl resumed>) = 0 [pid 5302] write(3, "1000", 4 [pid 5294] close(4 [pid 5302] <... write resumed>) = 4 [pid 5294] <... close resumed>) = 0 [pid 5302] close(3 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... close resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5302] symlink("/dev/binderfs", "./binderfs" [pid 5294] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] <... futex resumed>) = 0 [pid 5302] <... symlink resumed>) = 0 [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] chdir("./file0" [pid 5289] <... futex resumed>) = 0 [pid 5302] <... futex resumed>) = 0 [pid 5302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5294] <... chdir resumed>) = 0 [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5302] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5302] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5283] <... write resumed>) = 1048576 [pid 5302] <... mprotect resumed>) = 0 [pid 5294] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5283] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5289] <... futex resumed>) = 0 [ 126.010956][ T5294] ext4 filesystem being mounted at /root/syzkaller.URAKkl/167/bus supports timestamps until 2038 (0x7fffffff) [ 126.012096][ T5293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 126.023844][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.039361][ T5295] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 126.054577][ T5295] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/161/bus supports timestamps until 2038 (0x7fffffff) ./strace-static-x86_64: Process 5306 attached [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5283] <... futex resumed>) = 1 [pid 5282] <... futex resumed>) = 0 [pid 5295] <... mount resumed>) = 0 [pid 5295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5295] chdir("./bus") = 0 [pid 5295] ioctl(4, LOOP_CLR_FD [pid 5293] <... mount resumed>) = 0 [pid 5293] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5293] chdir("./bus") = 0 [pid 5293] ioctl(4, LOOP_CLR_FD [pid 5306] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5306] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5302] <... clone resumed>, parent_tid=[5306], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5306 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 0 [pid 5306] memfd_create("syzkaller", 0) = 3 [pid 5306] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5282] exit_group(0 [pid 5294] <... open resumed>) = 4 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5282] <... exit_group resumed>) = ? [pid 5294] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... ioctl resumed>) = 0 [pid 5295] close(4) = 0 [pid 5289] <... futex resumed>) = 0 [pid 5294] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 1 [pid 5295] chdir("./file0" [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... mount resumed>) = 0 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5294] <... futex resumed>) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5294] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5295] <... chdir resumed>) = 0 [pid 5294] <... open resumed>) = 5 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5289] <... futex resumed>) = 0 [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5294] <... openat resumed>) = 6 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5289] <... futex resumed>) = 0 [pid 5294] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 1 [pid 5295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... open resumed>) = 4 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 1 [pid 5295] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5293] <... ioctl resumed>) = 0 [pid 5293] close(4 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... close resumed>) = 0 [pid 5283] +++ exited with 0 +++ [pid 5282] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5282, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5292] <... futex resumed>) = 0 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5295] <... futex resumed>) = 1 [pid 5295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5288] <... futex resumed>) = 0 [pid 5295] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... restart_syscall resumed>) = 0 [pid 5295] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5295] <... openat resumed>) = 6 [pid 5293] <... futex resumed>) = 0 [pid 5292] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = 1 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... write resumed>) = 262144 [pid 5293] chdir("./file0" [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5295] <... futex resumed>) = 0 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5293] <... chdir resumed>) = 0 [pid 5292] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] lstat("./165/bus", [pid 5306] <... write resumed>) = 1048576 [pid 5295] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] <... futex resumed>) = 1 [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] munmap(0x7f19b51e4000, 1048576 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] <... futex resumed>) = 1 [pid 5292] <... futex resumed>) = 0 [pid 5289] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = 0 [pid 310] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... munmap resumed>) = 0 [pid 5295] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5293] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] <... futex resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5306] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 126.077844][ T5293] ext4 filesystem being mounted at /root/syzkaller.69675s/164/bus supports timestamps until 2038 (0x7fffffff) [pid 5294] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5289] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5288] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... openat resumed>) = 3 [pid 5306] <... openat resumed>) = 4 [pid 5295] <... write resumed>) = 262144 [pid 5293] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... openat resumed>) = 4 [pid 305] fstat(3, [pid 5306] ioctl(4, LOOP_SET_FD, 3 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5294] <... write resumed>) = 1048576 [pid 5293] <... open resumed>) = 4 [pid 310] fstat(4, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5306] <... ioctl resumed>) = 0 [pid 5294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 5306] close(3 [pid 5295] <... futex resumed>) = 1 [pid 5294] <... futex resumed>) = 1 [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5292] <... futex resumed>) = 0 [pid 5289] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5306] <... close resumed>) = 0 [pid 5295] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5294] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5293] <... futex resumed>) = 1 [pid 5292] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5289] exit_group(0 [pid 5288] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] mkdir("./bus", 0777 [pid 5295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5294] <... futex resumed>) = ? [pid 5293] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] <... futex resumed>) = 0 [pid 5289] <... exit_group resumed>) = ? [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5306] <... mkdir resumed>) = 0 [pid 5295] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5294] +++ exited with 0 +++ [pid 5293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5292] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5289] +++ exited with 0 +++ [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] lstat("./163/binderfs", [pid 310] close(4 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... close resumed>) = 0 [pid 305] unlink("./163/binderfs" [pid 310] rmdir("./165/bus" [pid 305] <... unlink resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5288] <... futex resumed>) = 0 [pid 5293] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5289, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5306] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] <... mount resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(3, [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 5293] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5288] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5293] <... open resumed>) = 5 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] rmdir("./165" [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... rmdir resumed>) = 0 [pid 5293] <... futex resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./166", 0777 [pid 5293] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5288] <... futex resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5293] <... openat resumed>) = 6 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... openat resumed>) = 3 [pid 306] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] ioctl(3, LOOP_CLR_FD [pid 5293] <... futex resumed>) = 0 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5288] <... futex resumed>) = 0 [pid 310] close(3 [pid 306] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5308 ./strace-static-x86_64: Process 5308 attached [pid 5308] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5308] chdir("./166") = 0 [pid 5308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5308] setpgid(0, 0) = 0 [pid 5308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5308] write(3, "1000", 4) = 4 [pid 5293] <... write resumed>) = 262144 [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5293] <... futex resumed>) = 1 [pid 5288] <... futex resumed>) = 0 [pid 306] lstat("./167/binderfs", [pid 5293] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5288] <... futex resumed>) = 0 [pid 306] unlink("./167/binderfs" [pid 5288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5308] close(3) = 0 [pid 5308] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5308] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5308] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5309], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5309 [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.166831][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.195403][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5309 attached [pid 5295] <... write resumed>) = 1048576 [pid 5292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5309] set_robust_list(0x7f19bd6049e0, 24 [pid 5295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... set_robust_list resumed>) = 0 [pid 5295] <... futex resumed>) = 0 [pid 5288] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5309] memfd_create("syzkaller", 0) = 3 [pid 5309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5306] <... mount resumed>) = 0 [pid 5306] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5306] chdir("./bus") = 0 [pid 5306] ioctl(4, LOOP_CLR_FD) = 0 [pid 5306] close(4 [pid 5295] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5292] exit_group(0 [pid 5295] <... futex resumed>) = ? [pid 5292] <... exit_group resumed>) = ? [pid 5295] +++ exited with 0 +++ [pid 5293] <... write resumed>) = 1048576 [pid 5306] <... close resumed>) = 0 [pid 5292] +++ exited with 0 +++ [pid 5293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5292, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 5293] <... futex resumed>) = 0 [pid 5293] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] umount2("./161", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./161", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5288] exit_group(0 [pid 309] <... openat resumed>) = 3 [pid 5288] <... exit_group resumed>) = ? [pid 5293] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 309] fstat(3, [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] chdir("./file0" [pid 5293] +++ exited with 0 +++ [pid 5288] +++ exited with 0 +++ [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5288, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./161/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./161/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./161/binderfs" [pid 5306] <... chdir resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 309] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 126.216034][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.230159][ T5306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 126.230416][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 126.239238][ T5306] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/164/bus supports timestamps until 2038 (0x7fffffff) [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 308] unlink("./164/binderfs") = 0 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5306] <... futex resumed>) = 1 [pid 5306] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5306] <... futex resumed>) = 1 [pid 5306] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5309] munmap(0x7f19b51e4000, 1048576) = 0 [ 126.282939][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 126.297159][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.316797][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5309] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5306] <... write resumed>) = 1048576 [pid 5306] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5302] <... futex resumed>) = 0 [pid 5302] exit_group(0) = ? [pid 5306] <... futex resumed>) = ? [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./163/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./163/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./163") = 0 [pid 305] mkdir("./164", 0777) = 0 [ 126.330889][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5309] <... openat resumed>) = 4 [pid 5306] +++ exited with 0 +++ [pid 5302] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5302, si_uid=0, si_status=0, si_utime=1, si_stime=3} --- [pid 307] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, [pid 5309] ioctl(4, LOOP_SET_FD, 3 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./164/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./164/binderfs") = 0 [ 126.402480][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 126.415902][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 306] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./167/bus") = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5309] <... ioctl resumed>) = 0 [pid 306] getdents64(3, [pid 5309] close(3 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5309] <... close resumed>) = 0 [pid 306] close(3 [pid 5309] mkdir("./bus", 0777 [pid 306] <... close resumed>) = 0 [pid 5309] <... mkdir resumed>) = 0 [pid 306] rmdir("./167" [pid 5309] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... rmdir resumed>) = 0 [pid 306] mkdir("./168", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 309] <... umount2 resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 309] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./161/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./161/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./161/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./161/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./161" [pid 308] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./164/bus") = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] close(3 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./164") = 0 [pid 309] <... rmdir resumed>) = 0 [pid 307] mkdir("./165", 0777 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... close resumed>) = 0 [pid 309] mkdir("./162", 0777 [pid 307] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] lstat("./164/bus", [pid 309] <... mkdir resumed>) = 0 [pid 306] <... close resumed>) = 0 ./strace-static-x86_64: Process 5313 attached [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5314 attached [pid 5313] set_robust_list(0x55555748e5e0, 24 [pid 309] <... openat resumed>) = 3 [pid 308] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5313 [pid 5314] set_robust_list(0x55555748e5e0, 24 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 3 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5314 [pid 308] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 5314] <... set_robust_list resumed>) = 0 [pid 5313] <... set_robust_list resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] getdents64(4, [pid 307] ioctl(3, LOOP_CLR_FD [pid 5314] chdir("./168" [pid 5313] chdir("./164" [pid 309] close(3 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... close resumed>) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./164/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./164") = 0 [pid 308] mkdir("./165", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5314] <... chdir resumed>) = 0 [pid 5313] <... chdir resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... openat resumed>) = 3 [pid 307] close(3 [pid 5314] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5313] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] ioctl(3, LOOP_CLR_FD [pid 5314] <... prctl resumed>) = 0 [pid 5313] <... prctl resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5317 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... close resumed>) = 0 [pid 5314] setpgid(0, 0 [pid 5313] setpgid(0, 0 [pid 308] close(3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5314] <... setpgid resumed>) = 0 [pid 5313] <... setpgid resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5313] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5314] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5313] <... openat resumed>) = 3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5318 [pid 5314] <... openat resumed>) = 3 [pid 5313] write(3, "1000", 4 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5319 [pid 5314] write(3, "1000", 4 [pid 5313] <... write resumed>) = 4 [pid 5314] <... write resumed>) = 4 [pid 5313] close(3./strace-static-x86_64: Process 5318 attached [pid 5318] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5318] chdir("./165") = 0 [pid 5318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5318] setpgid(0, 0) = 0 [pid 5318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5318] write(3, "1000", 4) = 4 [pid 5318] close(3) = 0 [pid 5318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5318] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5318] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5320], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5320 [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] close(3 [pid 5313] <... close resumed>) = 0 [pid 5314] <... close resumed>) = 0 [pid 5313] symlink("/dev/binderfs", "./binderfs" [pid 5314] symlink("/dev/binderfs", "./binderfs" [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5313] <... symlink resumed>) = 0 [pid 5314] <... symlink resumed>) = 0 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5320 attached [pid 5320] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5320] memfd_create("syzkaller", 0 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5313] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5314] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5313] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5314] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5313] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5314] <... mprotect resumed>) = 0 [pid 5313] <... mprotect resumed>) = 0 [pid 5314] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5313] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5314] <... clone resumed>, parent_tid=[5321], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5321 [pid 5313] <... clone resumed>, parent_tid=[5322], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5322 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5320] <... memfd_create resumed>) = 3 [pid 5320] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5319 attached [pid 5319] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5319] chdir("./165") = 0 [pid 5319] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5319] setpgid(0, 0./strace-static-x86_64: Process 5321 attached ) = 0 [pid 5321] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5321] memfd_create("syzkaller", 0) = 3 [pid 5321] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5322 attached [pid 5322] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5322] memfd_create("syzkaller", 0) = 3 [pid 5322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5317 attached [pid 5319] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5309] <... mount resumed>) = 0 [pid 5319] <... openat resumed>) = 3 [pid 5317] set_robust_list(0x55555748e5e0, 24 [pid 5309] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5319] write(3, "1000", 4 [pid 5317] <... set_robust_list resumed>) = 0 [pid 5309] <... openat resumed>) = 3 [pid 5319] <... write resumed>) = 4 [pid 5317] chdir("./162" [pid 5309] chdir("./bus" [pid 5317] <... chdir resumed>) = 0 [pid 5319] close(3) = 0 [pid 5317] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5309] <... chdir resumed>) = 0 [pid 5319] symlink("/dev/binderfs", "./binderfs" [pid 5317] <... prctl resumed>) = 0 [pid 5319] <... symlink resumed>) = 0 [pid 5317] setpgid(0, 0 [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... setpgid resumed>) = 0 [pid 5317] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5319] <... futex resumed>) = 0 [pid 5317] <... openat resumed>) = 3 [pid 5319] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5317] write(3, "1000", 4 [pid 5319] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5317] <... write resumed>) = 4 [pid 5309] ioctl(4, LOOP_CLR_FD [pid 5319] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5317] close(3 [pid 5319] <... mprotect resumed>) = 0 [pid 5317] <... close resumed>) = 0 [pid 5319] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5317] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5323 attached [pid 5319] <... clone resumed>, parent_tid=[5323], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5323 [pid 5317] <... symlink resumed>) = 0 [pid 5309] <... ioctl resumed>) = 0 [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] set_robust_list(0x7f19bd6049e0, 24 [pid 5319] <... futex resumed>) = 0 [pid 5317] <... futex resumed>) = 0 [pid 5309] close(4 [pid 5317] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5320] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5321] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5320] <... write resumed>) = 1048576 [pid 5317] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5317] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5317] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5324], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5324 [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5324 attached [pid 5309] <... close resumed>) = 0 [pid 5323] <... set_robust_list resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] memfd_create("syzkaller", 0 [pid 5320] munmap(0x7f19b51e4000, 1048576 [pid 5309] <... futex resumed>) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] set_robust_list(0x7f19bd6049e0, 24 [pid 5323] <... memfd_create resumed>) = 3 [pid 5309] chdir("./file0") = 0 [pid 5323] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... set_robust_list resumed>) = 0 [pid 5323] <... mmap resumed>) = 0x7f19b51e4000 [pid 5309] <... futex resumed>) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5308] <... futex resumed>) = 0 [pid 5320] <... munmap resumed>) = 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... open resumed>) = 4 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5309] <... futex resumed>) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5324] memfd_create("syzkaller", 0 [pid 5309] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5320] <... openat resumed>) = 4 [pid 5320] ioctl(4, LOOP_SET_FD, 3 [pid 5324] <... memfd_create resumed>) = 3 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5309] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... mount resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5324] <... mmap resumed>) = 0x7f19b51e4000 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... write resumed>) = 1048576 [pid 5322] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5321] <... write resumed>) = 1048576 [pid 5321] munmap(0x7f19b51e4000, 1048576 [pid 5322] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5321] <... munmap resumed>) = 0 [pid 5321] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5320] <... ioctl resumed>) = 0 [pid 5320] close(3) = 0 [pid 5320] mkdir("./bus", 0777) = 0 [pid 5320] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5322] <... openat resumed>) = 4 [pid 5321] <... openat resumed>) = 4 [pid 5309] <... open resumed>) = 5 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] ioctl(4, LOOP_SET_FD, 3 [pid 5309] <... futex resumed>) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] ioctl(4, LOOP_SET_FD, 3 [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5308] <... futex resumed>) = 0 [pid 5309] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... openat resumed>) = 6 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 126.556641][ T5309] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 126.577033][ T5309] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/166/bus supports timestamps until 2038 (0x7fffffff) [pid 5309] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5308] <... futex resumed>) = 0 [pid 5323] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5309] <... write resumed>) = 262144 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... ioctl resumed>) = 0 [pid 5322] close(3) = 0 [pid 5322] mkdir("./bus", 0777 [pid 5321] <... ioctl resumed>) = 0 [pid 5320] <... mount resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5320] chdir("./bus" [pid 5324] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5322] <... mkdir resumed>) = 0 [pid 5321] close(3 [pid 5320] <... chdir resumed>) = 0 [pid 5321] <... close resumed>) = 0 [pid 5321] mkdir("./bus", 0777 [pid 5323] <... write resumed>) = 1048576 [pid 5322] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5321] <... mkdir resumed>) = 0 [pid 5320] ioctl(4, LOOP_CLR_FD) = 0 [pid 5323] munmap(0x7f19b51e4000, 1048576 [pid 5320] close(4 [pid 5321] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5308] <... futex resumed>) = 0 [pid 5308] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5308] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5309] <... futex resumed>) = 1 [pid 5309] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5324] <... write resumed>) = 1048576 [pid 5323] <... munmap resumed>) = 0 [pid 5320] <... close resumed>) = 0 [pid 5324] munmap(0x7f19b51e4000, 1048576 [pid 5323] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... openat resumed>) = 4 [pid 5320] <... futex resumed>) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5324] <... munmap resumed>) = 0 [pid 5323] ioctl(4, LOOP_SET_FD, 3 [pid 5320] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5320] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5318] <... futex resumed>) = 0 [pid 5320] chdir("./file0") = 0 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] <... futex resumed>) = 0 [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5318] <... futex resumed>) = 0 [pid 5323] <... ioctl resumed>) = 0 [ 126.644032][ T5320] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 126.652975][ T5320] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/165/bus supports timestamps until 2038 (0x7fffffff) [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... openat resumed>) = 4 [pid 5323] close(3 [pid 5320] <... open resumed>) = 4 [pid 5324] ioctl(4, LOOP_SET_FD, 3 [pid 5323] <... close resumed>) = 0 [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] mkdir("./bus", 0777 [pid 5320] <... futex resumed>) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5323] <... mkdir resumed>) = 0 [pid 5320] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5320] <... mount resumed>) = 0 [pid 5318] <... futex resumed>) = 0 [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... ioctl resumed>) = 0 [pid 5320] <... open resumed>) = 5 [pid 5324] close(3 [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... close resumed>) = 0 [pid 5320] <... futex resumed>) = 1 [pid 5318] <... futex resumed>) = 0 [pid 5324] mkdir("./bus", 0777 [pid 5320] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... mkdir resumed>) = 0 [pid 5320] <... openat resumed>) = 6 [pid 5318] <... futex resumed>) = 0 [pid 5324] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 0 [pid 5318] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5320] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5320] <... write resumed>) = 262144 [pid 5318] <... futex resumed>) = 0 [pid 5309] <... write resumed>) = 1048576 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5318] <... futex resumed>) = 0 [pid 5318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5320] <... futex resumed>) = 1 [pid 5320] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5309] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5308] <... futex resumed>) = 0 [pid 5309] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5308] exit_group(0 [pid 5309] <... futex resumed>) = ? [pid 5308] <... exit_group resumed>) = ? [pid 5309] +++ exited with 0 +++ [pid 5308] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5308, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 310] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./166/binderfs") = 0 [ 126.687845][ T5322] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 126.711925][ T5321] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 126.723770][ T5323] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 310] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5318] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5320] <... write resumed>) = 1048576 [pid 5320] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5320] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5318] exit_group(0) = ? [pid 5320] <... futex resumed>) = ? [ 126.740309][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 126.745107][ T5322] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/164/bus supports timestamps until 2038 (0x7fffffff) [ 126.759505][ T5324] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 126.765214][ T5321] ext4 filesystem being mounted at /root/syzkaller.URAKkl/168/bus supports timestamps until 2038 (0x7fffffff) [pid 5320] +++ exited with 0 +++ [pid 5318] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5318, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5323] <... mount resumed>) = 0 [pid 5322] <... mount resumed>) = 0 [pid 5321] <... mount resumed>) = 0 [pid 5323] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5322] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5323] <... openat resumed>) = 3 [pid 5322] <... openat resumed>) = 3 [pid 5323] chdir("./bus" [pid 5322] chdir("./bus" [pid 5323] <... chdir resumed>) = 0 [pid 5322] <... chdir resumed>) = 0 [pid 5323] ioctl(4, LOOP_CLR_FD [pid 5322] ioctl(4, LOOP_CLR_FD [pid 5323] <... ioctl resumed>) = 0 [pid 5322] <... ioctl resumed>) = 0 [pid 5323] close(4 [pid 5322] close(4 [pid 5323] <... close resumed>) = 0 [pid 5322] <... close resumed>) = 0 [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5323] chdir("./file0" [pid 5322] chdir("./file0" [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5323] <... chdir resumed>) = 0 [pid 5322] <... chdir resumed>) = 0 [pid 5321] <... openat resumed>) = 3 [pid 5321] chdir("./bus" [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5323] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... open resumed>) = 4 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... chdir resumed>) = 0 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 307] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5321] ioctl(4, LOOP_CLR_FD [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5324] <... mount resumed>) = 0 [pid 5323] <... futex resumed>) = 0 [pid 5322] <... open resumed>) = 4 [pid 5321] <... ioctl resumed>) = 0 [pid 5319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5323] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5324] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5323] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] close(4 [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5323] <... mount resumed>) = 0 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... close resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] fstat(3, [pid 5324] <... openat resumed>) = 3 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... mount resumed>) = 0 [pid 5321] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5324] chdir("./bus" [pid 5323] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 1 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 307] getdents64(3, [pid 5323] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] chdir("./file0" [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5323] <... open resumed>) = 5 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... chdir resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 307] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5323] <... futex resumed>) = 1 [pid 5322] <... open resumed>) = 5 [pid 5321] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 307] lstat("./165/binderfs", [pid 5323] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 1 [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5319] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 307] unlink("./165/binderfs" [pid 5324] <... chdir resumed>) = 0 [pid 5323] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] ioctl(4, LOOP_CLR_FD [pid 307] <... unlink resumed>) = 0 [pid 5323] <... openat resumed>) = 6 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... futex resumed>) = 0 [pid 5324] <... ioctl resumed>) = 0 [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5321] <... open resumed>) = 4 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5323] <... futex resumed>) = 1 [pid 5322] <... openat resumed>) = 6 [pid 5319] <... futex resumed>) = 0 [pid 5323] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5322] <... futex resumed>) = 1 [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5323] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5323] <... write resumed>) = 262144 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5321] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] close(4 [pid 5323] <... futex resumed>) = 1 [pid 5322] <... write resumed>) = 262144 [pid 5321] <... mount resumed>) = 0 [pid 5319] <... futex resumed>) = 0 [ 126.786711][ T5323] ext4 filesystem being mounted at /root/syzkaller.69675s/165/bus supports timestamps until 2038 (0x7fffffff) [ 126.799184][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 126.799805][ T5324] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/162/bus supports timestamps until 2038 (0x7fffffff) [pid 5314] <... futex resumed>) = 0 [pid 5323] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5319] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5313] <... futex resumed>) = 0 [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5313] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5322] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5313] <... futex resumed>) = 0 [pid 5322] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5313] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... close resumed>) = 0 [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5321] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5321] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] <... futex resumed>) = 0 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5321] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5317] <... futex resumed>) = 0 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] chdir("./file0" [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... chdir resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5317] <... futex resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] <... futex resumed>) = 0 [pid 5324] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... open resumed>) = 4 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5317] <... futex resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = 0 [pid 5317] <... futex resumed>) = 1 [pid 5324] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... mount resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... futex resumed>) = 0 [pid 5317] <... futex resumed>) = 1 [pid 5324] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5322] <... write resumed>) = 1048576 [pid 5322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5313] <... futex resumed>) = 0 [pid 5323] <... write resumed>) = 1048576 [pid 5322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5313] exit_group(0) = ? [pid 5323] <... futex resumed>) = 1 [pid 5319] <... futex resumed>) = 0 [pid 5322] <... futex resumed>) = ? [pid 5323] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5319] exit_group(0) = ? [pid 5323] <... futex resumed>) = ? [pid 5323] +++ exited with 0 +++ [pid 5321] <... open resumed>) = 5 [pid 5319] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5314] <... futex resumed>) = 0 [pid 5321] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... open resumed>) = 5 [pid 5322] +++ exited with 0 +++ [pid 5321] <... openat resumed>) = 6 [pid 5314] <... futex resumed>) = 0 [pid 5313] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5319, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5321] <... futex resumed>) = 0 [pid 5314] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5313, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5321] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5314] <... futex resumed>) = 0 [pid 5321] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... restart_syscall resumed>) = 0 [pid 5324] <... futex resumed>) = 1 [pid 5321] <... write resumed>) = 262144 [pid 5317] <... futex resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] <... futex resumed>) = 0 [pid 310] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./166/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5324] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] getdents64(4, [pid 5324] <... openat resumed>) = 6 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5324] <... futex resumed>) = 1 [pid 5317] <... futex resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(3, [pid 305] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5317] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(3, [pid 305] <... openat resumed>) = 3 [pid 5324] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 5321] <... futex resumed>) = 1 [pid 5314] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] fstat(3, [pid 5321] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5314] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5324] <... write resumed>) = 262144 [pid 5314] <... futex resumed>) = 0 [pid 310] close(4 [pid 308] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5314] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] getdents64(3, [pid 308] lstat("./165/binderfs", [pid 310] rmdir("./166/bus" [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] unlink("./165/binderfs" [pid 305] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... rmdir resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] lstat("./164/binderfs", [pid 310] close(3) = 0 [pid 310] rmdir("./166") = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] mkdir("./167", 0777 [ 126.855314][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.878717][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 305] unlink("./164/binderfs" [pid 310] <... mkdir resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 305] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5321] <... write resumed>) = 1048576 [pid 5321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5314] <... futex resumed>) = 0 [pid 5314] exit_group(0) = ? [pid 5321] <... futex resumed>) = ? [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5317] <... futex resumed>) = 0 [pid 5317] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5317] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5324] <... futex resumed>) = 1 [pid 5324] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5317] <... futex resumed>) = 0 [pid 5324] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5317] exit_group(0 [pid 5324] <... futex resumed>) = ? [pid 5317] <... exit_group resumed>) = ? [pid 307] <... umount2 resumed>) = 0 [ 126.925980][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 126.939614][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 126.957200][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./165/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./165/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./165") = 0 [pid 307] mkdir("./166", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5340 ./strace-static-x86_64: Process 5340 attached [pid 5340] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5340] chdir("./166" [pid 5324] +++ exited with 0 +++ [pid 5321] +++ exited with 0 +++ [pid 5317] +++ exited with 0 +++ [pid 5314] +++ exited with 0 +++ [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5317, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5314, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 310] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] umount2("./162", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5341 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./162", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 306] fstat(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 306] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./162/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./162/binderfs", [pid 306] lstat("./168/binderfs", [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./162/binderfs" [pid 306] unlink("./168/binderfs" [pid 309] <... unlink resumed>) = 0 [pid 309] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5340] <... chdir resumed>) = 0 [pid 5340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5340] setpgid(0, 0) = 0 [pid 5340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5340] write(3, "1000", 4) = 4 [pid 5340] close(3) = 0 [pid 5340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5340] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5340] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5342], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5342 [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5342 attached [pid 5342] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5342] memfd_create("syzkaller", 0) = 3 [pid 5342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5342] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5342] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5342] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5342] close(3) = 0 [pid 5342] mkdir("./bus", 0777) = 0 [ 126.971484][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 127.013423][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5342] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5341 attached [pid 5341] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5341] chdir("./167") = 0 [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5341] setpgid(0, 0) = 0 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5341] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5344], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5344 [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5344 attached [pid 5344] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5344] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5344] munmap(0x7f19b51e4000, 1048576) = 0 [ 127.026787][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.041628][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 127.055694][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5344] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 5344] <... openat resumed>) = 4 [pid 5344] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5342] <... mount resumed>) = 0 [pid 308] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] close(3) = 0 [pid 5344] mkdir("./bus", 0777) = 0 [pid 5344] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./165/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 5342] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./165/bus") = 0 [pid 308] getdents64(3, [pid 5342] <... openat resumed>) = 3 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5342] chdir("./bus" [pid 308] close(3) = 0 [pid 308] rmdir("./165" [pid 5342] <... chdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./166", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [ 127.068099][ T5342] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 127.077958][ T5342] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/166/bus supports timestamps until 2038 (0x7fffffff) [ 127.107534][ T5344] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 5342] ioctl(4, LOOP_CLR_FD [pid 5344] <... mount resumed>) = 0 [pid 5344] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5344] chdir("./bus") = 0 [pid 5344] ioctl(4, LOOP_CLR_FD [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./164/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./164") = 0 [pid 305] mkdir("./165", 0777) = 0 [ 127.116657][ T5344] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/167/bus supports timestamps until 2038 (0x7fffffff) [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5344] <... ioctl resumed>) = 0 [pid 5342] <... ioctl resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 5342] close(4 [pid 309] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] ioctl(3, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] lstat("./162/bus", [pid 308] close(3 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... close resumed>) = 0 [pid 309] umount2("./162/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./162/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5350 [pid 309] <... openat resumed>) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... openat resumed>) = 3 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./162/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./162") = 0 [pid 309] mkdir("./163", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] ioctl(3, LOOP_CLR_FD [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5351 ./strace-static-x86_64: Process 5350 attached [pid 5350] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5350] chdir("./166") = 0 [pid 5350] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5350] setpgid(0, 0) = 0 [pid 5350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5350] write(3, "1000", 4) = 4 [pid 5350] close(3) = 0 [pid 5350] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5350] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5350] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5352], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5352 [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5352 attached [pid 5352] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5352] memfd_create("syzkaller", 0) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 5352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] <... ioctl resumed>) = 0 [pid 5342] <... close resumed>) = 0 [pid 306] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5340] <... futex resumed>) = 0 [pid 5342] chdir("./file0" [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5351 attached [pid 5344] close(4 [pid 5342] <... chdir resumed>) = 0 [pid 5340] <... futex resumed>) = 0 [pid 306] lstat("./168/bus", [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5342] <... futex resumed>) = 0 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5351] set_robust_list(0x55555748e5e0, 24 [pid 5342] <... open resumed>) = 4 [pid 5340] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 4 [pid 5342] <... futex resumed>) = 0 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] fstat(4, [pid 5342] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5342] <... mount resumed>) = 0 [pid 5340] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 5342] <... futex resumed>) = 0 [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5351] <... set_robust_list resumed>) = 0 [pid 5342] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] close(4 [pid 5340] <... futex resumed>) = 0 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./168/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./168") = 0 [pid 306] mkdir("./169", 0777) = 0 [pid 5351] chdir("./163" [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5351] <... chdir resumed>) = 0 [pid 5351] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5351] setpgid(0, 0) = 0 [pid 5351] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5351] write(3, "1000", 4) = 4 [pid 5352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5351] close(3) = 0 [pid 5351] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5351] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5351] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5351] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5353 attached , parent_tid=[5353], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5353 [pid 5353] set_robust_list(0x7f19bd6049e0, 24 [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... set_robust_list resumed>) = 0 [pid 5351] <... futex resumed>) = 0 [pid 5353] memfd_create("syzkaller", 0) = 3 [pid 5353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] <... close resumed>) = 0 [pid 5342] <... open resumed>) = 5 [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] <... close resumed>) = 0 [pid 5342] <... futex resumed>) = 1 [pid 5340] <... futex resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5342] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5341] <... futex resumed>) = 0 [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5344] chdir("./file0" [pid 5342] <... openat resumed>) = 6 [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5344] <... chdir resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5354 [pid 5344] <... futex resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... futex resumed>) = 0 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] close(3 [pid 5342] <... futex resumed>) = 0 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... close resumed>) = 0 [pid 5342] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5340] <... futex resumed>) = 0 [pid 5344] <... futex resumed>) = 0 [pid 5342] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5341] <... futex resumed>) = 1 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5355 [pid 5344] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5342] <... write resumed>) = 262144 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... open resumed>) = 4 [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5344] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... mount resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5344] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... open resumed>) = 5 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5344] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5341] <... futex resumed>) = 0 [pid 5344] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5344] <... openat resumed>) = 6 [pid 5352] <... write resumed>) = 1048576 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5352] munmap(0x7f19b51e4000, 1048576 [pid 5344] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5342] <... futex resumed>) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5340] <... futex resumed>) = 0 [pid 5344] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5342] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... munmap resumed>) = 0 [pid 5344] <... write resumed>) = 262144 [pid 5342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5340] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5354 attached [pid 5352] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5342] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5340] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] set_robust_list(0x55555748e5e0, 24 [pid 5352] <... openat resumed>) = 4 [pid 5354] <... set_robust_list resumed>) = 0 [pid 5352] ioctl(4, LOOP_SET_FD, 3 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5341] <... futex resumed>) = 0 [pid 5344] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5341] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5355 attached [pid 5354] chdir("./165" [pid 5353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5352] <... ioctl resumed>) = 0 [pid 5341] <... futex resumed>) = 0 [pid 5341] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5355] set_robust_list(0x55555748e5e0, 24 [pid 5354] <... chdir resumed>) = 0 [pid 5352] close(3) = 0 [pid 5354] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5355] <... set_robust_list resumed>) = 0 [pid 5352] mkdir("./bus", 0777 [pid 5354] <... prctl resumed>) = 0 [pid 5355] chdir("./169" [pid 5352] <... mkdir resumed>) = 0 [pid 5355] <... chdir resumed>) = 0 [pid 5354] setpgid(0, 0 [pid 5352] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5355] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5354] <... setpgid resumed>) = 0 [pid 5354] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5355] <... prctl resumed>) = 0 [pid 5354] <... openat resumed>) = 3 [pid 5355] setpgid(0, 0 [pid 5354] write(3, "1000", 4 [pid 5355] <... setpgid resumed>) = 0 [pid 5354] <... write resumed>) = 4 [pid 5355] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5354] close(3 [pid 5355] <... openat resumed>) = 3 [pid 5354] <... close resumed>) = 0 [pid 5354] symlink("/dev/binderfs", "./binderfs" [pid 5355] write(3, "1000", 4) = 4 [pid 5354] <... symlink resumed>) = 0 [pid 5355] close(3 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... close resumed>) = 0 [pid 5354] <... futex resumed>) = 0 [pid 5355] symlink("/dev/binderfs", "./binderfs" [pid 5354] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5355] <... symlink resumed>) = 0 [pid 5354] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5359], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5359 [pid 5355] <... futex resumed>) = 0 [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5355] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5359 attached [pid 5359] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5359] memfd_create("syzkaller", 0) = 3 [pid 5359] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5355] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5355] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5342] <... write resumed>) = 1048576 [pid 5355] <... mprotect resumed>) = 0 [pid 5342] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5342] <... futex resumed>) = 1 [pid 5340] <... futex resumed>) = 0 [pid 5342] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5340] exit_group(0 [pid 5355] <... clone resumed>, parent_tid=[5360], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5360 [pid 5340] <... exit_group resumed>) = ? [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5342] <... futex resumed>) = ? [pid 5355] <... futex resumed>) = 0 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5342] +++ exited with 0 +++ [pid 5340] +++ exited with 0 +++ [pid 5344] <... write resumed>) = 1048576 [pid 5344] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5341] <... futex resumed>) = 0 [pid 5341] exit_group(0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5340, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5341] <... exit_group resumed>) = ? [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5344] <... futex resumed>) = ? [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./166/binderfs" [pid 5344] +++ exited with 0 +++ [pid 5341] +++ exited with 0 +++ [pid 307] <... unlink resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5341, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5359] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5359] <... write resumed>) = 1048576 [pid 5359] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5359] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5359] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5359] close(3) = 0 [pid 5359] mkdir("./bus", 0777) = 0 [pid 5359] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] lstat("./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./167/binderfs") = 0 [ 127.267616][ T5352] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 127.302544][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5360 attached [pid 5360] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5360] memfd_create("syzkaller", 0) = 3 [pid 5360] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5360] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5353] <... write resumed>) = 1048576 [pid 5353] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5353] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5353] ioctl(4, LOOP_SET_FD, 3 [pid 5352] <... mount resumed>) = 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5352] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5353] close(3) = 0 [pid 5353] mkdir("./bus", 0777) = 0 [pid 5353] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5352] <... openat resumed>) = 3 [pid 5352] chdir("./bus") = 0 [ 127.316527][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.327875][ T5352] ext4 filesystem being mounted at /root/syzkaller.69675s/166/bus supports timestamps until 2038 (0x7fffffff) [ 127.348090][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5352] ioctl(4, LOOP_CLR_FD [pid 5360] <... write resumed>) = 1048576 [pid 5360] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5360] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5360] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5352] <... ioctl resumed>) = 0 [pid 5352] close(4) = 0 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5352] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5360] close(3 [pid 5350] <... futex resumed>) = 0 [pid 5360] <... close resumed>) = 0 [pid 5360] mkdir("./bus", 0777) = 0 [pid 5360] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... futex resumed>) = 0 [pid 5352] chdir("./file0") = 0 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... open resumed>) = 4 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5352] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5359] <... mount resumed>) = 0 [ 127.363479][ T5359] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 127.372127][ T387] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.388384][ T5359] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/165/bus supports timestamps until 2038 (0x7fffffff) [pid 5359] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5359] chdir("./bus") = 0 [pid 5359] ioctl(4, LOOP_CLR_FD [pid 5353] <... mount resumed>) = 0 [pid 5353] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5353] chdir("./bus") = 0 [pid 5353] ioctl(4, LOOP_CLR_FD [pid 5352] <... open resumed>) = 5 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./167/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./167") = 0 [pid 310] mkdir("./168", 0777) = 0 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... mount resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5350] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5360] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5352] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] <... futex resumed>) = 0 [pid 5352] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] <... openat resumed>) = 3 [pid 5360] chdir("./bus") = 0 [pid 5360] ioctl(4, LOOP_CLR_FD [pid 5352] <... openat resumed>) = 6 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5350] <... futex resumed>) = 0 [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] <... write resumed>) = 262144 [pid 5359] <... ioctl resumed>) = 0 [pid 5359] close(4) = 0 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5354] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = 1 [pid 5350] <... futex resumed>) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5359] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... ioctl resumed>) = 0 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5353] <... ioctl resumed>) = 0 [pid 5350] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... umount2 resumed>) = 0 [pid 5360] close(4 [pid 5353] close(4 [pid 5359] chdir("./file0" [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(3 [pid 307] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] <... chdir resumed>) = 0 [pid 5353] <... close resumed>) = 0 [pid 5352] <... write resumed>) = 1048576 [pid 310] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5360] <... close resumed>) = 0 [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = 1 [pid 5352] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 5360] <... futex resumed>) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5353] chdir("./file0" [pid 5352] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] chdir("./file0" [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... chdir resumed>) = 0 [pid 5351] <... futex resumed>) = 0 [pid 307] lstat("./166/bus", [pid 5360] <... chdir resumed>) = 0 [pid 5359] <... futex resumed>) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] <... futex resumed>) = 0 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 127.417859][ T5353] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.427142][ T5353] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/163/bus supports timestamps until 2038 (0x7fffffff) [ 127.428551][ T5360] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 127.448221][ T5360] ext4 filesystem being mounted at /root/syzkaller.URAKkl/169/bus supports timestamps until 2038 (0x7fffffff) [pid 5360] <... futex resumed>) = 0 [pid 5359] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5353] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5350] <... futex resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5360] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... open resumed>) = 4 [pid 5351] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5350] exit_group(0 [pid 307] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5359] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5360] <... open resumed>) = 4 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = 0 [pid 5352] <... futex resumed>) = ? [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5350] <... exit_group resumed>) = ? [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5370 [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5353] <... mount resumed>) = 0 [pid 5351] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5360] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] <... mount resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = 0 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] <... open resumed>) = 5 [pid 5351] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5360] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] <... open resumed>) = 4 [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5370 attached [pid 5360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = 0 [pid 5351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] fstat(4, [pid 5370] set_robust_list(0x55555748e5e0, 24 [pid 5360] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5359] <... futex resumed>) = 1 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... futex resumed>) = 0 [pid 5353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5370] <... set_robust_list resumed>) = 0 [pid 5360] <... open resumed>) = 5 [pid 5359] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 5370] chdir("./168" [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] <... chdir resumed>) = 0 [pid 5360] <... futex resumed>) = 1 [pid 5359] <... mount resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5354] <... futex resumed>) = 0 [pid 5353] <... openat resumed>) = 6 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5370] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5360] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5370] <... prctl resumed>) = 0 [pid 5360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5370] setpgid(0, 0 [pid 5360] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5359] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(4 [pid 5370] <... setpgid resumed>) = 0 [pid 5360] <... openat resumed>) = 6 [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5351] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 5370] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5353] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] <... openat resumed>) = 3 [pid 5360] <... futex resumed>) = 1 [pid 5359] <... open resumed>) = 5 [pid 5355] <... futex resumed>) = 0 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5352] +++ exited with 0 +++ [pid 5350] +++ exited with 0 +++ [pid 307] rmdir("./166/bus" [pid 5370] write(3, "1000", 4 [pid 5360] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5353] <... write resumed>) = 262144 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5350, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 307] <... rmdir resumed>) = 0 [pid 5370] <... write resumed>) = 4 [pid 5360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5359] <... futex resumed>) = 0 [pid 5355] <... futex resumed>) = 0 [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 5370] close(3 [pid 5360] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5359] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5354] <... futex resumed>) = 0 [pid 5353] <... futex resumed>) = 1 [pid 5351] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5370] <... close resumed>) = 0 [pid 5360] <... write resumed>) = 262144 [pid 5353] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5351] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] symlink("/dev/binderfs", "./binderfs" [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] <... openat resumed>) = 6 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5351] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] close(3 [pid 5370] <... symlink resumed>) = 0 [pid 5360] <... futex resumed>) = 1 [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5355] <... futex resumed>) = 0 [pid 5351] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... close resumed>) = 0 [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5360] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5359] <... futex resumed>) = 1 [pid 5355] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5354] <... futex resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] rmdir("./166" [pid 5370] <... futex resumed>) = 0 [pid 5359] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5355] <... futex resumed>) = 0 [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(3, [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5355] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5370] <... mmap resumed>) = 0x7f19bd5e4000 [pid 308] getdents64(3, [pid 5370] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5370] <... mprotect resumed>) = 0 [pid 308] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5370] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./166/binderfs", [pid 5370] <... clone resumed>, parent_tid=[5371], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5371 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] unlink("./166/binderfs" [pid 5370] <... futex resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5371 attached [pid 5359] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5354] <... futex resumed>) = 0 [pid 307] mkdir("./167", 0777 [pid 5371] set_robust_list(0x7f19bd6049e0, 24 [pid 5359] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] <... set_robust_list resumed>) = 0 [pid 5360] <... write resumed>) = 1048576 [pid 5359] <... write resumed>) = 262144 [pid 307] <... mkdir resumed>) = 0 [pid 5371] memfd_create("syzkaller", 0) = 3 [pid 5371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 5360] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5353] <... write resumed>) = 1048576 [pid 5351] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5372 ./strace-static-x86_64: Process 5372 attached [pid 5372] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5372] chdir("./167") = 0 [pid 5372] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5372] setpgid(0, 0) = 0 [pid 5372] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5372] write(3, "1000", 4) = 4 [pid 5372] close(3) = 0 [pid 5372] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5372] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5372] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5373], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5373 [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5373 attached [pid 5373] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5373] memfd_create("syzkaller", 0) = 3 [pid 5373] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5351] exit_group(0 [pid 5353] <... futex resumed>) = ? [pid 5351] <... exit_group resumed>) = ? [pid 5353] +++ exited with 0 +++ [pid 5360] <... futex resumed>) = 1 [pid 5359] <... futex resumed>) = 1 [pid 5355] <... futex resumed>) = 0 [pid 5354] <... futex resumed>) = 0 [pid 5351] +++ exited with 0 +++ [pid 5354] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5354] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5360] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5359] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5355] exit_group(0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5351, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5355] <... exit_group resumed>) = ? [pid 309] umount2("./163", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./163", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./163/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./163/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./163/binderfs") = 0 [pid 309] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5360] <... futex resumed>) = ? [ 127.535683][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.556103][ T387] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5373] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5373] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5373] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5373] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5373] close(3) = 0 [pid 5373] mkdir("./bus", 0777) = 0 [pid 5373] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5371] <... write resumed>) = 1048576 [pid 5371] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5371] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5371] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5371] close(3) = 0 [pid 5371] mkdir("./bus", 0777) = 0 [pid 5371] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5359] <... write resumed>) = 1048576 [pid 5359] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5359] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5354] <... futex resumed>) = 0 [ 127.593575][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.623646][ T387] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5354] exit_group(0 [pid 5359] <... futex resumed>) = ? [pid 5354] <... exit_group resumed>) = ? [pid 5359] +++ exited with 0 +++ [pid 5360] +++ exited with 0 +++ [pid 5355] +++ exited with 0 +++ [pid 308] <... umount2 resumed>) = 0 [pid 5354] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5355, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5354, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 306] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 305] fstat(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 305] getdents64(3, [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./169/binderfs", [pid 305] lstat("./165/binderfs", [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./169/binderfs" [pid 305] unlink("./165/binderfs" [pid 306] <... unlink resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 306] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 127.638323][ T5373] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 127.648207][ T5373] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/167/bus supports timestamps until 2038 (0x7fffffff) [ 127.652257][ T5371] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 127.673180][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5371] <... mount resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... mount resumed>) = 0 [pid 5371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 308] lstat("./166/bus", [pid 5373] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5371] <... openat resumed>) = 3 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5373] <... openat resumed>) = 3 [pid 5371] chdir("./bus" [pid 308] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] chdir("./bus" [pid 5371] <... chdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... chdir resumed>) = 0 [pid 5371] ioctl(4, LOOP_CLR_FD [pid 308] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5373] ioctl(4, LOOP_CLR_FD [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./166/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./166") = 0 [pid 308] mkdir("./167", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 309] <... umount2 resumed>) = 0 [pid 5373] <... ioctl resumed>) = 0 [pid 5371] <... ioctl resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 5373] close(4 [pid 5371] close(4 [pid 5373] <... close resumed>) = 0 [pid 5371] <... close resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5373] <... futex resumed>) = 1 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 5373] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5373] chdir("./file0" [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] chdir("./file0" [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5373] <... chdir resumed>) = 0 [pid 5371] <... chdir resumed>) = 0 [pid 309] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = 1 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5380 [pid 5373] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 309] lstat("./163/bus", [pid 5373] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5373] <... open resumed>) = 4 [pid 5371] <... open resumed>) = 4 [pid 309] umount2("./163/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5373] <... futex resumed>) = 1 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./163/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5373] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5380 attached [pid 5373] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] fstat(4, [pid 5380] set_robust_list(0x55555748e5e0, 24 [pid 5373] <... mount resumed>) = 0 [pid 5371] <... mount resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5380] <... set_robust_list resumed>) = 0 [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 5380] chdir("./167" [pid 5373] <... futex resumed>) = 1 [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5380] <... chdir resumed>) = 0 [pid 5373] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 5380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5373] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5372] <... futex resumed>) = 0 [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5380] <... prctl resumed>) = 0 [pid 5373] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(4 [pid 5380] setpgid(0, 0 [pid 309] <... close resumed>) = 0 [pid 5380] <... setpgid resumed>) = 0 [pid 309] rmdir("./163/bus" [pid 5380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] <... rmdir resumed>) = 0 [pid 5380] write(3, "1000", 4 [pid 309] getdents64(3, [pid 5380] <... write resumed>) = 4 [pid 5380] close(3 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5380] <... close resumed>) = 0 [pid 309] close(3 [pid 5380] symlink("/dev/binderfs", "./binderfs" [pid 309] <... close resumed>) = 0 [ 127.675181][ T5371] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/168/bus supports timestamps until 2038 (0x7fffffff) [ 127.686735][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 127.712063][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 127.713485][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5380] <... symlink resumed>) = 0 [pid 309] rmdir("./163" [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5380] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5380] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5381], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5381 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5381 attached [pid 5381] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5381] memfd_create("syzkaller", 0) = 3 [pid 5381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] <... umount2 resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 306] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] mkdir("./164", 0777 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... mkdir resumed>) = 0 [pid 306] lstat("./169/bus", [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./169/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./169") = 0 [pid 306] mkdir("./170", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5381] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5381] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5372] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5372] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5372] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5370] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5372] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5372] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5370] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5372] <... clone resumed>, parent_tid=[5382], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5382 [pid 5372] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5370] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5372] <... futex resumed>) = 0 [pid 5370] <... mmap resumed>) = 0x7f19b52c3000 [pid 5372] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 5382 attached [pid 5370] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5382] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5382] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5382] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... futex resumed>) = 0 [pid 5372] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5372] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5370] <... clone resumed>, parent_tid=[5383], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5383 [pid 5382] <... futex resumed>) = 1 [pid 5382] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5373] <... open resumed>) = 5 [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5373] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5371] <... open resumed>) = 5 [pid 5382] <... write resumed>) = 262144 [pid 5382] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5372] <... futex resumed>) = 0 [pid 5372] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5373] <... futex resumed>) = 0 [pid 5372] <... futex resumed>) = 1 [pid 5373] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5372] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5371] <... futex resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5382] <... futex resumed>) = 1 [pid 5382] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] close(3 [pid 306] close(3 [pid 309] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5383 attached [pid 5383] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5383] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5384 attached [pid 5384] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5384] chdir("./164") = 0 [pid 5384] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5384] setpgid(0, 0) = 0 [pid 5384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5370] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5384 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5385 [pid 5384] <... openat resumed>) = 3 [pid 5384] write(3, "1000", 4 [pid 5370] <... futex resumed>) = 1 [pid 5370] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5373] <... write resumed>) = 1048576 [pid 5373] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5372] <... futex resumed>) = 0 [pid 5372] exit_group(0 [pid 5382] <... futex resumed>) = ? [pid 5372] <... exit_group resumed>) = ? [pid 5382] +++ exited with 0 +++ [pid 5373] +++ exited with 0 +++ [pid 5372] +++ exited with 0 +++ [pid 305] lstat("./165/bus", [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5372, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 3 [pid 305] fstat(4, [pid 307] fstat(3, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(4, [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] lstat("./167/binderfs", [pid 305] close(4 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... close resumed>) = 0 [pid 5381] <... openat resumed>) = 4 [pid 307] unlink("./167/binderfs" [pid 305] rmdir("./165/bus" [pid 5381] ioctl(4, LOOP_SET_FD, 3 [pid 307] <... unlink resumed>) = 0 [pid 307] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... rmdir resumed>) = 0 [pid 5383] <... futex resumed>) = 0 [pid 5383] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 305] getdents64(3, [pid 5383] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5383] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5384] <... write resumed>) = 4 [pid 5384] close(3) = 0 [pid 5384] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5384] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5384] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5387], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5387 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5385 attached [pid 5385] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5385] chdir("./170") = 0 [pid 5385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5385] setpgid(0, 0) = 0 [pid 5385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5385] write(3, "1000", 4) = 4 [pid 5385] close(3) = 0 [pid 5385] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5385] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5385] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5388], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5388 [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5387 attached [pid 5387] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5387] memfd_create("syzkaller", 0) = 3 [pid 5387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5370] <... futex resumed>) = 0 [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] <... futex resumed>) = 0 [pid 5371] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5388 attached [pid 5388] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5388] memfd_create("syzkaller", 0 [pid 5371] <... write resumed>) = 262144 [pid 5388] <... memfd_create resumed>) = 3 [pid 5388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(3 [pid 5371] <... futex resumed>) = 1 [pid 5370] <... futex resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rmdir("./165" [pid 5371] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5370] <... futex resumed>) = 0 [pid 5388] <... mmap resumed>) = 0x7f19b51e4000 [pid 305] <... rmdir resumed>) = 0 [pid 5371] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5370] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] mkdir("./166", 0777 [pid 5388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5381] <... ioctl resumed>) = 0 [pid 5387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] <... mkdir resumed>) = 0 [pid 5381] close(3 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5381] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5381] mkdir("./bus", 0777) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5381] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5389 [pid 5387] <... write resumed>) = 1048576 [pid 5387] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5388] <... write resumed>) = 1048576 [pid 5387] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5387] ioctl(4, LOOP_SET_FD, 3 [pid 5388] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5388] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5389 attached [pid 5389] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5389] chdir("./166") = 0 [pid 5389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5389] setpgid(0, 0) = 0 [pid 5389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5389] write(3, "1000", 4) = 4 [ 127.854088][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5389] close(3) = 0 [pid 5389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5389] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5389] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5392], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5392 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5387] <... ioctl resumed>) = 0 [pid 5387] close(3) = 0 [pid 5387] mkdir("./bus", 0777) = 0 [pid 5388] <... openat resumed>) = 4 [pid 5388] ioctl(4, LOOP_SET_FD, 3 [pid 5387] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5392 attached [pid 5392] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5392] memfd_create("syzkaller", 0) = 3 [pid 5392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5388] <... ioctl resumed>) = 0 [pid 5388] close(3) = 0 [pid 5388] mkdir("./bus", 0777) = 0 [pid 5388] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5371] <... write resumed>) = 1048576 [pid 5371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5370] <... futex resumed>) = 0 [pid 5370] exit_group(0 [pid 5383] <... futex resumed>) = ? [pid 5371] <... futex resumed>) = ? [pid 5370] <... exit_group resumed>) = ? [pid 5383] +++ exited with 0 +++ [pid 5371] +++ exited with 0 +++ [pid 5370] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5370, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 310] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 127.901384][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 127.924475][ T5381] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 5392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 5388] <... mount resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5387] <... mount resumed>) = 0 [pid 5387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5387] chdir("./bus") = 0 [pid 5387] ioctl(4, LOOP_CLR_FD) = 0 [pid 5387] close(4) = 0 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] chdir("./file0") = 0 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 1 [pid 5387] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./168/binderfs") = 0 [ 127.945365][ T5388] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 127.955265][ T5388] ext4 filesystem being mounted at /root/syzkaller.URAKkl/170/bus supports timestamps until 2038 (0x7fffffff) [ 127.956189][ T5387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 127.976724][ T5387] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/164/bus supports timestamps until 2038 (0x7fffffff) [ 127.984801][ T5381] ext4 filesystem being mounted at /root/syzkaller.69675s/167/bus supports timestamps until 2038 (0x7fffffff) [pid 310] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5392] <... write resumed>) = 1048576 [pid 5388] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5381] <... mount resumed>) = 0 [pid 5392] munmap(0x7f19b51e4000, 1048576 [pid 5388] <... openat resumed>) = 3 [pid 5381] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5392] <... munmap resumed>) = 0 [pid 5388] chdir("./bus" [pid 5392] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5388] <... chdir resumed>) = 0 [pid 5381] <... openat resumed>) = 3 [pid 5388] ioctl(4, LOOP_CLR_FD [pid 5381] chdir("./bus" [pid 5387] <... write resumed>) = 262144 [pid 5381] <... chdir resumed>) = 0 [pid 5381] ioctl(4, LOOP_CLR_FD [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5384] <... futex resumed>) = 0 [pid 5384] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5384] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5387] <... futex resumed>) = 0 [pid 5387] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5384] <... futex resumed>) = 0 [pid 5384] exit_group(0) = ? [pid 5387] <... futex resumed>) = ? [pid 307] <... umount2 resumed>) = 0 [pid 5392] <... openat resumed>) = 4 [pid 5388] <... ioctl resumed>) = 0 [pid 5381] <... ioctl resumed>) = 0 [pid 5392] ioctl(4, LOOP_SET_FD, 3 [pid 5388] close(4 [pid 5381] close(4 [pid 5388] <... close resumed>) = 0 [pid 5381] <... close resumed>) = 0 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 1 [pid 5381] <... futex resumed>) = 1 [pid 5388] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5381] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./167/bus" [pid 5385] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... futex resumed>) = 0 [pid 5385] <... futex resumed>) = 1 [pid 5381] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = 1 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] chdir("./file0" [pid 5381] chdir("./file0" [pid 5388] <... chdir resumed>) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... chdir resumed>) = 0 [pid 5388] <... futex resumed>) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] <... futex resumed>) = 0 [pid 307] rmdir("./167" [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5381] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... rmdir resumed>) = 0 [pid 5388] <... open resumed>) = 4 [pid 5380] <... futex resumed>) = 0 [pid 307] mkdir("./168", 0777 [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... mkdir resumed>) = 0 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... open resumed>) = 4 [pid 5388] <... futex resumed>) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5385] <... futex resumed>) = 0 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] <... mount resumed>) = 0 [pid 5380] <... futex resumed>) = 0 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... futex resumed>) = 0 [pid 5385] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5388] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... mount resumed>) = 0 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5392] <... ioctl resumed>) = 0 [pid 5388] <... open resumed>) = 5 [pid 5381] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] close(3 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] <... close resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 5392] mkdir("./bus", 0777) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5392] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5400 [pid 5388] <... futex resumed>) = 1 [pid 5385] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5400 attached [pid 5388] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] <... futex resumed>) = 0 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] <... openat resumed>) = 6 [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5400] set_robust_list(0x55555748e5e0, 24 [pid 5388] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... set_robust_list resumed>) = 0 [pid 5388] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5385] <... futex resumed>) = 0 [pid 5388] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5400] chdir("./168") = 0 [pid 5400] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5400] setpgid(0, 0) = 0 [pid 5400] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5400] write(3, "1000", 4) = 4 [pid 5400] close(3) = 0 [pid 5400] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5400] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5400] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5401], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5401 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5401 attached [pid 5401] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5388] <... write resumed>) = 262144 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5388] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5385] <... futex resumed>) = 0 [pid 5385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] memfd_create("syzkaller", 0) = 3 [pid 5401] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 128.003097][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 128.017939][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5401] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5388] <... write resumed>) = 1048576 [pid 5388] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5385] <... futex resumed>) = 0 [pid 5385] exit_group(0 [pid 5388] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5385] <... exit_group resumed>) = ? [pid 5388] <... futex resumed>) = ? [pid 5401] <... write resumed>) = 1048576 [pid 5392] <... mount resumed>) = 0 [pid 5388] +++ exited with 0 +++ [pid 5387] +++ exited with 0 +++ [pid 5385] +++ exited with 0 +++ [pid 5384] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5384, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5385, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] umount2("./164", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./164", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 306] fstat(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 306] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./164/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] lstat("./164/binderfs", [pid 306] lstat("./170/binderfs", [pid 5381] <... open resumed>) = 5 [pid 5380] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5380] <... futex resumed>) = 0 [pid 309] unlink("./164/binderfs" [pid 306] unlink("./170/binderfs" [pid 5380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] <... unlink resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 5380] <... mmap resumed>) = 0x7f19b52c3000 [pid 309] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5380] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE [pid 5381] <... futex resumed>) = 0 [pid 5380] <... mprotect resumed>) = 0 [pid 5381] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5380] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5404], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5404 [ 128.080122][ T5392] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 128.096797][ T5392] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/166/bus supports timestamps until 2038 (0x7fffffff) [pid 5380] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5404 attached [pid 5401] munmap(0x7f19b51e4000, 1048576 [pid 5380] <... futex resumed>) = 0 [pid 5380] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./168/bus", [pid 5404] set_robust_list(0x7f19b52e39e0, 24 [pid 5401] <... munmap resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5404] <... set_robust_list resumed>) = 0 [pid 5401] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, [pid 5401] <... openat resumed>) = 4 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 5401] ioctl(4, LOOP_SET_FD, 3 [pid 5404] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 5404] <... openat resumed>) = 6 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5404] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(4 [pid 5404] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5401] <... ioctl resumed>) = 0 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... futex resumed>) = 0 [pid 5380] <... futex resumed>) = 1 [pid 5381] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5404] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5401] close(3 [pid 5381] <... write resumed>) = 262144 [pid 310] rmdir("./168/bus" [pid 5401] <... close resumed>) = 0 [pid 5401] mkdir("./bus", 0777 [pid 310] <... rmdir resumed>) = 0 [pid 310] getdents64(3, [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5401] <... mkdir resumed>) = 0 [pid 5401] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3 [pid 5381] <... futex resumed>) = 1 [pid 5380] <... futex resumed>) = 0 [pid 5381] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] <... close resumed>) = 0 [pid 5380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... openat resumed>) = 3 [pid 5392] chdir("./bus") = 0 [pid 5392] ioctl(4, LOOP_CLR_FD) = 0 [pid 5392] close(4) = 0 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 128.120505][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 128.120550][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 128.165071][ T387] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 310] rmdir("./168" [pid 5392] <... futex resumed>) = 1 [pid 5389] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 310] mkdir("./169", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5406 ./strace-static-x86_64: Process 5406 attached [pid 5406] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5406] chdir("./169") = 0 [pid 5406] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5406] setpgid(0, 0) = 0 [pid 5406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5406] write(3, "1000", 4) = 4 [pid 5406] close(3) = 0 [pid 5406] symlink("/dev/binderfs", "./binderfs" [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... symlink resumed>) = 0 [pid 5389] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] chdir("./file0" [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5406] <... futex resumed>) = 0 [pid 5406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5406] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5392] <... chdir resumed>) = 0 [pid 5406] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5408], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5408 [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5389] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5389] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5408 attached [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5408] memfd_create("syzkaller", 0 [pid 5392] <... open resumed>) = 4 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = 0 [pid 5392] <... futex resumed>) = 1 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5392] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] <... memfd_create resumed>) = 3 [pid 5408] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5392] <... mount resumed>) = 0 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5389] <... futex resumed>) = 0 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... open resumed>) = 5 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5392] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5389] <... futex resumed>) = 0 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] <... openat resumed>) = 6 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5408] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5408] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5408] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5408] ioctl(4, LOOP_SET_FD, 3 [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] <... ioctl resumed>) = 0 [pid 5408] close(3) = 0 [pid 5408] mkdir("./bus", 0777 [pid 5389] <... futex resumed>) = 0 [pid 5392] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] <... mkdir resumed>) = 0 [pid 5408] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5380] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./170/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./170/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./170") = 0 [pid 306] mkdir("./171", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = 0 [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5413 [ 128.177006][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 128.198926][ T5401] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 5392] <... write resumed>) = 262144 ./strace-static-x86_64: Process 5413 attached [pid 5413] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5413] chdir("./171") = 0 [pid 5413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5413] setpgid(0, 0) = 0 [pid 5413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5413] write(3, "1000", 4) = 4 [pid 5413] close(3) = 0 [pid 5413] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5413] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5413] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5414], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5414 [pid 5413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5414 attached [pid 5414] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5414] memfd_create("syzkaller", 0) = 3 [pid 5414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5389] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5381] <... write resumed>) = 1048576 [pid 5392] <... futex resumed>) = 0 [pid 5381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5381] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5392] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5389] <... futex resumed>) = 0 [pid 5389] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] <... mount resumed>) = 0 [pid 5408] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5408] chdir("./bus") = 0 [pid 5408] ioctl(4, LOOP_CLR_FD [pid 5414] <... write resumed>) = 1048576 [pid 5414] munmap(0x7f19b51e4000, 1048576 [pid 5380] exit_group(0 [pid 5414] <... munmap resumed>) = 0 [pid 5380] <... exit_group resumed>) = ? [pid 5404] <... futex resumed>) = ? [pid 5381] <... futex resumed>) = ? [pid 5404] +++ exited with 0 +++ [pid 5381] +++ exited with 0 +++ [pid 5414] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5401] <... mount resumed>) = 0 [pid 5401] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5401] chdir("./bus") = 0 [pid 5401] ioctl(4, LOOP_CLR_FD [pid 5408] <... ioctl resumed>) = 0 [pid 5380] +++ exited with 0 +++ [pid 5401] <... ioctl resumed>) = 0 [pid 5401] close(4) = 0 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] chdir("./file0") = 0 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] <... futex resumed>) = 1 [pid 5401] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5414] <... openat resumed>) = 4 [pid 5408] close(4 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5380, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5414] ioctl(4, LOOP_SET_FD, 3 [pid 5408] <... close resumed>) = 0 [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... futex resumed>) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] chdir("./file0") = 0 [pid 5406] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5408] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5408] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 308] <... openat resumed>) = 3 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5408] <... open resumed>) = 4 [pid 308] getdents64(3, [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5408] <... futex resumed>) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5408] <... mount resumed>) = 0 [pid 308] lstat("./167/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] unlink("./167/binderfs" [pid 5408] <... futex resumed>) = 1 [pid 5406] <... futex resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5408] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.233942][ T5408] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 128.242913][ T5408] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/169/bus supports timestamps until 2038 (0x7fffffff) [ 128.245090][ T5401] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/168/bus supports timestamps until 2038 (0x7fffffff) [pid 5408] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5414] <... ioctl resumed>) = 0 [pid 5414] close(3) = 0 [pid 5414] mkdir("./bus", 0777) = 0 [pid 5414] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5392] <... write resumed>) = 1048576 [pid 5392] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5389] <... futex resumed>) = 0 [pid 5392] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5389] exit_group(0 [pid 5408] <... open resumed>) = 5 [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5389] <... exit_group resumed>) = ? [pid 5392] <... futex resumed>) = ? [pid 5408] <... futex resumed>) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5408] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5406] <... futex resumed>) = 0 [pid 5401] <... write resumed>) = 262144 [pid 5408] <... openat resumed>) = 6 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5392] +++ exited with 0 +++ [pid 5389] +++ exited with 0 +++ [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5406] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5389, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 3 [pid 5400] <... futex resumed>) = 0 [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] <... futex resumed>) = 1 [pid 305] fstat(3, [pid 5406] <... futex resumed>) = 0 [pid 5408] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=49000000} [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5401] <... futex resumed>) = 1 [pid 5401] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5408] <... write resumed>) = 262144 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./166/binderfs") = 0 [pid 305] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5406] <... futex resumed>) = 0 [pid 5406] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5406] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5408] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5400] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5400] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 128.323704][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 128.337413][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [ 128.360125][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5401] <... write resumed>) = 1048576 [pid 5401] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5401] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5400] exit_group(0) = ? [pid 5401] <... futex resumed>) = ? [pid 5408] <... write resumed>) = 1048576 [pid 5408] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5408] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... mount resumed>) = 0 [pid 5414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5406] <... futex resumed>) = 0 [pid 5414] <... openat resumed>) = 3 [pid 5414] chdir("./bus") = 0 [pid 5406] exit_group(0 [pid 5414] ioctl(4, LOOP_CLR_FD [pid 5408] <... futex resumed>) = ? [pid 5406] <... exit_group resumed>) = ? [pid 5408] +++ exited with 0 +++ [pid 5401] +++ exited with 0 +++ [pid 5400] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5400, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] <... umount2 resumed>) = 0 [pid 307] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./168/binderfs") = 0 [pid 307] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5406] +++ exited with 0 +++ [ 128.374200][ T5414] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 128.383148][ T5414] ext4 filesystem being mounted at /root/syzkaller.URAKkl/171/bus supports timestamps until 2038 (0x7fffffff) [ 128.395955][ T387] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:6: Invalid inode table block 0 in block_group 0 [pid 5414] <... ioctl resumed>) = 0 [pid 5414] close(4) = 0 [pid 5414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] <... futex resumed>) = 1 [pid 5414] chdir("./file0") = 0 [pid 5414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] <... futex resumed>) = 1 [pid 5414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5406, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 309] lstat("./164/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./164/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] <... restart_syscall resumed>) = 0 [pid 310] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./169/binderfs") = 0 [pid 310] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] openat(AT_FDCWD, "./164/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./164/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./164") = 0 [pid 309] mkdir("./165", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5418 attached [pid 5418] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5418] chdir("./165") = 0 [pid 5418] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5418] setpgid(0, 0) = 0 [pid 5418] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5418] write(3, "1000", 4) = 4 [pid 5418] close(3) = 0 [pid 5418] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5414] <... open resumed>) = 4 [pid 5414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] <... futex resumed>) = 1 [pid 5414] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5414] <... futex resumed>) = 1 [pid 5414] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5418] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5418] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5419], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5419 [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5418 ./strace-static-x86_64: Process 5419 attached [pid 5419] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5419] memfd_create("syzkaller", 0) = 3 [pid 5419] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 128.424561][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 128.437679][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 128.457709][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5419] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./167/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./167/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./167") = 0 [pid 308] mkdir("./168", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5419] <... write resumed>) = 1048576 [pid 5419] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5419] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5413] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5413] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5413] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5413] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5420], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5420 [pid 5413] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5420 attached [pid 5420] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5420] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5420] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] <... futex resumed>) = 0 [pid 5420] <... futex resumed>) = 1 [pid 5420] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5413] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5413] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5420] <... write resumed>) = 262144 [pid 5420] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5413] <... futex resumed>) = 0 [pid 5420] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5413] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5420] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5413] <... futex resumed>) = 0 [pid 5420] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5413] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5420] <... futex resumed>) = 0 [pid 5413] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5420] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5414] <... open resumed>) = 5 [pid 308] <... openat resumed>) = 3 [pid 5414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] ioctl(3, LOOP_CLR_FD [pid 5413] exit_group(0 [pid 5414] <... futex resumed>) = ? [pid 5413] <... exit_group resumed>) = ? [pid 5420] <... futex resumed>) = ? [pid 5414] +++ exited with 0 +++ [ 128.471600][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5419] <... openat resumed>) = 4 [pid 5419] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... umount2 resumed>) = 0 [pid 5420] +++ exited with 0 +++ [pid 5419] <... ioctl resumed>) = 0 [pid 5413] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 308] close(3 [pid 307] <... umount2 resumed>) = 0 [pid 305] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5419] close(3) = 0 [pid 5419] mkdir("./bus", 0777) = 0 [pid 310] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... close resumed>) = 0 [pid 307] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5419] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5413, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] lstat("./166/bus", [pid 310] lstat("./169/bus", [pid 307] lstat("./168/bus", [pid 306] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5422 attached [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5422 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... openat resumed>) = 3 [pid 305] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5422] set_robust_list(0x55555748e5e0, 24 [pid 310] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] fstat(3, [pid 305] <... openat resumed>) = 4 [pid 310] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] fstat(4, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] fstat(4, [pid 306] getdents64(3, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 5422] <... set_robust_list resumed>) = 0 [pid 5422] chdir("./168" [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] getdents64(4, [pid 306] lstat("./171/binderfs", [pid 305] getdents64(4, [pid 310] close(4 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] <... close resumed>) = 0 [pid 306] unlink("./171/binderfs" [pid 305] close(4 [pid 307] getdents64(4, [pid 310] rmdir("./169/bus" [pid 5422] <... chdir resumed>) = 0 [pid 5422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... unlink resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5422] <... prctl resumed>) = 0 [pid 5422] setpgid(0, 0) = 0 [pid 5422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... rmdir resumed>) = 0 [pid 305] rmdir("./166/bus" [pid 310] getdents64(3, [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5422] <... openat resumed>) = 3 [pid 305] <... rmdir resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5422] write(3, "1000", 4 [pid 305] getdents64(3, [pid 310] close(3 [pid 5422] <... write resumed>) = 4 [pid 5422] close(3) = 0 [pid 5422] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5422] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5422] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5425], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5425 [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5425 attached [pid 5425] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... close resumed>) = 0 [pid 305] close(3 [pid 310] rmdir("./169" [pid 5425] memfd_create("syzkaller", 0) = 3 [pid 5425] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] <... close resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 305] rmdir("./166") = 0 [pid 310] mkdir("./170", 0777 [pid 305] mkdir("./167", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] close(4 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] <... close resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] rmdir("./168/bus" [pid 305] close(3 [pid 310] close(3 [pid 5425] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] <... close resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5426 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5427 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./168") = 0 [pid 307] mkdir("./169", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5428 ./strace-static-x86_64: Process 5426 attached [pid 5426] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5426] chdir("./167") = 0 ./strace-static-x86_64: Process 5427 attached [pid 5426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5427] set_robust_list(0x55555748e5e0, 24 [pid 5426] <... prctl resumed>) = 0 [pid 5426] setpgid(0, 0) = 0 [pid 5426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5427] <... set_robust_list resumed>) = 0 [pid 5427] chdir("./170") = 0 [pid 5427] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5426] <... openat resumed>) = 3 [pid 5427] <... prctl resumed>) = 0 [pid 5427] setpgid(0, 0./strace-static-x86_64: Process 5428 attached ) = 0 [pid 5428] set_robust_list(0x55555748e5e0, 24 [pid 5427] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5426] write(3, "1000", 4) = 4 [pid 5426] close(3 [pid 5428] <... set_robust_list resumed>) = 0 [pid 5426] <... close resumed>) = 0 [pid 5428] chdir("./169" [pid 5427] <... openat resumed>) = 3 [pid 5426] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5428] <... chdir resumed>) = 0 [pid 5428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5428] setpgid(0, 0 [pid 5427] write(3, "1000", 4 [pid 5428] <... setpgid resumed>) = 0 [pid 5427] <... write resumed>) = 4 [pid 5428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5427] close(3 [pid 5428] <... openat resumed>) = 3 [pid 5427] <... close resumed>) = 0 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] write(3, "1000", 4 [pid 5427] symlink("/dev/binderfs", "./binderfs" [pid 5426] <... futex resumed>) = 0 [pid 5428] <... write resumed>) = 4 [pid 5427] <... symlink resumed>) = 0 [pid 5426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] <... umount2 resumed>) = 0 [pid 5428] close(3 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... mmap resumed>) = 0x7f19bd5e4000 [pid 306] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] <... close resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5426] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5419] <... mount resumed>) = 0 [pid 5419] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5419] chdir("./bus") = 0 [pid 5419] ioctl(4, LOOP_CLR_FD) = 0 [pid 5419] close(4 [pid 5428] symlink("/dev/binderfs", "./binderfs" [pid 5427] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5426] <... mprotect resumed>) = 0 [pid 5425] <... write resumed>) = 1048576 [pid 5419] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] <... symlink resumed>) = 0 [pid 5427] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5426] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5425] munmap(0x7f19b51e4000, 1048576 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./171/bus", [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5425] <... munmap resumed>) = 0 [pid 5419] <... futex resumed>) = 1 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5428] <... futex resumed>) = 0 [pid 5427] <... mprotect resumed>) = 0 [pid 5426] <... clone resumed>, parent_tid=[5429], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5429 [pid 5425] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5427] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... openat resumed>) = 4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5428] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5426] <... futex resumed>) = 0 [pid 5425] ioctl(4, LOOP_SET_FD, 3 [pid 306] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5430 attached ./strace-static-x86_64: Process 5429 attached [pid 5428] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5427] <... clone resumed>, parent_tid=[5430], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5430 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5425] <... ioctl resumed>) = 0 [pid 5418] <... futex resumed>) = 0 [pid 306] <... openat resumed>) = 4 [pid 5428] <... mprotect resumed>) = 0 [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] close(3 [pid 306] fstat(4, [pid 5430] set_robust_list(0x7f19bd6049e0, 24 [pid 5429] set_robust_list(0x7f19bd6049e0, 24 [pid 5428] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5427] <... futex resumed>) = 0 [pid 5425] <... close resumed>) = 0 [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5430] <... set_robust_list resumed>) = 0 [pid 5429] <... set_robust_list resumed>) = 0 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5425] mkdir("./bus", 0777 [pid 5419] <... futex resumed>) = 0 [pid 5418] <... futex resumed>) = 1 [pid 306] getdents64(4, [pid 5430] memfd_create("syzkaller", 0 [pid 5429] memfd_create("syzkaller", 0 [pid 5428] <... clone resumed>, parent_tid=[5432], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5432 [pid 5425] <... mkdir resumed>) = 0 [pid 5419] chdir("./file0" [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5430] <... memfd_create resumed>) = 3 [pid 5429] <... memfd_create resumed>) = 3 [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5419] <... chdir resumed>) = 0 [pid 306] getdents64(4, [pid 5430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5428] <... futex resumed>) = 0 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [ 128.642899][ T5419] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 128.654175][ T5419] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/165/bus supports timestamps until 2038 (0x7fffffff) [pid 5430] <... mmap resumed>) = 0x7f19b51e4000 [pid 5429] <... mmap resumed>) = 0x7f19b51e4000 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 306] close(4 [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 306] rmdir("./171/bus" [pid 5419] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 5419] <... open resumed>) = 4 [pid 306] getdents64(3, [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 306] close(3 [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 306] rmdir("./171" [pid 5419] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 5419] <... mount resumed>) = 0 [pid 306] mkdir("./172", 0777 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5432 attached [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5432] set_robust_list(0x7f19bd6049e0, 24 [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 3 [pid 5432] <... set_robust_list resumed>) = 0 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5432] memfd_create("syzkaller", 0 [pid 5419] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5432] <... memfd_create resumed>) = 3 [pid 5419] <... open resumed>) = 5 [pid 306] close(3 [pid 5432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5432] <... mmap resumed>) = 0x7f19b51e4000 [pid 5419] <... futex resumed>) = 1 [pid 5418] <... futex resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5433 [pid 5419] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5419] <... openat resumed>) = 6 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5419] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5418] <... futex resumed>) = 0 [pid 5419] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5419] <... write resumed>) = 262144 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5418] <... futex resumed>) = 0 [pid 5419] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5418] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5418] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... write resumed>) = 1048576 [pid 5432] <... write resumed>) = 1048576 [pid 5430] munmap(0x7f19b51e4000, 1048576 [pid 5429] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5433 attached [pid 5433] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5433] chdir("./172" [pid 5430] <... munmap resumed>) = 0 [pid 5429] munmap(0x7f19b51e4000, 1048576 [pid 5433] <... chdir resumed>) = 0 [pid 5433] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5433] setpgid(0, 0) = 0 [pid 5433] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5432] munmap(0x7f19b51e4000, 1048576 [pid 5430] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5429] <... munmap resumed>) = 0 [pid 5429] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5433] <... openat resumed>) = 3 [pid 5433] write(3, "1000", 4 [pid 5430] <... openat resumed>) = 4 [pid 5433] <... write resumed>) = 4 [pid 5430] ioctl(4, LOOP_SET_FD, 3 [pid 5429] <... openat resumed>) = 4 [pid 5433] close(3) = 0 [pid 5433] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5429] ioctl(4, LOOP_SET_FD, 3 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5432] <... munmap resumed>) = 0 [pid 5433] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5433] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5432] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5433] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5437], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5437 [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5437 attached [pid 5430] <... ioctl resumed>) = 0 [pid 5419] <... write resumed>) = 1048576 [pid 5430] close(3) = 0 [pid 5430] mkdir("./bus", 0777) = 0 [pid 5430] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5437] set_robust_list(0x7f19bd6049e0, 24 [pid 5425] <... mount resumed>) = 0 [pid 5419] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... set_robust_list resumed>) = 0 [pid 5432] <... openat resumed>) = 4 [pid 5429] <... ioctl resumed>) = 0 [pid 5432] ioctl(4, LOOP_SET_FD, 3 [pid 5437] memfd_create("syzkaller", 0 [pid 5429] close(3 [pid 5437] <... memfd_create resumed>) = 3 [pid 5429] <... close resumed>) = 0 [pid 5437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5429] mkdir("./bus", 0777 [pid 5437] <... mmap resumed>) = 0x7f19b51e4000 [pid 5429] <... mkdir resumed>) = 0 [pid 5425] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5429] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5425] <... openat resumed>) = 3 [pid 5425] chdir("./bus") = 0 [pid 5425] ioctl(4, LOOP_CLR_FD [pid 5418] <... futex resumed>) = 0 [pid 5419] <... futex resumed>) = 1 [pid 5418] exit_group(0) = ? [pid 5437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5419] +++ exited with 0 +++ [ 128.718405][ T5425] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 128.733051][ T5425] ext4 filesystem being mounted at /root/syzkaller.69675s/168/bus supports timestamps until 2038 (0x7fffffff) [pid 5432] <... ioctl resumed>) = 0 [pid 5425] <... ioctl resumed>) = 0 [pid 5418] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5418, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5437] <... write resumed>) = 1048576 [pid 5437] munmap(0x7f19b51e4000, 1048576 [pid 5432] close(3 [pid 5437] <... munmap resumed>) = 0 [pid 5437] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5437] ioctl(4, LOOP_SET_FD, 3 [pid 5432] <... close resumed>) = 0 [pid 5432] mkdir("./bus", 0777 [pid 5425] close(4 [pid 309] umount2("./165", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./165", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./165/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./165/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./165/binderfs" [pid 5432] <... mkdir resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 309] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... ioctl resumed>) = 0 [pid 5437] close(3) = 0 [pid 5437] mkdir("./bus", 0777) = 0 [pid 5437] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5432] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5425] <... close resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] chdir("./file0" [pid 5422] <... futex resumed>) = 0 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... chdir resumed>) = 0 [ 128.763593][ T5430] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 128.775617][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 128.783948][ T5430] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/170/bus supports timestamps until 2038 (0x7fffffff) [ 128.794454][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5430] <... mount resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5425] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5430] <... openat resumed>) = 3 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] chdir("./bus" [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5430] <... chdir resumed>) = 0 [pid 5425] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] ioctl(4, LOOP_CLR_FD [pid 5425] <... open resumed>) = 4 [pid 5430] <... ioctl resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] close(4 [pid 5425] <... futex resumed>) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5430] <... close resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5430] <... futex resumed>) = 1 [pid 5425] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5425] <... mount resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5425] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... open resumed>) = 5 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5425] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5425] <... openat resumed>) = 6 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5425] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5422] <... futex resumed>) = 0 [pid 5425] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... write resumed>) = 262144 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5422] <... futex resumed>) = 0 [pid 5425] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5422] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5422] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... futex resumed>) = 0 [pid 5427] <... futex resumed>) = 1 [ 128.820551][ T5429] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 128.829867][ T5429] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/167/bus supports timestamps until 2038 (0x7fffffff) [ 128.844936][ T5437] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 5437] <... mount resumed>) = 0 [pid 5430] chdir("./file0" [pid 5429] <... mount resumed>) = 0 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... chdir resumed>) = 0 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5437] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5429] <... openat resumed>) = 3 [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5425] <... write resumed>) = 1048576 [pid 5425] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5422] <... futex resumed>) = 0 [pid 5422] exit_group(0) = ? [pid 5425] <... futex resumed>) = ? [pid 5437] <... openat resumed>) = 3 [pid 5437] chdir("./bus") = 0 [pid 5437] ioctl(4, LOOP_CLR_FD [pid 5429] chdir("./bus") = 0 [pid 5429] ioctl(4, LOOP_CLR_FD [pid 5430] <... futex resumed>) = 0 [pid 5427] <... futex resumed>) = 1 [pid 5430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... open resumed>) = 4 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5427] <... futex resumed>) = 0 [pid 5430] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... mount resumed>) = 0 [pid 5427] <... futex resumed>) = 0 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] <... futex resumed>) = 0 [pid 5427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5430] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... mount resumed>) = 0 [pid 5432] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5432] chdir("./bus") = 0 [pid 5432] ioctl(4, LOOP_CLR_FD [pid 5437] <... ioctl resumed>) = 0 [pid 5432] <... ioctl resumed>) = 0 [pid 5430] <... open resumed>) = 5 [pid 5429] <... ioctl resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 5437] close(4 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] close(4 [pid 5437] <... close resumed>) = 0 [pid 5432] close(4 [pid 5430] <... futex resumed>) = 1 [pid 5427] <... futex resumed>) = 0 [pid 5425] +++ exited with 0 +++ [pid 5429] <... close resumed>) = 0 [pid 5422] +++ exited with 0 +++ [pid 309] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5422, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5429] <... futex resumed>) = 1 [pid 5427] <... futex resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 309] lstat("./165/bus", [pid 5437] chdir("./file0" [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... close resumed>) = 0 [pid 5430] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5437] <... chdir resumed>) = 0 [pid 5433] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... openat resumed>) = 6 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 309] umount2("./165/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = 1 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] chdir("./file0" [pid 5428] <... futex resumed>) = 0 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5437] <... futex resumed>) = 0 [pid 5433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5432] chdir("./file0" [pid 5430] <... futex resumed>) = 1 [pid 5429] <... chdir resumed>) = 0 [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./165/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5437] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... chdir resumed>) = 0 [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] <... futex resumed>) = 0 [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 4 [pid 308] <... openat resumed>) = 3 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5429] <... futex resumed>) = 1 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] <... futex resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 309] fstat(4, [pid 308] fstat(3, [pid 5437] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = 0 [pid 5430] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 308] getdents64(3, [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(4, [pid 308] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5432] <... open resumed>) = 4 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(4 [pid 308] lstat("./168/binderfs", [pid 5432] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./165/bus" [pid 308] unlink("./168/binderfs" [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5432] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.859758][ T5437] ext4 filesystem being mounted at /root/syzkaller.URAKkl/172/bus supports timestamps until 2038 (0x7fffffff) [ 128.872685][ T5432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 128.881981][ T5432] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/169/bus supports timestamps until 2038 (0x7fffffff) [pid 309] getdents64(3, [pid 308] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5437] <... open resumed>) = 4 [pid 5432] <... mount resumed>) = 0 [pid 5430] <... write resumed>) = 262144 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5430] <... futex resumed>) = 1 [pid 5427] <... futex resumed>) = 0 [pid 5437] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5427] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5427] <... futex resumed>) = 0 [pid 5437] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5430] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5429] <... open resumed>) = 4 [pid 5427] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(3 [pid 5437] <... mount resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5429] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] <... mount resumed>) = 0 [pid 5437] <... open resumed>) = 5 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5429] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] <... open resumed>) = 5 [pid 5437] <... openat resumed>) = 6 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5433] <... futex resumed>) = 0 [pid 5429] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5437] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5429] <... openat resumed>) = 6 [pid 5437] <... write resumed>) = 262144 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5432] <... futex resumed>) = 1 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] <... futex resumed>) = 0 [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./165" [pid 5437] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5433] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... futex resumed>) = 0 [pid 5433] <... futex resumed>) = 0 [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5430] <... write resumed>) = 1048576 [pid 5429] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5428] <... futex resumed>) = 0 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... rmdir resumed>) = 0 [pid 5437] <... write resumed>) = 1048576 [pid 5433] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5430] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] mkdir("./166", 0777 [pid 5432] <... open resumed>) = 5 [pid 5430] <... futex resumed>) = 1 [pid 309] <... mkdir resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5432] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] ioctl(3, LOOP_CLR_FD [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5432] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5429] <... write resumed>) = 262144 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5427] <... futex resumed>) = 0 [pid 309] close(3 [pid 5437] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... openat resumed>) = 6 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5427] exit_group(0 [pid 5437] <... futex resumed>) = 1 [pid 5433] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5430] <... futex resumed>) = ? [pid 5427] <... exit_group resumed>) = ? [pid 5433] exit_group(0 [pid 5432] <... futex resumed>) = 1 [pid 5430] +++ exited with 0 +++ [pid 5428] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 5432] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5433] <... exit_group resumed>) = ? [pid 5432] <... write resumed>) = 262144 [pid 5429] <... futex resumed>) = 1 [pid 5426] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5432] <... futex resumed>) = 1 [pid 5428] <... futex resumed>) = 0 [pid 5426] <... futex resumed>) = 0 [pid 5432] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5428] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5428] <... futex resumed>) = 0 [pid 5432] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5428] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 128.930318][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 128.954148][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5429] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5429] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5426] <... futex resumed>) = 0 [pid 5429] <... futex resumed>) = 1 [pid 5429] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5426] exit_group(0) = ? [pid 5429] <... futex resumed>) = 230 [pid 5437] +++ exited with 0 +++ [pid 5433] +++ exited with 0 +++ [pid 5432] <... write resumed>) = 1048576 [pid 5429] +++ exited with 0 +++ [pid 5427] +++ exited with 0 +++ [pid 5426] +++ exited with 0 +++ [pid 309] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5427, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5433, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5426, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5449 [pid 310] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 310] fstat(3, [pid 306] fstat(3, [pid 305] fstat(3, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 306] getdents64(3, [pid 305] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] lstat("./168/bus", [pid 310] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] lstat("./170/binderfs", [pid 308] <... openat resumed>) = 4 [pid 306] lstat("./172/binderfs", [pid 305] lstat("./167/binderfs", [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] fstat(4, [pid 310] unlink("./170/binderfs" [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... unlink resumed>) = 0 [pid 308] getdents64(4, [pid 306] unlink("./172/binderfs" [pid 305] unlink("./167/binderfs"./strace-static-x86_64: Process 5449 attached [pid 310] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... unlink resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 5449] set_robust_list(0x55555748e5e0, 24 [pid 5432] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 5449] <... set_robust_list resumed>) = 0 [pid 308] close(4 [pid 5449] chdir("./166" [pid 308] <... close resumed>) = 0 [pid 5449] <... chdir resumed>) = 0 [pid 308] rmdir("./168/bus" [pid 5449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... rmdir resumed>) = 0 [pid 5449] <... prctl resumed>) = 0 [pid 308] getdents64(3, [pid 5449] setpgid(0, 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5449] <... setpgid resumed>) = 0 [pid 308] close(3 [pid 5449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... close resumed>) = 0 [pid 5449] <... openat resumed>) = 3 [pid 308] rmdir("./168" [pid 5449] write(3, "1000", 4 [pid 5428] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] <... rmdir resumed>) = 0 [pid 306] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5449] <... write resumed>) = 4 [pid 5428] exit_group(0 [pid 308] mkdir("./169", 0777 [pid 5449] close(3 [pid 5428] <... exit_group resumed>) = ? [pid 308] <... mkdir resumed>) = 0 [pid 5449] <... close resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5449] symlink("/dev/binderfs", "./binderfs" [pid 308] <... openat resumed>) = 3 [pid 5449] <... symlink resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5449] <... futex resumed>) = 0 [pid 308] close(3 [pid 5449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... close resumed>) = 0 [pid 5449] <... mmap resumed>) = 0x7f19bd5e4000 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5449] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5450 [pid 5449] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5451], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5451 [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5432] <... futex resumed>) = ? [pid 5432] +++ exited with 0 +++ ./strace-static-x86_64: Process 5451 attached ./strace-static-x86_64: Process 5450 attached [pid 5428] +++ exited with 0 +++ [ 129.037293][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 129.054081][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 129.066741][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5451] set_robust_list(0x7f19bd6049e0, 24 [pid 5450] set_robust_list(0x55555748e5e0, 24 [pid 5451] <... set_robust_list resumed>) = 0 [pid 5450] <... set_robust_list resumed>) = 0 [pid 5450] chdir("./169") = 0 [pid 5450] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5450] setpgid(0, 0) = 0 [pid 5450] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5450] write(3, "1000", 4) = 4 [pid 5450] close(3) = 0 [pid 5450] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5450] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5450] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5450] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5452], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5452 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5452 attached [pid 5452] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5452] memfd_create("syzkaller", 0) = 3 [pid 5452] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5451] memfd_create("syzkaller", 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5428, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 5451] <... memfd_create resumed>) = 3 [pid 307] <... restart_syscall resumed>) = 0 [pid 5451] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5452] <... mmap resumed>) = 0x7f19b51e4000 [pid 5451] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./169/binderfs") = 0 [pid 307] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5452] <... write resumed>) = 1048576 [pid 5452] munmap(0x7f19b51e4000, 1048576) = 0 [ 129.068816][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 129.093024][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 129.122655][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5452] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5451] <... write resumed>) = 1048576 [pid 5451] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5451] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5452] <... openat resumed>) = 4 [pid 5451] <... openat resumed>) = 4 [pid 5452] ioctl(4, LOOP_SET_FD, 3 [pid 5451] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5451] close(3) = 0 [pid 5451] mkdir("./bus", 0777) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5451] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./170/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./170/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./170") = 0 [pid 310] mkdir("./171", 0777) = 0 [ 129.123086][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 129.144422][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5452] <... ioctl resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5452] close(3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5452] <... close resumed>) = 0 [pid 5452] mkdir("./bus", 0777) = 0 [pid 5452] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5451] <... mount resumed>) = 0 [pid 5451] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5451] chdir("./bus") = 0 [pid 5451] ioctl(4, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] close(3 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./167/bus", [pid 310] <... close resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./167/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./167") = 0 [pid 305] mkdir("./168", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5458 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5457 ./strace-static-x86_64: Process 5458 attached [pid 5458] set_robust_list(0x55555748e5e0, 24 [pid 307] <... umount2 resumed>) = 0 [pid 5458] <... set_robust_list resumed>) = 0 [pid 5458] chdir("./171") = 0 [pid 5458] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5458] setpgid(0, 0) = 0 [pid 5458] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5458] write(3, "1000", 4) = 4 [pid 5458] close(3) = 0 [pid 5458] symlink("/dev/binderfs", "./binderfs" [pid 307] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] lstat("./172/bus", [pid 5458] <... symlink resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 129.264429][ T5451] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 129.273507][ T5451] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/166/bus supports timestamps until 2038 (0x7fffffff) [pid 5451] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 5457 attached [pid 5458] <... futex resumed>) = 0 [pid 306] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5458] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5457] set_robust_list(0x55555748e5e0, 24 [pid 5458] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5457] <... set_robust_list resumed>) = 0 [pid 5458] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5457] chdir("./168" [pid 5458] <... mprotect resumed>) = 0 [pid 5457] <... chdir resumed>) = 0 [pid 5458] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5457] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] lstat("./169/bus", [pid 5451] close(4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5457] <... prctl resumed>) = 0 [pid 5458] <... clone resumed>, parent_tid=[5461], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5461 [pid 5457] setpgid(0, 0 [pid 307] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5451] <... close resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... setpgid resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... openat resumed>) = 4 [pid 5458] <... futex resumed>) = 0 [pid 5457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5457] <... openat resumed>) = 3 [pid 5457] write(3, "1000", 4) = 4 [pid 5457] close(3) = 0 [pid 5457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5457] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5457] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5462], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5462 [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5461 attached [pid 5461] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5461] memfd_create("syzkaller", 0) = 3 [pid 5461] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5451] <... futex resumed>) = 1 [pid 307] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5451] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5449] <... futex resumed>) = 0 [pid 306] fstat(4, [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... openat resumed>) = 4 [pid 5451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5449] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 5451] chdir("./file0" [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5451] <... chdir resumed>) = 0 [pid 307] fstat(4, [pid 306] getdents64(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 5462 attached [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 306] close(4 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5451] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5449] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] getdents64(4, [pid 306] rmdir("./172/bus") = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4 [pid 306] getdents64(3, [pid 5451] <... open resumed>) = 4 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./169/bus" [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 306] close(3) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 307] close(3 [pid 306] rmdir("./172" [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 5449] <... futex resumed>) = 0 [pid 5451] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 307] <... close resumed>) = 0 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] mkdir("./173", 0777 [pid 307] rmdir("./169" [pid 5461] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5451] <... mount resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] mkdir("./170", 0777 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... mkdir resumed>) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] ioctl(3, LOOP_CLR_FD [pid 307] <... openat resumed>) = 3 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5451] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5451] <... open resumed>) = 5 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... close resumed>) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] close(3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5449] <... futex resumed>) = 0 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5451] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5462] set_robust_list(0x7f19bd6049e0, 24 [pid 5452] <... mount resumed>) = 0 [pid 5451] <... openat resumed>) = 6 [pid 307] <... close resumed>) = 0 [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5463 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5462] <... set_robust_list resumed>) = 0 [pid 5452] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5451] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5464 [pid 5462] memfd_create("syzkaller", 0 [pid 5452] <... openat resumed>) = 3 ./strace-static-x86_64: Process 5464 attached ./strace-static-x86_64: Process 5463 attached [pid 5462] <... memfd_create resumed>) = 3 [pid 5461] <... write resumed>) = 1048576 [pid 5451] <... write resumed>) = 262144 [pid 5462] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5452] chdir("./bus" [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5463] chdir("./173") = 0 [pid 5463] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5463] setpgid(0, 0) = 0 [pid 5463] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5464] set_robust_list(0x55555748e5e0, 24 [pid 5462] <... mmap resumed>) = 0x7f19b51e4000 [pid 5463] <... openat resumed>) = 3 [pid 5463] write(3, "1000", 4) = 4 [pid 5463] close(3) = 0 [pid 5463] symlink("/dev/binderfs", "./binderfs" [pid 5464] <... set_robust_list resumed>) = 0 [pid 5464] chdir("./170") = 0 [pid 5463] <... symlink resumed>) = 0 [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5463] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5463] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5463] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5465], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5465 [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 129.318807][ T5452] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 129.329936][ T5452] ext4 filesystem being mounted at /root/syzkaller.69675s/169/bus supports timestamps until 2038 (0x7fffffff) [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5465 attached [pid 5464] setpgid(0, 0 [pid 5462] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5461] munmap(0x7f19b51e4000, 1048576 [pid 5452] <... chdir resumed>) = 0 [pid 5451] <... futex resumed>) = 1 [pid 5449] <... futex resumed>) = 0 [pid 5464] <... setpgid resumed>) = 0 [pid 5464] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5449] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5464] <... openat resumed>) = 3 [pid 5461] <... munmap resumed>) = 0 [pid 5461] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5464] write(3, "1000", 4) = 4 [pid 5464] close(3 [pid 5465] set_robust_list(0x7f19bd6049e0, 24 [pid 5462] <... write resumed>) = 1048576 [pid 5461] <... openat resumed>) = 4 [pid 5452] ioctl(4, LOOP_CLR_FD [pid 5451] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5464] <... close resumed>) = 0 [pid 5461] ioctl(4, LOOP_SET_FD, 3 [pid 5465] <... set_robust_list resumed>) = 0 [pid 5465] memfd_create("syzkaller", 0 [pid 5464] symlink("/dev/binderfs", "./binderfs" [pid 5465] <... memfd_create resumed>) = 3 [pid 5464] <... symlink resumed>) = 0 [pid 5465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5464] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5462] munmap(0x7f19b51e4000, 1048576 [pid 5464] <... mprotect resumed>) = 0 [pid 5464] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5467], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5467 [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5462] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5467 attached [pid 5462] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5461] <... ioctl resumed>) = 0 [pid 5461] close(3) = 0 [pid 5461] mkdir("./bus", 0777 [pid 5467] set_robust_list(0x7f19bd6049e0, 24 [pid 5462] <... openat resumed>) = 4 [pid 5461] <... mkdir resumed>) = 0 [pid 5461] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5467] <... set_robust_list resumed>) = 0 [pid 5462] ioctl(4, LOOP_SET_FD, 3 [pid 5452] <... ioctl resumed>) = 0 [pid 5452] close(4 [pid 5467] memfd_create("syzkaller", 0) = 3 [pid 5467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5462] <... ioctl resumed>) = 0 [pid 5452] <... close resumed>) = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5452] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5462] close(3) = 0 [pid 5450] <... futex resumed>) = 0 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] mkdir("./bus", 0777 [pid 5450] <... futex resumed>) = 1 [pid 5462] <... mkdir resumed>) = 0 [pid 5452] <... futex resumed>) = 0 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5452] chdir("./file0") = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5450] <... futex resumed>) = 0 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... open resumed>) = 4 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5449] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5449] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5467] <... write resumed>) = 1048576 [pid 5465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5452] <... futex resumed>) = 1 [pid 5451] <... write resumed>) = 1048576 [pid 5450] <... futex resumed>) = 0 [pid 5452] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... mount resumed>) = 0 [pid 5450] <... futex resumed>) = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 0 [pid 5450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5452] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... open resumed>) = 5 [pid 5450] <... futex resumed>) = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 0 [pid 5450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5452] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... openat resumed>) = 6 [pid 5450] <... futex resumed>) = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5452] <... futex resumed>) = 0 [pid 5450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5452] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... write resumed>) = 262144 [pid 5450] <... futex resumed>) = 0 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5451] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5451] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5467] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5467] ioctl(4, LOOP_SET_FD, 3 [pid 5449] exit_group(0 [pid 5461] <... mount resumed>) = 0 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5451] <... futex resumed>) = ? [pid 5449] <... exit_group resumed>) = ? [pid 5467] <... ioctl resumed>) = 0 [pid 5467] close(3 [pid 5465] <... write resumed>) = 1048576 [pid 5451] +++ exited with 0 +++ [pid 5449] +++ exited with 0 +++ [pid 5461] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5452] <... futex resumed>) = 1 [pid 5461] <... openat resumed>) = 3 [pid 5452] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5461] chdir("./bus") = 0 [pid 5461] ioctl(4, LOOP_CLR_FD) = 0 [pid 5461] close(4) = 0 [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... futex resumed>) = 1 [pid 5461] chdir("./file0" [pid 5467] <... close resumed>) = 0 [pid 5465] munmap(0x7f19b51e4000, 1048576 [pid 5462] <... mount resumed>) = 0 [pid 5450] <... futex resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5449, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5467] mkdir("./bus", 0777 [pid 5465] <... munmap resumed>) = 0 [pid 5461] <... chdir resumed>) = 0 [pid 5450] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... mkdir resumed>) = 0 [pid 5465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = 0 [pid 5450] <... futex resumed>) = 1 [pid 5467] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5465] <... openat resumed>) = 4 [pid 5461] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5452] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5450] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] ioctl(4, LOOP_SET_FD, 3 [pid 5462] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5461] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./166", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./166", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 5461] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./166/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 129.441659][ T5461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 129.450944][ T5461] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/171/bus supports timestamps until 2038 (0x7fffffff) [ 129.465144][ T5462] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 129.478792][ T5462] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/168/bus supports timestamps until 2038 (0x7fffffff) [pid 309] lstat("./166/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./166/binderfs") = 0 [pid 309] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... ioctl resumed>) = 0 [pid 5465] close(3) = 0 [pid 5465] mkdir("./bus", 0777) = 0 [pid 5465] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5461] <... open resumed>) = 4 [pid 5462] <... openat resumed>) = 3 [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5458] <... futex resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... mount resumed>) = 0 [pid 5462] chdir("./bus" [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5461] <... futex resumed>) = 1 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... chdir resumed>) = 0 [pid 5462] ioctl(4, LOOP_CLR_FD [pid 5461] <... open resumed>) = 5 [pid 5462] <... ioctl resumed>) = 0 [pid 5462] close(4 [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5458] <... futex resumed>) = 0 [pid 5461] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5461] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... openat resumed>) = 6 [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = 0 [pid 5461] <... futex resumed>) = 1 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5461] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... close resumed>) = 0 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5457] <... futex resumed>) = 0 [pid 5462] <... futex resumed>) = 1 [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] chdir("./file0" [pid 5457] <... futex resumed>) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... chdir resumed>) = 0 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5462] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... open resumed>) = 4 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5462] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... mount resumed>) = 0 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5462] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] <... open resumed>) = 5 [pid 5457] <... futex resumed>) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5462] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] <... openat resumed>) = 6 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5462] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 129.500971][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 129.515834][ T5467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... mount resumed>) = 0 [pid 5462] <... write resumed>) = 262144 [pid 5461] <... write resumed>) = 262144 [pid 5450] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5452] <... write resumed>) = 1048576 [pid 5452] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5452] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... openat resumed>) = 3 [pid 5462] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 5467] chdir("./bus" [pid 5462] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... chdir resumed>) = 0 [pid 5462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5457] <... futex resumed>) = 0 [pid 5467] ioctl(4, LOOP_CLR_FD [pid 5462] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5457] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... ioctl resumed>) = 0 [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5458] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5450] exit_group(0 [ 129.545271][ T5467] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/170/bus supports timestamps until 2038 (0x7fffffff) [ 129.561223][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 129.563036][ T5465] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 5467] close(4 [pid 5461] <... futex resumed>) = 0 [pid 5458] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5452] <... futex resumed>) = ? [pid 5450] <... exit_group resumed>) = ? [pid 5467] <... close resumed>) = 0 [pid 5458] <... futex resumed>) = 0 [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5458] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 1 [pid 5464] <... futex resumed>) = 0 [pid 5462] <... write resumed>) = 1048576 [pid 5452] +++ exited with 0 +++ [pid 5450] +++ exited with 0 +++ [pid 5467] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5462] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5450, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5464] <... futex resumed>) = 0 [pid 5462] <... futex resumed>) = 1 [pid 5457] <... futex resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 5467] chdir("./file0" [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5462] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5457] exit_group(0 [pid 308] <... restart_syscall resumed>) = 0 [pid 5467] <... chdir resumed>) = 0 [pid 5465] <... mount resumed>) = 0 [pid 5462] <... futex resumed>) = ? [pid 5461] <... write resumed>) = 1048576 [pid 5457] <... exit_group resumed>) = ? [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5462] +++ exited with 0 +++ [pid 5461] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = 1 [pid 5465] <... openat resumed>) = 3 [pid 5464] <... futex resumed>) = 0 [pid 5461] <... futex resumed>) = 1 [pid 5458] <... futex resumed>) = 0 [pid 308] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5465] chdir("./bus" [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5461] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5458] exit_group(0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5465] <... chdir resumed>) = 0 [pid 5464] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] ioctl(4, LOOP_CLR_FD [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5461] <... futex resumed>) = ? [pid 5458] <... exit_group resumed>) = ? [pid 308] <... openat resumed>) = 3 [pid 5467] <... open resumed>) = 4 [pid 5461] +++ exited with 0 +++ [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... futex resumed>) = 1 [pid 5464] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5467] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] lstat("./169/binderfs", [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5464] <... futex resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5467] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] unlink("./169/binderfs" [pid 5467] <... mount resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... futex resumed>) = 1 [pid 5464] <... futex resumed>) = 0 [pid 5467] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5464] <... futex resumed>) = 0 [pid 5467] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 129.589469][ T5465] ext4 filesystem being mounted at /root/syzkaller.URAKkl/173/bus supports timestamps until 2038 (0x7fffffff) [ 129.627596][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5457] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5457, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./168/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./168/binderfs") = 0 [pid 305] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... ioctl resumed>) = 0 [pid 5467] <... open resumed>) = 5 [pid 5465] close(4 [pid 5458] +++ exited with 0 +++ [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... close resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5458, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... futex resumed>) = 1 [pid 5465] <... futex resumed>) = 1 [pid 5464] <... futex resumed>) = 0 [pid 5463] <... futex resumed>) = 0 [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5467] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5467] <... openat resumed>) = 6 [pid 5465] <... futex resumed>) = 0 [pid 5464] <... futex resumed>) = 0 [pid 5463] <... futex resumed>) = 1 [pid 309] <... umount2 resumed>) = 0 [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 0 [pid 5464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5467] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] chdir("./file0" [pid 5464] <... futex resumed>) = 0 [pid 309] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5465] <... chdir resumed>) = 0 [pid 310] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./171/binderfs" [pid 5465] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5467] <... write resumed>) = 262144 [pid 5465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = 0 [pid 5464] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5464] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5467] <... futex resumed>) = 1 [pid 5465] <... open resumed>) = 4 [pid 309] lstat("./166/bus", [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5467] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5465] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 309] umount2("./166/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5467] <... write resumed>) = 1048576 [pid 5467] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5464] <... futex resumed>) = 0 [pid 5464] exit_group(0) = ? [pid 5467] <... futex resumed>) = ? [pid 5467] +++ exited with 0 +++ [pid 5464] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5464, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 5465] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5465] <... mount resumed>) = 0 [pid 309] openat(AT_FDCWD, "./166/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 4 [pid 5465] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 309] fstat(4, [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5465] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(4, [pid 5465] <... open resumed>) = 5 [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5465] <... futex resumed>) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5465] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 307] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5465] <... openat resumed>) = 6 [pid 5463] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(4 [pid 307] <... openat resumed>) = 3 [pid 5465] <... futex resumed>) = 0 [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... close resumed>) = 0 [pid 307] fstat(3, [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./166/bus" [pid 5465] <... futex resumed>) = 0 [pid 5463] <... futex resumed>) = 1 [pid 5465] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./170/binderfs") = 0 [ 129.642183][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 129.668090][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 129.681300][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... rmdir resumed>) = 0 [pid 5465] <... write resumed>) = 262144 [pid 309] getdents64(3, [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 5465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5463] <... futex resumed>) = 0 [pid 5465] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5463] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./166") = 0 [ 129.700533][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 129.714019][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 129.729064][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 309] mkdir("./167", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5465] <... write resumed>) = 1048576 [pid 5465] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5463] <... futex resumed>) = 0 [pid 5465] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5463] exit_group(0 [pid 5465] <... futex resumed>) = ? [pid 5463] <... exit_group resumed>) = ? [pid 309] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./169/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5465] +++ exited with 0 +++ [pid 5463] +++ exited with 0 +++ [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5463, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] close(3) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5479 [pid 306] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./173/binderfs") = 0 [ 129.740215][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5479 attached [pid 5479] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5479] chdir("./167") = 0 [pid 5479] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5479] setpgid(0, 0) = 0 [pid 5479] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5479] write(3, "1000", 4) = 4 [pid 5479] close(3) = 0 [pid 5479] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5479] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5479] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5479] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5480], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5480 [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5480 attached [pid 5480] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5480] memfd_create("syzkaller", 0) = 3 [pid 5480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./169/bus" [pid 5480] <... write resumed>) = 1048576 [pid 5480] munmap(0x7f19b51e4000, 1048576 [pid 308] <... rmdir resumed>) = 0 [pid 308] getdents64(3, [pid 5480] <... munmap resumed>) = 0 [pid 5480] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./169") = 0 [pid 308] mkdir("./170", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./171/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./171/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./171") = 0 [pid 310] mkdir("./172", 0777) = 0 [ 129.785648][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 129.817658][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5480] <... openat resumed>) = 4 [pid 5480] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./170/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./170/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./170" [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./171", 0777 [pid 5480] <... ioctl resumed>) = 0 [pid 5480] close(3 [pid 307] <... mkdir resumed>) = 0 [pid 5480] <... close resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5480] mkdir("./bus", 0777) = 0 [pid 5480] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... openat resumed>) = 3 [pid 308] close(3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 308] <... close resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] close(3) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5482 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5483 ./strace-static-x86_64: Process 5482 attached [pid 5482] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5482] chdir("./170") = 0 [pid 5482] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5482] setpgid(0, 0) = 0 [pid 5482] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5482] write(3, "1000", 4) = 4 [pid 5482] close(3) = 0 [pid 5482] symlink("/dev/binderfs", "./binderfs" [pid 310] close(3) = 0 [pid 5482] <... symlink resumed>) = 0 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5482] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5482] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... umount2 resumed>) = 0 [pid 5482] <... clone resumed>, parent_tid=[5484], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5484 [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5484 attached [pid 5484] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5484] memfd_create("syzkaller", 0) = 3 [pid 5484] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5484] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5485 ./strace-static-x86_64: Process 5485 attached [pid 5485] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5485] chdir("./172") = 0 [pid 5485] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5485] setpgid(0, 0) = 0 [pid 5485] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... umount2 resumed>) = 0 [pid 5485] <... openat resumed>) = 3 [pid 5485] write(3, "1000", 4) = 4 [pid 305] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] close(3) = 0 [pid 5485] symlink("/dev/binderfs", "./binderfs" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5485] <... symlink resumed>) = 0 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5485] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5485] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5486], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5486 [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] lstat("./168/bus", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] lstat("./173/bus", [pid 5484] <... write resumed>) = 1048576 [pid 305] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5484] munmap(0x7f19b51e4000, 1048576 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5484] <... munmap resumed>) = 0 [pid 5484] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5484] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5486 attached [pid 5486] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5486] memfd_create("syzkaller", 0) = 3 [pid 5486] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] <... openat resumed>) = 4 [pid 306] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] fstat(4, [pid 5484] <... ioctl resumed>) = 0 [pid 306] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5483 attached [pid 5486] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5484] close(3 [pid 305] getdents64(4, [pid 5484] <... close resumed>) = 0 [pid 5484] mkdir("./bus", 0777 [pid 5483] set_robust_list(0x55555748e5e0, 24 [pid 306] <... openat resumed>) = 4 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 5484] <... mkdir resumed>) = 0 [pid 305] getdents64(4, [pid 5484] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./173/bus") = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4 [pid 306] getdents64(3, [pid 305] <... close resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] rmdir("./168/bus" [pid 306] close(3) = 0 [pid 306] rmdir("./173" [pid 305] <... rmdir resumed>) = 0 [pid 5483] <... set_robust_list resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] getdents64(3, [pid 306] mkdir("./174", 0777 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5483] chdir("./171" [pid 306] <... mkdir resumed>) = 0 [pid 305] close(3 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] rmdir("./168" [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] mkdir("./169", 0777) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5489 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 5483] <... chdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5490 [pid 5483] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5483] setpgid(0, 0) = 0 [pid 5483] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5483] write(3, "1000", 4./strace-static-x86_64: Process 5489 attached ) = 4 [pid 5489] set_robust_list(0x55555748e5e0, 24 [pid 5483] close(3 [pid 5489] <... set_robust_list resumed>) = 0 [pid 5486] <... write resumed>) = 1048576 [pid 5483] <... close resumed>) = 0 [pid 5489] chdir("./174" [pid 5486] munmap(0x7f19b51e4000, 1048576 [pid 5483] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5489] <... chdir resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5483] <... futex resumed>) = 0 [pid 5483] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5489] <... prctl resumed>) = 0 [pid 5486] <... munmap resumed>) = 0 [pid 5483] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5483] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5483] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5490 attached [pid 5490] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5490] chdir("./169" [pid 5483] <... clone resumed>, parent_tid=[5493], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5493 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] setpgid(0, 0 [pid 5486] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5483] <... futex resumed>) = 0 [pid 5490] <... chdir resumed>) = 0 [pid 5490] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5490] setpgid(0, 0) = 0 [pid 5490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5490] write(3, "1000", 4) = 4 [pid 5490] close(3) = 0 [pid 5490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5490] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5490] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5494], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5494 [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5493 attached [pid 5493] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5493] memfd_create("syzkaller", 0) = 3 [pid 5493] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5494 attached [pid 5494] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5489] <... setpgid resumed>) = 0 [pid 5486] <... openat resumed>) = 4 [pid 5494] memfd_create("syzkaller", 0 [pid 5489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5486] ioctl(4, LOOP_SET_FD, 3 [pid 5494] <... memfd_create resumed>) = 3 [pid 5494] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5489] <... openat resumed>) = 3 [pid 5486] <... ioctl resumed>) = 0 [pid 5484] <... mount resumed>) = 0 [pid 5489] write(3, "1000", 4 [pid 5486] close(3 [pid 5484] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5489] <... write resumed>) = 4 [pid 5486] <... close resumed>) = 0 [pid 5484] <... openat resumed>) = 3 [pid 5494] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5489] close(3 [pid 5486] mkdir("./bus", 0777 [pid 5493] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5484] chdir("./bus" [pid 5489] <... close resumed>) = 0 [pid 5486] <... mkdir resumed>) = 0 [pid 5489] symlink("/dev/binderfs", "./binderfs" [pid 5484] <... chdir resumed>) = 0 [pid 5484] ioctl(4, LOOP_CLR_FD) = 0 [pid 5484] close(4 [pid 5489] <... symlink resumed>) = 0 [pid 5484] <... close resumed>) = 0 [pid 5494] <... write resumed>) = 1048576 [pid 5493] <... write resumed>) = 1048576 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... mount resumed>) = 0 [pid 5494] munmap(0x7f19b51e4000, 1048576 [pid 5489] <... futex resumed>) = 0 [pid 5484] <... futex resumed>) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5494] <... munmap resumed>) = 0 [pid 5489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5489] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5494] <... openat resumed>) = 4 [pid 5489] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5484] chdir("./file0" [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] ioctl(4, LOOP_SET_FD, 3 [pid 5489] <... mprotect resumed>) = 0 [pid 5484] <... chdir resumed>) = 0 [pid 5494] <... ioctl resumed>) = 0 [pid 5489] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] close(3 [pid 5484] <... futex resumed>) = 1 [pid 5482] <... futex resumed>) = 0 [ 130.034499][ T5484] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 130.044864][ T5484] ext4 filesystem being mounted at /root/syzkaller.69675s/170/bus supports timestamps until 2038 (0x7fffffff) [ 130.054530][ T5480] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.068396][ T5480] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/167/bus supports timestamps until 2038 (0x7fffffff) [pid 5480] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5494] <... close resumed>) = 0 [pid 5489] <... clone resumed>, parent_tid=[5500], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5500 [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... openat resumed>) = 3 [pid 5494] mkdir("./bus", 0777 [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5480] chdir("./bus" [pid 5494] <... mkdir resumed>) = 0 [pid 5489] <... futex resumed>) = 0 [pid 5484] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... chdir resumed>) = 0 [pid 5494] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5480] ioctl(4, LOOP_CLR_FD) = 0 [pid 5493] munmap(0x7f19b51e4000, 1048576 [pid 5480] close(4 [pid 5493] <... munmap resumed>) = 0 [pid 5480] <... close resumed>) = 0 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5480] <... futex resumed>) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5493] <... openat resumed>) = 4 [pid 5480] chdir("./file0" [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] ioctl(4, LOOP_SET_FD, 3 [pid 5480] <... chdir resumed>) = 0 [pid 5479] <... futex resumed>) = 0 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... futex resumed>) = 0 [pid 5479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5500 attached [pid 5500] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5500] memfd_create("syzkaller", 0) = 3 [pid 5500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5493] <... ioctl resumed>) = 0 [pid 5493] close(3) = 0 [pid 5493] mkdir("./bus", 0777) = 0 [pid 5493] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5484] <... open resumed>) = 4 [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... mount resumed>) = 0 [pid 5484] <... futex resumed>) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5480] <... open resumed>) = 4 [pid 5486] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... openat resumed>) = 3 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5480] <... futex resumed>) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5486] chdir("./bus" [pid 5484] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] <... chdir resumed>) = 0 [pid 5484] <... mount resumed>) = 0 [pid 5480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] ioctl(4, LOOP_CLR_FD [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5479] <... futex resumed>) = 0 [pid 5486] <... ioctl resumed>) = 0 [pid 5484] <... futex resumed>) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5480] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] close(4 [ 130.097342][ T5486] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 130.106867][ T5486] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/172/bus supports timestamps until 2038 (0x7fffffff) [ 130.130706][ T5493] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... mount resumed>) = 0 [pid 5500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5486] <... close resumed>) = 0 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5484] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... open resumed>) = 5 [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5484] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... openat resumed>) = 6 [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5482] <... futex resumed>) = 0 [pid 5484] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] <... write resumed>) = 262144 [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5482] <... futex resumed>) = 0 [pid 5484] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5482] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] <... futex resumed>) = 0 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5482] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... futex resumed>) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] chdir("./file0" [pid 5480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5493] <... mount resumed>) = 0 [pid 5493] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5493] chdir("./bus") = 0 [pid 5493] ioctl(4, LOOP_CLR_FD [pid 5479] <... futex resumed>) = 0 [pid 5480] <... open resumed>) = 5 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] <... chdir resumed>) = 0 [pid 5480] <... futex resumed>) = 0 [pid 5479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] <... ioctl resumed>) = 0 [pid 5493] close(4 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5480] <... openat resumed>) = 6 [pid 5479] <... futex resumed>) = 0 [pid 5486] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... write resumed>) = 1048576 [pid 5486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] <... futex resumed>) = 0 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] munmap(0x7f19b51e4000, 1048576 [pid 5486] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5485] <... futex resumed>) = 0 [pid 5480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 130.146447][ T5493] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/171/bus supports timestamps until 2038 (0x7fffffff) [ 130.164808][ T5494] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... munmap resumed>) = 0 [pid 5494] <... mount resumed>) = 0 [pid 5493] <... close resumed>) = 0 [pid 5486] <... open resumed>) = 4 [pid 5484] <... write resumed>) = 1048576 [pid 5480] <... futex resumed>) = 0 [pid 5479] <... futex resumed>) = 1 [pid 5500] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5494] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5484] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... openat resumed>) = 4 [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... openat resumed>) = 3 [pid 5494] chdir("./bus") = 0 [pid 5494] ioctl(4, LOOP_CLR_FD) = 0 [pid 5494] close(4) = 0 [pid 5500] ioctl(4, LOOP_SET_FD, 3 [pid 5486] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5486] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5486] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] <... futex resumed>) = 0 [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 1 [pid 5494] chdir("./file0" [pid 5480] <... write resumed>) = 262144 [pid 5493] <... futex resumed>) = 1 [pid 5484] <... futex resumed>) = 1 [pid 5483] <... futex resumed>) = 0 [pid 5482] <... futex resumed>) = 0 [pid 5500] <... ioctl resumed>) = 0 [pid 5494] <... chdir resumed>) = 0 [pid 5493] chdir("./file0" [pid 5486] <... open resumed>) = 5 [pid 5484] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5482] exit_group(0 [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] close(3 [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... chdir resumed>) = 0 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 5482] <... exit_group resumed>) = ? [pid 5500] <... close resumed>) = 0 [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5480] <... futex resumed>) = 1 [pid 5479] <... futex resumed>) = 0 [pid 5500] mkdir("./bus", 0777 [pid 5486] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5480] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5479] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... mkdir resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5485] <... futex resumed>) = 0 [pid 5484] <... futex resumed>) = ? [pid 5479] <... futex resumed>) = 0 [pid 5500] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5493] <... futex resumed>) = 1 [pid 5486] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5484] +++ exited with 0 +++ [pid 5483] <... futex resumed>) = 0 [pid 5482] +++ exited with 0 +++ [pid 5479] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 1 [pid 5493] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] <... futex resumed>) = 0 [pid 5486] <... openat resumed>) = 6 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5482, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5494] <... open resumed>) = 4 [pid 5493] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5490] <... futex resumed>) = 0 [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... open resumed>) = 4 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... futex resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... restart_syscall resumed>) = 0 [pid 5494] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] <... futex resumed>) = 0 [pid 5490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5485] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5493] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5486] <... write resumed>) = 262144 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] <... futex resumed>) = 0 [pid 5494] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5493] <... mount resumed>) = 0 [pid 5490] <... futex resumed>) = 0 [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5494] <... mount resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5486] <... futex resumed>) = 1 [pid 5485] <... futex resumed>) = 0 [pid 5483] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [ 130.186596][ T5494] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/169/bus supports timestamps until 2038 (0x7fffffff) [pid 5490] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5486] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5485] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5494] <... futex resumed>) = 0 [pid 5493] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... futex resumed>) = 0 [pid 5483] <... futex resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 5490] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] fstat(3, [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./170/binderfs" [pid 5494] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 308] <... unlink resumed>) = 0 [pid 308] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5494] <... open resumed>) = 5 [pid 5493] <... open resumed>) = 5 [pid 5485] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... mount resumed>) = 0 [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5494] <... futex resumed>) = 1 [pid 5493] <... futex resumed>) = 1 [pid 5494] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] <... futex resumed>) = 0 [pid 5483] <... futex resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] <... futex resumed>) = 1 [pid 5483] <... futex resumed>) = 0 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5494] <... futex resumed>) = 0 [pid 5493] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5500] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5494] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5493] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5500] <... openat resumed>) = 3 [pid 5500] chdir("./bus" [pid 5494] <... openat resumed>) = 6 [pid 5493] <... openat resumed>) = 6 [pid 5486] <... write resumed>) = 1048576 [pid 5480] <... write resumed>) = 1048576 [ 130.233865][ T5500] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 130.242883][ T5500] ext4 filesystem being mounted at /root/syzkaller.URAKkl/174/bus supports timestamps until 2038 (0x7fffffff) [ 130.265612][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5500] <... chdir resumed>) = 0 [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] ioctl(4, LOOP_CLR_FD [pid 5494] <... futex resumed>) = 1 [pid 5493] <... futex resumed>) = 1 [pid 5500] <... ioctl resumed>) = 0 [pid 5494] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5500] close(4) = 0 [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5486] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5485] <... futex resumed>) = 0 [pid 5485] exit_group(0) = ? [pid 5486] <... futex resumed>) = ? [pid 5480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5479] exit_group(0) = ? [pid 5480] <... futex resumed>) = ? [pid 5480] +++ exited with 0 +++ [pid 5479] +++ exited with 0 +++ [pid 5486] +++ exited with 0 +++ [pid 5485] +++ exited with 0 +++ [pid 5483] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5493] <... futex resumed>) = 0 [pid 5483] <... futex resumed>) = 1 [pid 5493] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] <... write resumed>) = 262144 [pid 5490] <... futex resumed>) = 0 [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... futex resumed>) = 0 [pid 5494] <... futex resumed>) = 0 [pid 5490] <... futex resumed>) = 1 [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5479, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5500] <... futex resumed>) = 0 [pid 5494] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5489] <... futex resumed>) = 1 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5485, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5500] chdir("./file0") = 0 [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5483] <... futex resumed>) = 0 [pid 5483] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5483] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] <... futex resumed>) = 1 [pid 5493] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./167", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... futex resumed>) = 0 [pid 5489] <... futex resumed>) = 1 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5500] <... open resumed>) = 4 [pid 310] <... openat resumed>) = 3 [pid 309] openat(AT_FDCWD, "./167", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(3, [pid 309] <... openat resumed>) = 3 [pid 5500] <... futex resumed>) = 1 [pid 5494] <... write resumed>) = 262144 [pid 5489] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] fstat(3, [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5490] <... futex resumed>) = 0 [pid 5489] <... futex resumed>) = 0 [pid 5500] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5494] <... futex resumed>) = 1 [pid 5490] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] getdents64(3, [pid 5500] <... mount resumed>) = 0 [pid 5494] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5490] <... futex resumed>) = 0 [pid 310] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5490] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5500] <... futex resumed>) = 1 [pid 5489] <... futex resumed>) = 0 [pid 310] lstat("./172/binderfs", [pid 309] umount2("./167/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5489] <... futex resumed>) = 0 [pid 310] unlink("./172/binderfs" [pid 309] lstat("./167/binderfs", [pid 5500] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... open resumed>) = 5 [pid 310] <... unlink resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] unlink("./167/binderfs" [pid 5500] <... futex resumed>) = 1 [pid 5489] <... futex resumed>) = 0 [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... unlink resumed>) = 0 [pid 5500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5500] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5489] <... futex resumed>) = 1 [pid 5500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5489] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 130.281125][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 130.313307][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5493] <... write resumed>) = 1048576 [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5500] <... futex resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... futex resumed>) = 1 [pid 5500] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5493] <... futex resumed>) = 1 [pid 5483] <... futex resumed>) = 0 [pid 5493] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5483] exit_group(0 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5493] <... futex resumed>) = ? [pid 5483] <... exit_group resumed>) = ? [pid 5493] +++ exited with 0 +++ [pid 5483] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5483, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./171/binderfs", [pid 5490] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./171/binderfs") = 0 [pid 307] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] <... write resumed>) = 262144 [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] <... futex resumed>) = 0 [pid 5489] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5489] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5500] <... futex resumed>) = 1 [ 130.334866][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 130.360637][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5500] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5494] <... write resumed>) = 1048576 [pid 5494] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5490] exit_group(0) = ? [pid 5494] +++ exited with 0 +++ [pid 5490] +++ exited with 0 +++ [pid 5489] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5490, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./169/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./169/binderfs") = 0 [pid 5500] <... write resumed>) = 1048576 [pid 305] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5489] exit_group(0) = ? [ 130.377682][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 130.377726][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 130.404209][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5500] <... futex resumed>) = ? [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./172/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./172/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./172") = 0 [pid 310] mkdir("./173", 0777) = 0 [ 130.447764][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 130.461600][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 5500] +++ exited with 0 +++ [pid 5489] +++ exited with 0 +++ [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = 0 [pid 308] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = 0 [pid 309] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5489, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] lstat("./167/bus", [pid 307] lstat("./171/bus", [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./167/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./167/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] close(3 [pid 309] <... openat resumed>) = 4 [pid 308] lstat("./170/bus", [pid 307] <... openat resumed>) = 4 [pid 306] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... close resumed>) = 0 [pid 309] fstat(4, [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] fstat(4, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] getdents64(4, [pid 307] getdents64(4, [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] getdents64(4, [pid 307] getdents64(4, [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... openat resumed>) = 3 [pid 309] close(4 [pid 307] close(4 [pid 309] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] fstat(3, [pid 309] rmdir("./167/bus" [pid 307] rmdir("./171/bus" [pid 309] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 307] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] getdents64(3, [pid 309] close(3 [pid 307] close(3 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] rmdir("./167" [pid 307] rmdir("./171" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] lstat("./174/binderfs", [pid 309] mkdir("./168", 0777 [pid 307] mkdir("./172", 0777 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 306] unlink("./174/binderfs" [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... unlink resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 306] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 307] close(3 [pid 309] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5510 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5511 ./strace-static-x86_64: Process 5509 attached [pid 5509] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5509] chdir("./173") = 0 [pid 5509] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5509] setpgid(0, 0) = 0 [pid 5509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5509] write(3, "1000", 4) = 4 [pid 5509] close(3) = 0 [pid 5509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5509] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5509] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5512], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5512 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5512 attached [pid 5512] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5512] memfd_create("syzkaller", 0) = 3 [pid 5512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5509 [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./170/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./170") = 0 [pid 308] mkdir("./171", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5513 [pid 5512] <... write resumed>) = 1048576 [pid 5512] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5512] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5512] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5513 attached [pid 5513] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5513] chdir("./171") = 0 [pid 5513] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5513] setpgid(0, 0) = 0 [pid 5513] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5513] write(3, "1000", 4) = 4 [pid 5513] close(3) = 0 [pid 5513] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5513] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5513] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5513] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5515], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5515 [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5512] <... ioctl resumed>) = 0 [pid 5512] close(3) = 0 [pid 5512] mkdir("./bus", 0777) = 0 [pid 5512] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 5515 attached [pid 5515] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5515] memfd_create("syzkaller", 0) = 3 [pid 5515] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./169/bus", ./strace-static-x86_64: Process 5510 attached ./strace-static-x86_64: Process 5511 attached [pid 5510] set_robust_list(0x55555748e5e0, 24 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5511] set_robust_list(0x55555748e5e0, 24 [pid 5510] <... set_robust_list resumed>) = 0 [pid 305] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5511] <... set_robust_list resumed>) = 0 [pid 5510] chdir("./168" [pid 305] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5511] chdir("./172") = 0 [pid 305] <... openat resumed>) = 4 [pid 5510] <... chdir resumed>) = 0 [pid 305] fstat(4, [pid 5511] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5510] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5511] <... prctl resumed>) = 0 [pid 5510] <... prctl resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, [pid 5511] setpgid(0, 0 [pid 5510] setpgid(0, 0 [pid 5515] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5511] <... setpgid resumed>) = 0 [pid 5510] <... setpgid resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5511] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5510] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [ 130.709825][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 130.747465][ T5512] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 305] getdents64(4, [pid 5515] <... write resumed>) = 1048576 [pid 5511] <... openat resumed>) = 3 [pid 5510] <... openat resumed>) = 3 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5512] <... mount resumed>) = 0 [pid 5512] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5512] chdir("./bus") = 0 [pid 5512] ioctl(4, LOOP_CLR_FD) = 0 [pid 5512] close(4 [pid 5511] write(3, "1000", 4 [pid 5510] write(3, "1000", 4 [pid 305] close(4 [pid 5512] <... close resumed>) = 0 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] <... write resumed>) = 4 [pid 5511] <... write resumed>) = 4 [pid 305] <... close resumed>) = 0 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] munmap(0x7f19b51e4000, 1048576 [pid 5511] close(3 [pid 5510] close(3 [pid 305] rmdir("./169/bus" [pid 5512] <... futex resumed>) = 1 [pid 5512] chdir("./file0" [pid 5515] <... munmap resumed>) = 0 [pid 5511] <... close resumed>) = 0 [pid 5510] <... close resumed>) = 0 [pid 5512] <... chdir resumed>) = 0 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 5510] symlink("/dev/binderfs", "./binderfs" [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] symlink("/dev/binderfs", "./binderfs" [pid 5515] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] getdents64(3, [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5510] <... symlink resumed>) = 0 [pid 5512] <... futex resumed>) = 1 [pid 5511] <... symlink resumed>) = 0 [pid 5512] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5515] <... openat resumed>) = 4 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5515] ioctl(4, LOOP_SET_FD, 3 [pid 5511] <... futex resumed>) = 0 [pid 5510] <... futex resumed>) = 0 [pid 305] close(3 [pid 5511] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5510] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5511] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5510] <... mmap resumed>) = 0x7f19bd5e4000 [pid 305] <... close resumed>) = 0 [pid 5511] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5510] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5511] <... mprotect resumed>) = 0 [pid 305] rmdir("./169" [pid 5510] <... mprotect resumed>) = 0 [pid 5511] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5512] <... open resumed>) = 4 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... rmdir resumed>) = 0 [pid 5510] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5511] <... clone resumed>, parent_tid=[5519], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5519 [pid 305] mkdir("./170", 0777 [pid 5512] <... futex resumed>) = 1 [pid 5512] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] <... clone resumed>, parent_tid=[5520], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5520 [pid 5512] <... mount resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 5511] <... futex resumed>) = 0 [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5510] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5512] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c./strace-static-x86_64: Process 5519 attached [pid 5519] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5519] memfd_create("syzkaller", 0) = 3 [pid 5519] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5520 attached [pid 5515] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5512] <... open resumed>) = 5 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5512] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5512] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5520] set_robust_list(0x7f19bd6049e0, 24 [pid 5515] close(3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5520] <... set_robust_list resumed>) = 0 [pid 5515] <... close resumed>) = 0 [pid 5515] mkdir("./bus", 0777 [pid 5520] memfd_create("syzkaller", 0 [pid 5515] <... mkdir resumed>) = 0 [pid 5515] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5520] <... memfd_create resumed>) = 3 [pid 5520] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5512] <... write resumed>) = 262144 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5509] <... futex resumed>) = 0 [pid 5509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5512] <... futex resumed>) = 1 [pid 5512] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5519] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5520] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5521 [ 130.757395][ T5512] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/173/bus supports timestamps until 2038 (0x7fffffff) [ 130.767714][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./174/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 5521 attached [pid 5521] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5521] chdir("./170" [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5521] <... chdir resumed>) = 0 [pid 5521] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] getdents64(4, [pid 5521] <... prctl resumed>) = 0 [pid 5521] setpgid(0, 0) = 0 [pid 5521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5521] <... openat resumed>) = 3 [pid 5521] write(3, "1000", 4) = 4 [pid 5521] close(3) = 0 [pid 5521] symlink("/dev/binderfs", "./binderfs" [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./174/bus") = 0 [pid 306] getdents64(3, [pid 5521] <... symlink resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] close(3 [pid 5521] <... futex resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] rmdir("./174" [pid 5521] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5521] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 306] <... rmdir resumed>) = 0 [pid 306] mkdir("./175", 0777 [pid 5521] <... mprotect resumed>) = 0 [pid 5521] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5524], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5524 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5524 attached [pid 5524] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 5524] memfd_create("syzkaller", 0) = 3 [pid 5524] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5524] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 5519] <... write resumed>) = 1048576 [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5519] munmap(0x7f19b51e4000, 1048576 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5525 [pid 5519] <... munmap resumed>) = 0 [pid 5519] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5520] <... write resumed>) = 1048576 [pid 5519] <... openat resumed>) = 4 [pid 5520] munmap(0x7f19b51e4000, 1048576 [pid 5519] ioctl(4, LOOP_SET_FD, 3 [pid 5520] <... munmap resumed>) = 0 [pid 5520] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5525 attached [pid 5525] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5525] chdir("./175") = 0 [pid 5525] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5525] setpgid(0, 0) = 0 [pid 5525] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5524] <... write resumed>) = 1048576 [pid 5525] write(3, "1000", 4) = 4 [pid 5525] close(3) = 0 [pid 5525] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5524] munmap(0x7f19b51e4000, 1048576 [pid 5509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5524] <... munmap resumed>) = 0 [pid 5525] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5524] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5525] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5527], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5527 [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5527 attached [pid 5527] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5527] memfd_create("syzkaller", 0) = 3 [pid 5527] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5519] <... ioctl resumed>) = 0 [pid 5520] <... openat resumed>) = 4 [pid 5524] <... openat resumed>) = 4 [pid 5520] ioctl(4, LOOP_SET_FD, 3 [pid 5519] close(3 [pid 5515] <... mount resumed>) = 0 [pid 5524] ioctl(4, LOOP_SET_FD, 3 [pid 5519] <... close resumed>) = 0 [pid 5515] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5519] mkdir("./bus", 0777 [pid 5515] <... openat resumed>) = 3 [pid 5512] <... write resumed>) = 1048576 [pid 5520] <... ioctl resumed>) = 0 [pid 5519] <... mkdir resumed>) = 0 [pid 5512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5509] exit_group(0 [pid 5519] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5520] close(3 [pid 5509] <... exit_group resumed>) = ? [pid 5520] <... close resumed>) = 0 [pid 5515] chdir("./bus" [pid 5520] mkdir("./bus", 0777) = 0 [pid 5520] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5527] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5515] <... chdir resumed>) = 0 [pid 5524] <... ioctl resumed>) = 0 [pid 5512] +++ exited with 0 +++ [pid 5509] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5509, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 5515] ioctl(4, LOOP_CLR_FD) = 0 [pid 5515] close(4 [pid 310] <... restart_syscall resumed>) = 0 [pid 310] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./173/binderfs" [pid 5524] close(3 [pid 310] <... unlink resumed>) = 0 [pid 5524] <... close resumed>) = 0 [pid 5524] mkdir("./bus", 0777 [pid 310] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] <... mkdir resumed>) = 0 [ 130.835119][ T5515] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 130.856316][ T5515] ext4 filesystem being mounted at /root/syzkaller.69675s/171/bus supports timestamps until 2038 (0x7fffffff) [pid 5515] <... close resumed>) = 0 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5515] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5513] <... futex resumed>) = 0 [pid 5524] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 0 [pid 5515] chdir("./file0") = 0 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] <... futex resumed>) = 0 [pid 5515] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5513] <... futex resumed>) = 0 [pid 5515] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... open resumed>) = 4 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] <... futex resumed>) = 0 [pid 5515] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5513] <... futex resumed>) = 0 [pid 5515] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... mount resumed>) = 0 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] <... futex resumed>) = 0 [pid 5515] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... open resumed>) = 5 [pid 5513] <... futex resumed>) = 0 [pid 5527] <... write resumed>) = 1048576 [pid 5527] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5527] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5527] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5527] close(3) = 0 [pid 5527] mkdir("./bus", 0777) = 0 [pid 5527] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 0 [pid 5513] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5515] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5513] <... futex resumed>) = 0 [pid 5515] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [ 130.891489][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 130.916484][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... openat resumed>) = 6 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5513] <... futex resumed>) = 0 [pid 5515] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5515] <... write resumed>) = 262144 [pid 5513] <... futex resumed>) = 0 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5513] <... futex resumed>) = 0 [pid 5513] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5513] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5515] <... futex resumed>) = 1 [pid 5515] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5515] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5513] <... futex resumed>) = 0 [pid 5513] exit_group(0) = ? [pid 5515] <... futex resumed>) = ? [pid 5515] +++ exited with 0 +++ [pid 5513] +++ exited with 0 +++ [ 130.933600][ T5519] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 130.942594][ T5519] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/172/bus supports timestamps until 2038 (0x7fffffff) [ 130.957103][ T5520] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 130.957235][ T5524] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 130.972582][ T5527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5513, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5524] <... mount resumed>) = 0 [pid 5524] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5524] chdir("./bus") = 0 [pid 5524] ioctl(4, LOOP_CLR_FD) = 0 [pid 5524] close(4) = 0 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] chdir("./file0" [pid 308] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5524] <... chdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./171/binderfs" [pid 5524] <... futex resumed>) = 1 [pid 308] <... unlink resumed>) = 0 [pid 5524] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 308] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5524] <... open resumed>) = 4 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [pid 5524] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5521] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5524] <... futex resumed>) = 1 [ 130.984345][ T5524] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/170/bus supports timestamps until 2038 (0x7fffffff) [ 131.005890][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 131.022252][ T5520] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/168/bus supports timestamps until 2038 (0x7fffffff) [pid 5524] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5524] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5521] <... futex resumed>) = 0 [pid 5521] exit_group(0) = ? [pid 5524] <... futex resumed>) = ? [pid 5519] <... mount resumed>) = 0 [pid 5519] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5519] chdir("./bus") = 0 [pid 5519] ioctl(4, LOOP_CLR_FD [pid 5527] <... mount resumed>) = 0 [pid 5520] <... mount resumed>) = 0 [pid 5520] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5520] chdir("./bus") = 0 [pid 5520] ioctl(4, LOOP_CLR_FD [pid 5527] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5527] chdir("./bus") = 0 [pid 5527] ioctl(4, LOOP_CLR_FD [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./173/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 5524] +++ exited with 0 +++ [pid 5521] +++ exited with 0 +++ [pid 5520] <... ioctl resumed>) = 0 [pid 5519] <... ioctl resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5520] close(4 [pid 5519] close(4 [pid 5520] <... close resumed>) = 0 [pid 310] rmdir("./173/bus" [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5510] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5510] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 5520] chdir("./file0" [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... chdir resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 5520] <... futex resumed>) = 1 [pid 5510] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./173" [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5510] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5520] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] mkdir("./174", 0777 [pid 5520] <... open resumed>) = 4 [pid 310] <... mkdir resumed>) = 0 [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5510] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5510] <... futex resumed>) = 0 [pid 5520] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... mount resumed>) = 0 [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5510] <... futex resumed>) = 0 [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5510] <... futex resumed>) = 0 [pid 5520] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5521, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 131.037666][ T5527] ext4 filesystem being mounted at /root/syzkaller.URAKkl/175/bus supports timestamps until 2038 (0x7fffffff) [ 131.047842][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 305] lstat("./170/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./170/binderfs") = 0 [pid 305] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] <... ioctl resumed>) = 0 [pid 5520] <... open resumed>) = 5 [pid 5519] <... close resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 5527] close(4 [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 308] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] <... close resumed>) = 0 [pid 5520] <... futex resumed>) = 1 [pid 5519] <... futex resumed>) = 1 [pid 5511] <... futex resumed>) = 0 [pid 5510] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5519] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 308] lstat("./171/bus", [pid 5527] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5511] <... futex resumed>) = 0 [pid 5510] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5527] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [pid 5520] <... openat resumed>) = 6 [pid 5519] chdir("./file0" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5527] chdir("./file0" [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5539 [pid 308] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5527] <... chdir resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... futex resumed>) = 1 [pid 5519] <... chdir resumed>) = 0 [pid 5510] <... futex resumed>) = 0 [pid 308] <... openat resumed>) = 4 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(4, [pid 5527] <... futex resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5519] <... futex resumed>) = 1 [pid 5511] <... futex resumed>) = 0 [pid 5510] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5527] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5525] <... futex resumed>) = 0 [pid 5520] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5519] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(4, [pid 5527] <... open resumed>) = 4 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5520] <... write resumed>) = 262144 [pid 5511] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(4, [pid 5527] <... futex resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5520] <... futex resumed>) = 1 [pid 5519] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5510] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5527] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5525] <... futex resumed>) = 0 [pid 5520] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5510] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(4 [pid 5527] <... mount resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... open resumed>) = 4 [pid 5510] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] rmdir("./171/bus" [pid 5527] <... futex resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 1 [pid 5511] <... futex resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 5527] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5525] <... futex resumed>) = 0 [pid 5519] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(3, [pid 5527] <... open resumed>) = 5 [pid 5511] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... mount resumed>) = 0 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] close(3 [pid 5527] <... futex resumed>) = 0 [pid 5525] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... close resumed>) = 0 [pid 5527] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] rmdir("./171" [pid 5527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [pid 5519] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5511] <... futex resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 5527] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... open resumed>) = 5 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] mkdir("./172", 0777 [pid 5527] <... openat resumed>) = 6 [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... mkdir resumed>) = 0 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] <... futex resumed>) = 0 [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5527] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5519] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5511] <... futex resumed>) = 0 [pid 5527] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5527] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5525] <... futex resumed>) = 0 [pid 5519] <... openat resumed>) = 6 [pid 5527] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5539 attached [pid 5539] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5539] chdir("./174") = 0 [pid 5539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5539] setpgid(0, 0) = 0 [pid 5539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5539] write(3, "1000", 4) = 4 [pid 5539] close(3) = 0 [pid 5527] <... write resumed>) = 262144 [pid 5519] <... futex resumed>) = 1 [pid 5511] <... futex resumed>) = 0 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 131.096802][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 131.110360][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5539] symlink("/dev/binderfs", "./binderfs" [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... futex resumed>) = 1 [pid 5525] <... futex resumed>) = 0 [pid 5519] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5511] <... futex resumed>) = 0 [pid 5527] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5525] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5525] <... futex resumed>) = 0 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5539] <... symlink resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5539] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5539] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5540], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5540 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5519] <... write resumed>) = 262144 [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5511] <... futex resumed>) = 0 [pid 5511] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5519] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5511] <... futex resumed>) = 0 [pid 5511] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5540 attached [pid 5540] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5540] memfd_create("syzkaller", 0 [pid 305] <... umount2 resumed>) = 0 [pid 5540] <... memfd_create resumed>) = 3 [pid 5540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] <... openat resumed>) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5541 [pid 5520] <... write resumed>) = 1048576 [pid 5520] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5510] <... futex resumed>) = 0 [pid 5510] exit_group(0) = ? [pid 5520] <... futex resumed>) = ? [pid 5520] +++ exited with 0 +++ [pid 5510] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5510, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 305] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] umount2("./168", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./168", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] lstat("./170/bus", [pid 309] <... openat resumed>) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./168/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./168/binderfs", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./168/binderfs") = 0 [pid 305] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./170/bus"./strace-static-x86_64: Process 5541 attached [pid 5541] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5541] chdir("./172") = 0 [pid 5541] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, [pid 5541] <... prctl resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5541] setpgid(0, 0 [pid 305] close(3 [pid 5541] <... setpgid resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] rmdir("./170" [pid 5541] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] <... rmdir resumed>) = 0 [pid 5541] write(3, "1000", 4 [pid 305] mkdir("./171", 0777 [pid 5541] <... write resumed>) = 4 [pid 5541] close(3) = 0 [pid 5541] symlink("/dev/binderfs", "./binderfs") = 0 [pid 305] <... mkdir resumed>) = 0 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5541] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5541] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 305] <... openat resumed>) = 3 [pid 5541] <... mprotect resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5541] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 5541] <... clone resumed>, parent_tid=[5542], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5542 [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... close resumed>) = 0 [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5543 [pid 5525] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5525] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5511] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 5543 attached [pid 5543] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5543] chdir("./171") = 0 [pid 5543] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5543] setpgid(0, 0) = 0 [pid 5543] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5543] write(3, "1000", 4) = 4 [pid 5543] close(3) = 0 [pid 5543] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5542 attached [pid 5543] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5542] set_robust_list(0x7f19bd6049e0, 24 [pid 5543] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5542] <... set_robust_list resumed>) = 0 [pid 5543] <... mprotect resumed>) = 0 [pid 5542] memfd_create("syzkaller", 0 [pid 5527] <... write resumed>) = 1048576 [pid 5543] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5542] <... memfd_create resumed>) = 3 [pid 5542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5540] <... write resumed>) = 1048576 [pid 5527] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] <... clone resumed>, parent_tid=[5544], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5544 [pid 5542] <... mmap resumed>) = 0x7f19b51e4000 [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5527] <... futex resumed>) = 0 [pid 5525] exit_group(0 [pid 5543] <... futex resumed>) = 0 [pid 5540] munmap(0x7f19b51e4000, 1048576 [pid 5525] <... exit_group resumed>) = ? [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5540] <... munmap resumed>) = 0 [pid 5540] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5540] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5544 attached [pid 5519] <... write resumed>) = 1048576 [pid 5544] set_robust_list(0x7f19bd6049e0, 24 [pid 5540] <... ioctl resumed>) = 0 [pid 5519] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] close(3) = 0 [pid 5540] mkdir("./bus", 0777) = 0 [pid 5540] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5511] exit_group(0) = ? [pid 5527] +++ exited with 0 +++ [pid 5525] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5525, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 306] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 5519] <... futex resumed>) = ? [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 131.198897][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 131.235251][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] unlink("./175/binderfs") = 0 [pid 306] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5542] <... write resumed>) = 1048576 [pid 5542] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5542] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5542] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5542] close(3) = 0 [pid 5542] mkdir("./bus", 0777) = 0 [pid 5542] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5544] <... set_robust_list resumed>) = 0 [pid 5519] +++ exited with 0 +++ [pid 5511] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5511, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 307] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./172/binderfs", [pid 5544] memfd_create("syzkaller", 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5544] <... memfd_create resumed>) = 3 [pid 307] unlink("./172/binderfs" [pid 5544] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] <... unlink resumed>) = 0 [pid 5544] <... mmap resumed>) = 0x7f19b51e4000 [ 131.273344][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 131.294178][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 131.307926][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5544] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5544] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5544] ioctl(4, LOOP_SET_FD, 3 [pid 5540] <... mount resumed>) = 0 [pid 5540] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5540] chdir("./bus") = 0 [pid 5540] ioctl(4, LOOP_CLR_FD [pid 5544] <... ioctl resumed>) = 0 [pid 5544] close(3) = 0 [pid 5544] mkdir("./bus", 0777) = 0 [ 131.307971][ T5540] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 131.330453][ T5540] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/174/bus supports timestamps until 2038 (0x7fffffff) [ 131.345035][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 131.361219][ T5542] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 5544] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5542] <... mount resumed>) = 0 [pid 5542] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5542] chdir("./bus") = 0 [pid 5542] ioctl(4, LOOP_CLR_FD [pid 5544] <... mount resumed>) = 0 [pid 5544] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5544] chdir("./bus") = 0 [pid 5544] ioctl(4, LOOP_CLR_FD [pid 5540] <... ioctl resumed>) = 0 [ 131.367125][ T5544] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 131.370235][ T5542] ext4 filesystem being mounted at /root/syzkaller.69675s/172/bus supports timestamps until 2038 (0x7fffffff) [ 131.385775][ T5544] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/171/bus supports timestamps until 2038 (0x7fffffff) [pid 5540] close(4 [pid 5542] <... ioctl resumed>) = 0 [pid 5542] close(4 [pid 309] <... umount2 resumed>) = 0 [pid 5544] <... ioctl resumed>) = 0 [pid 5542] <... close resumed>) = 0 [pid 5540] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] close(4 [pid 5542] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... close resumed>) = 0 [pid 5542] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./168/bus", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] chdir("./file0" [pid 5541] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] lstat("./172/bus", [pid 306] lstat("./175/bus", [pid 5544] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5542] <... chdir resumed>) = 0 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] chdir("./file0" [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./168/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] chdir("./file0" [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5542] <... futex resumed>) = 0 [pid 5542] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5543] <... futex resumed>) = 0 [pid 5541] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] <... chdir resumed>) = 0 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5544] <... chdir resumed>) = 0 [pid 5542] <... futex resumed>) = 0 [pid 5541] <... futex resumed>) = 1 [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./168/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5544] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 5543] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] fstat(4, [pid 307] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5542] <... open resumed>) = 4 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 307] fstat(4, [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 5542] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 309] getdents64(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5540] <... open resumed>) = 4 [pid 5541] <... futex resumed>) = 0 [pid 309] close(4 [pid 5542] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 307] getdents64(4, [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] getdents64(4, [pid 5544] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 5542] <... mount resumed>) = 0 [pid 309] rmdir("./168/bus" [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 306] close(4 [pid 5539] <... futex resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] <... futex resumed>) = 1 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5541] <... futex resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 309] getdents64(3, [pid 5540] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5542] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 307] close(4 [pid 306] rmdir("./175/bus" [pid 5541] <... futex resumed>) = 0 [pid 5540] <... mount resumed>) = 0 [pid 309] close(3 [pid 5542] <... open resumed>) = 5 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] getdents64(3, [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./168" [pid 307] rmdir("./172/bus" [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] close(3 [pid 309] <... rmdir resumed>) = 0 [pid 307] getdents64(3, [pid 5542] <... futex resumed>) = 1 [pid 309] mkdir("./169", 0777 [pid 306] <... close resumed>) = 0 [pid 5541] <... futex resumed>) = 0 [pid 5542] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] rmdir("./175" [pid 5541] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... mkdir resumed>) = 0 [pid 307] close(3 [pid 5539] <... futex resumed>) = 0 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 5542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5540] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 307] <... close resumed>) = 0 [pid 306] mkdir("./176", 0777 [pid 5544] <... open resumed>) = 4 [pid 5542] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5540] <... open resumed>) = 5 [pid 309] <... openat resumed>) = 3 [pid 307] rmdir("./172" [pid 306] <... mkdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5542] <... openat resumed>) = 6 [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] mkdir("./173", 0777 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] <... mkdir resumed>) = 0 [pid 5544] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = 1 [pid 5541] <... futex resumed>) = 0 [pid 5540] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 3 [pid 5544] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5539] <... futex resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] ioctl(3, LOOP_CLR_FD [pid 5544] <... mount resumed>) = 0 [pid 5543] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5541] <... futex resumed>) = 0 [pid 5540] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(3 [pid 307] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5542] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... openat resumed>) = 6 [pid 5543] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] <... write resumed>) = 262144 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5544] <... futex resumed>) = 0 [pid 5543] <... futex resumed>) = 0 [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 5544] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5540] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 306] <... close resumed>) = 0 [pid 5544] <... open resumed>) = 5 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 ./strace-static-x86_64: Process 5554 attached [pid 5554] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5554] chdir("./169") = 0 [pid 5554] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5554] setpgid(0, 0) = 0 [pid 5554] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5554] write(3, "1000", 4) = 4 [pid 5554] close(3) = 0 [pid 5554] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5554] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5554] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5554] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5555], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5555 [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5555 attached [pid 5555] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5555] memfd_create("syzkaller", 0) = 3 [pid 5555] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5554 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5556 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5557 [pid 5544] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] <... openat resumed>) = 6 [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5543] <... futex resumed>) = 0 [pid 5544] <... futex resumed>) = 1 [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5544] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5543] <... futex resumed>) = 0 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5556 attached [pid 5556] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5556] chdir("./176") = 0 [pid 5556] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5556] setpgid(0, 0) = 0 [pid 5556] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] <... futex resumed>) = 0 [pid 5542] <... futex resumed>) = 1 [pid 5541] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5542] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5541] <... futex resumed>) = 0 [pid 5541] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5557 attached [pid 5556] <... openat resumed>) = 3 [pid 5557] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5557] chdir("./173" [pid 5556] write(3, "1000", 4) = 4 [pid 5557] <... chdir resumed>) = 0 [pid 5555] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5544] <... write resumed>) = 262144 [pid 5540] <... write resumed>) = 262144 [pid 5556] close(3) = 0 [pid 5557] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] symlink("/dev/binderfs", "./binderfs" [pid 5557] <... prctl resumed>) = 0 [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] <... futex resumed>) = 1 [pid 5539] <... futex resumed>) = 0 [pid 5539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5544] <... futex resumed>) = 1 [pid 5543] <... futex resumed>) = 0 [pid 5540] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5543] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5543] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5557] setpgid(0, 0) = 0 [pid 5557] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5556] <... symlink resumed>) = 0 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5557] <... openat resumed>) = 3 [pid 5556] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5556] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5556] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5544] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5557] write(3, "1000", 4) = 4 [pid 5557] close(3) = 0 [pid 5557] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5556] <... clone resumed>, parent_tid=[5558], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5558 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5557] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5557] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5559], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5559 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5558 attached [pid 5558] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5558] memfd_create("syzkaller", 0) = 3 [pid 5558] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5555] <... write resumed>) = 1048576 [pid 5555] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5555] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5555] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5555] close(3) = 0 [pid 5555] mkdir("./bus", 0777./strace-static-x86_64: Process 5559 attached [pid 5559] set_robust_list(0x7f19bd6049e0, 24 [pid 5555] <... mkdir resumed>) = 0 [pid 5555] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5559] <... set_robust_list resumed>) = 0 [pid 5559] memfd_create("syzkaller", 0) = 3 [pid 5559] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5558] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5558] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5558] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5558] ioctl(4, LOOP_SET_FD, 3 [pid 5543] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5541] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5539] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5558] <... ioctl resumed>) = 0 [pid 5558] close(3) = 0 [pid 5558] mkdir("./bus", 0777) = 0 [pid 5558] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5544] <... write resumed>) = 1048576 [pid 5544] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5544] <... futex resumed>) = 0 [pid 5543] exit_group(0) = ? [pid 5542] <... write resumed>) = 1048576 [pid 5542] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5541] exit_group(0) = ? [pid 5542] <... futex resumed>) = ? [pid 5559] <... write resumed>) = 1048576 [pid 5544] +++ exited with 0 +++ [pid 5543] +++ exited with 0 +++ [pid 5559] munmap(0x7f19b51e4000, 1048576 [pid 5555] <... mount resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5543, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5559] <... munmap resumed>) = 0 [pid 5555] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5559] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5559] ioctl(4, LOOP_SET_FD, 3 [pid 5555] <... openat resumed>) = 3 [pid 5555] chdir("./bus" [pid 305] <... restart_syscall resumed>) = 0 [pid 5555] <... chdir resumed>) = 0 [pid 5555] ioctl(4, LOOP_CLR_FD [pid 305] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5559] <... ioctl resumed>) = 0 [pid 5555] <... ioctl resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5559] close(3 [pid 5555] close(4 [pid 305] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5559] <... close resumed>) = 0 [pid 5555] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5559] mkdir("./bus", 0777 [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5559] <... mkdir resumed>) = 0 [pid 5555] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 305] getdents64(3, [pid 5559] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5555] chdir("./file0" [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5554] <... futex resumed>) = 0 [pid 305] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./171/binderfs", [pid 5555] <... chdir resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] unlink("./171/binderfs" [pid 5555] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 5555] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 131.590229][ T5555] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 131.609040][ T5555] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/169/bus supports timestamps until 2038 (0x7fffffff) [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5554] <... futex resumed>) = 0 [pid 5542] +++ exited with 0 +++ [pid 5541] +++ exited with 0 +++ [pid 5540] <... write resumed>) = 1048576 [pid 5555] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... open resumed>) = 4 [pid 5540] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5541, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5540] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 5555] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5539] exit_group(0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5539] <... exit_group resumed>) = ? [pid 5558] <... mount resumed>) = 0 [pid 5558] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5558] chdir("./bus") = 0 [pid 5558] ioctl(4, LOOP_CLR_FD) = 0 [pid 5558] close(4) = 0 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... futex resumed>) = 0 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... futex resumed>) = 1 [pid 5558] chdir("./file0") = 0 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... futex resumed>) = 0 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... futex resumed>) = 1 [ 131.642612][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 131.661566][ T5558] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 131.671758][ T5558] ext4 filesystem being mounted at /root/syzkaller.URAKkl/176/bus supports timestamps until 2038 (0x7fffffff) [pid 5558] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5555] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5554] <... futex resumed>) = 0 [pid 5540] <... futex resumed>) = ? [pid 308] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5555] <... mount resumed>) = 0 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5540] +++ exited with 0 +++ [pid 5539] +++ exited with 0 +++ [pid 308] <... openat resumed>) = 3 [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] fstat(3, [pid 5555] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5539, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5555] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5554] <... futex resumed>) = 0 [pid 310] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(3, [pid 5555] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5555] <... open resumed>) = 5 [pid 310] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 308] lstat("./172/binderfs", [pid 5555] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5555] <... openat resumed>) = 6 [pid 5554] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 308] unlink("./172/binderfs" [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... unlink resumed>) = 0 [pid 5555] <... futex resumed>) = 0 [pid 5554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5555] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5555] <... write resumed>) = 262144 [pid 5554] <... futex resumed>) = 0 [pid 310] lstat("./174/binderfs", [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./174/binderfs") = 0 [ 131.684474][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 131.698549][ T5559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 131.715100][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 131.730057][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] <... open resumed>) = 4 [pid 5556] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5555] <... futex resumed>) = 1 [pid 5554] <... futex resumed>) = 0 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] <... futex resumed>) = 0 [pid 5555] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5554] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] <... futex resumed>) = 0 [pid 5556] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5558] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... mmap resumed>) = 0x7f19b52c3000 [pid 5556] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5556] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5569], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5569 [pid 5556] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5556] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5569 attached [pid 5554] <... futex resumed>) = 0 [pid 5569] set_robust_list(0x7f19b52e39e0, 24 [pid 5554] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5569] <... set_robust_list resumed>) = 0 [pid 5569] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5559] <... mount resumed>) = 0 [pid 5559] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5559] chdir("./bus") = 0 [pid 5559] ioctl(4, LOOP_CLR_FD [pid 5569] <... mount resumed>) = 0 [pid 5569] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5569] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] <... futex resumed>) = 0 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] <... futex resumed>) = 0 [pid 5556] <... futex resumed>) = 1 [pid 5558] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5555] <... write resumed>) = 1048576 [pid 5555] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5554] <... futex resumed>) = 0 [pid 5555] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5554] exit_group(0 [pid 5555] <... futex resumed>) = ? [pid 5554] <... exit_group resumed>) = ? [pid 5555] +++ exited with 0 +++ [pid 5559] <... ioctl resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 5559] close(4 [pid 305] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./171/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./171/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./171") = 0 [pid 305] mkdir("./172", 0777) = 0 [ 131.730552][ T5559] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/173/bus supports timestamps until 2038 (0x7fffffff) [ 131.758996][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 131.773300][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5559] <... close resumed>) = 0 [pid 5558] <... open resumed>) = 5 [pid 5556] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5554] +++ exited with 0 +++ [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5554, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5559] <... futex resumed>) = 1 [pid 5558] <... futex resumed>) = 0 [pid 5556] <... futex resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5558] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5558] <... openat resumed>) = 6 [pid 309] umount2("./169", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5558] <... futex resumed>) = 1 [pid 5556] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./169", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5558] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 5558] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5556] <... futex resumed>) = 0 [pid 309] fstat(3, [pid 5558] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5558] <... write resumed>) = 262144 [pid 5557] <... futex resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] <... futex resumed>) = 0 [pid 5557] <... futex resumed>) = 1 [pid 5559] chdir("./file0" [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... chdir resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5559] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 308] <... umount2 resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5559] <... open resumed>) = 4 [pid 5558] <... futex resumed>) = 1 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5558] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5556] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./169/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5556] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./172/bus", [pid 5556] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] lstat("./169/binderfs", [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] unlink("./169/binderfs" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... unlink resumed>) = 0 [pid 308] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./172/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./172") = 0 [pid 308] mkdir("./173", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 5559] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5559] <... mount resumed>) = 0 [pid 5557] <... futex resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5559] <... futex resumed>) = 0 [pid 5557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5559] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = 0 [pid 5559] <... open resumed>) = 5 [pid 308] <... openat resumed>) = 3 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] close(3 [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... close resumed>) = 0 [pid 5559] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5559] <... openat resumed>) = 6 [pid 5557] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5570 [pid 5559] <... futex resumed>) = 0 [pid 5558] <... write resumed>) = 1048576 [pid 5557] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5559] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5558] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5571 [pid 5558] <... futex resumed>) = 1 [pid 5556] <... futex resumed>) = 0 [pid 5558] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 5571 attached [pid 5559] <... write resumed>) = 262144 [pid 5557] <... futex resumed>) = 0 [pid 5556] exit_group(0 [pid 310] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5569] <... futex resumed>) = ? [pid 5558] <... futex resumed>) = ? [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5556] <... exit_group resumed>) = ? [pid 5569] +++ exited with 0 +++ [pid 5558] +++ exited with 0 +++ [pid 5556] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5556, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5571] set_robust_list(0x55555748e5e0, 24 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5570 attached [pid 5571] <... set_robust_list resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./174/bus", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5571] chdir("./173" [pid 5570] set_robust_list(0x55555748e5e0, 24 [pid 5559] <... futex resumed>) = 1 [pid 5557] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] lstat("./176/binderfs", [pid 5571] <... chdir resumed>) = 0 [pid 5570] <... set_robust_list resumed>) = 0 [pid 5559] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5557] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5571] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5557] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] unlink("./176/binderfs" [pid 5571] <... prctl resumed>) = 0 [pid 5557] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5571] setpgid(0, 0 [pid 310] <... openat resumed>) = 4 [pid 5571] <... setpgid resumed>) = 0 [ 131.858240][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 131.876998][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5570] chdir("./172") = 0 [pid 5570] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5570] setpgid(0, 0) = 0 [pid 5570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5570] write(3, "1000", 4) = 4 [pid 5570] close(3) = 0 [pid 5570] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5570] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5570] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5572], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5572 [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5572 attached [pid 5572] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5572] memfd_create("syzkaller", 0) = 3 [pid 5572] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5571] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 5571] <... openat resumed>) = 3 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5571] write(3, "1000", 4 [pid 310] close(4 [pid 5571] <... write resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 5571] close(3 [pid 310] rmdir("./174/bus") = 0 [pid 5571] <... close resumed>) = 0 [pid 310] getdents64(3, [pid 5571] symlink("/dev/binderfs", "./binderfs" [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3 [pid 5571] <... symlink resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./174") = 0 [pid 5571] <... futex resumed>) = 0 [pid 310] mkdir("./175", 0777 [pid 5571] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] <... mkdir resumed>) = 0 [pid 5571] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5571] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5571] <... mprotect resumed>) = 0 [pid 5571] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5573], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5573 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5572] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5573 attached [pid 5573] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5573] memfd_create("syzkaller", 0) = 3 [pid 5573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5572] <... write resumed>) = 1048576 [pid 5572] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5572] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5573] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5572] <... openat resumed>) = 4 [pid 5557] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 5572] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5575 [pid 309] lstat("./169/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./169/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5559] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 5575 attached [pid 5559] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] set_robust_list(0x55555748e5e0, 24 [pid 5559] <... futex resumed>) = 0 [pid 5559] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... set_robust_list resumed>) = 0 [pid 309] openat(AT_FDCWD, "./169/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5557] exit_group(0 [pid 5559] <... futex resumed>) = ? [pid 5557] <... exit_group resumed>) = ? [pid 5575] chdir("./175" [pid 5573] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5572] <... ioctl resumed>) = 0 [pid 5559] +++ exited with 0 +++ [pid 309] fstat(4, [pid 5575] <... chdir resumed>) = 0 [pid 5575] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5575] <... prctl resumed>) = 0 [pid 5575] setpgid(0, 0 [pid 309] getdents64(4, [pid 5575] <... setpgid resumed>) = 0 [pid 5575] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5572] close(3 [pid 5557] +++ exited with 0 +++ [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5575] <... openat resumed>) = 3 [pid 5573] <... openat resumed>) = 4 [pid 5572] <... close resumed>) = 0 [pid 5575] write(3, "1000", 4 [pid 5573] ioctl(4, LOOP_SET_FD, 3 [pid 5572] mkdir("./bus", 0777 [pid 309] getdents64(4, [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5557, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5575] <... write resumed>) = 4 [pid 5572] <... mkdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 5575] close(3 [pid 5572] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 309] close(4 [pid 5575] <... close resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 5575] symlink("/dev/binderfs", "./binderfs" [pid 309] <... close resumed>) = 0 [pid 5575] <... symlink resumed>) = 0 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./169/bus" [pid 307] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] <... futex resumed>) = 0 [pid 5575] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5575] <... mmap resumed>) = 0x7f19bd5e4000 [pid 307] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5575] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] <... openat resumed>) = 3 [pid 5575] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] fstat(3, [pid 309] <... rmdir resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5575] <... clone resumed>, parent_tid=[5577], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5577 [pid 307] getdents64(3, [pid 309] getdents64(3, ./strace-static-x86_64: Process 5577 attached [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5575] <... futex resumed>) = 0 [pid 307] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] close(3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... close resumed>) = 0 [pid 307] lstat("./173/binderfs", [pid 309] rmdir("./169" [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 307] unlink("./173/binderfs" [pid 309] mkdir("./170", 0777 [pid 307] <... unlink resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 307] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5577] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5573] <... ioctl resumed>) = 0 [ 131.911802][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 131.944158][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5573] close(3) = 0 [pid 5573] mkdir("./bus", 0777) = 0 [pid 5573] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5577] memfd_create("syzkaller", 0) = 3 [pid 5577] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5577] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5577] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5577] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./176/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5580 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./176/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./176") = 0 [pid 306] mkdir("./177", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5582 [pid 5577] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5580 attached [pid 5580] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5580] chdir("./170") = 0 [pid 5580] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5580] setpgid(0, 0) = 0 [ 131.985751][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 131.999617][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5580] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 5582 attached [pid 5582] set_robust_list(0x55555748e5e0, 24 [pid 5580] write(3, "1000", 4) = 4 [pid 5582] <... set_robust_list resumed>) = 0 [pid 5580] close(3 [pid 5582] chdir("./177" [pid 5580] <... close resumed>) = 0 [pid 5580] symlink("/dev/binderfs", "./binderfs" [pid 5582] <... chdir resumed>) = 0 [pid 5582] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5582] setpgid(0, 0 [pid 5580] <... symlink resumed>) = 0 [pid 5582] <... setpgid resumed>) = 0 [pid 5582] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5582] write(3, "1000", 4 [pid 5580] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5582] <... write resumed>) = 4 [pid 5582] close(3) = 0 [pid 5580] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5582] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5580] <... clone resumed>, parent_tid=[5584], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5584 [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5584 attached [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... ioctl resumed>) = 0 [pid 5584] set_robust_list(0x7f19bd6049e0, 24 [pid 5582] <... futex resumed>) = 0 [pid 5577] close(3 [pid 5584] <... set_robust_list resumed>) = 0 [pid 5582] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5577] <... close resumed>) = 0 [pid 5584] memfd_create("syzkaller", 0 [pid 5582] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5577] mkdir("./bus", 0777 [pid 5584] <... memfd_create resumed>) = 3 [pid 5582] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5577] <... mkdir resumed>) = 0 [pid 5584] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5582] <... mprotect resumed>) = 0 [pid 5577] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5584] <... mmap resumed>) = 0x7f19b51e4000 [pid 5582] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5584] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5582] <... clone resumed>, parent_tid=[5586], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5586 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5586 attached [pid 5584] <... write resumed>) = 1048576 [pid 5573] <... mount resumed>) = 0 [pid 5572] <... mount resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 5586] set_robust_list(0x7f19bd6049e0, 24 [pid 5573] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5586] <... set_robust_list resumed>) = 0 [pid 5573] <... openat resumed>) = 3 [pid 5586] memfd_create("syzkaller", 0 [pid 5573] chdir("./bus" [pid 5586] <... memfd_create resumed>) = 3 [pid 5573] <... chdir resumed>) = 0 [pid 5586] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5573] ioctl(4, LOOP_CLR_FD [pid 5586] <... mmap resumed>) = 0x7f19b51e4000 [pid 5573] <... ioctl resumed>) = 0 [pid 5586] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5573] close(4) = 0 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5572] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5571] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] <... openat resumed>) = 3 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] chdir("./bus" [pid 5571] <... futex resumed>) = 0 [pid 5573] chdir("./file0" [pid 5572] <... chdir resumed>) = 0 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5573] <... chdir resumed>) = 0 [pid 5572] ioctl(4, LOOP_CLR_FD [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5572] <... ioctl resumed>) = 0 [pid 5571] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] close(4 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] <... close resumed>) = 0 [pid 5571] <... futex resumed>) = 0 [pid 5573] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5573] <... open resumed>) = 4 [pid 5572] <... futex resumed>) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] chdir("./file0" [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5573] <... futex resumed>) = 1 [pid 5572] <... chdir resumed>) = 0 [pid 5571] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] lstat("./173/bus", [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] <... futex resumed>) = 0 [pid 5571] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5573] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5572] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5573] <... mount resumed>) = 0 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5573] <... futex resumed>) = 1 [pid 5572] <... open resumed>) = 4 [pid 5571] <... futex resumed>) = 0 [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] <... futex resumed>) = 1 [pid 5571] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5573] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5572] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 4 [pid 5586] <... write resumed>) = 1048576 [pid 5573] <... open resumed>) = 5 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 5584] munmap(0x7f19b51e4000, 1048576 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] <... munmap resumed>) = 0 [pid 5573] <... futex resumed>) = 1 [pid 5572] <... mount resumed>) = 0 [pid 5571] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 5584] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5584] <... openat resumed>) = 4 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5572] <... futex resumed>) = 1 [pid 5571] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 5584] ioctl(4, LOOP_SET_FD, 3 [pid 5573] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5572] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5573] <... openat resumed>) = 6 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 307] close(4 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 [pid 5573] <... futex resumed>) = 1 [pid 5571] <... futex resumed>) = 0 [pid 307] rmdir("./173/bus" [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... rmdir resumed>) = 0 [pid 5573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5571] <... futex resumed>) = 0 [pid 307] getdents64(3, [ 132.045330][ T5572] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 132.056947][ T5573] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 132.058018][ T5572] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/172/bus supports timestamps until 2038 (0x7fffffff) [ 132.065916][ T5573] ext4 filesystem being mounted at /root/syzkaller.69675s/173/bus supports timestamps until 2038 (0x7fffffff) [pid 5573] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5573] <... write resumed>) = 262144 [pid 307] close(3 [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... close resumed>) = 0 [pid 5573] <... futex resumed>) = 1 [pid 5571] <... futex resumed>) = 0 [pid 307] rmdir("./173" [pid 5573] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5571] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... rmdir resumed>) = 0 [pid 5584] <... ioctl resumed>) = 0 [pid 5572] <... open resumed>) = 5 [pid 5571] <... futex resumed>) = 0 [pid 307] mkdir("./174", 0777 [pid 5586] munmap(0x7f19b51e4000, 1048576 [pid 5584] close(3 [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5571] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... mkdir resumed>) = 0 [pid 5586] <... munmap resumed>) = 0 [pid 5584] <... close resumed>) = 0 [pid 5572] <... futex resumed>) = 1 [pid 5570] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5586] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5584] mkdir("./bus", 0777 [pid 5572] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 3 [pid 5586] <... openat resumed>) = 4 [pid 5584] <... mkdir resumed>) = 0 [pid 5577] <... mount resumed>) = 0 [pid 5573] <... write resumed>) = 1048576 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5584] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5577] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5573] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... openat resumed>) = 3 [pid 5573] <... futex resumed>) = 1 [pid 5571] <... futex resumed>) = 0 [pid 5577] chdir("./bus" [pid 5573] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5571] exit_group(0 [pid 5577] <... chdir resumed>) = 0 [pid 5573] <... futex resumed>) = ? [pid 5571] <... exit_group resumed>) = ? [pid 5586] ioctl(4, LOOP_SET_FD, 3 [pid 5577] ioctl(4, LOOP_CLR_FD [pid 5573] +++ exited with 0 +++ [pid 5572] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5571] +++ exited with 0 +++ [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5572] <... openat resumed>) = 6 [pid 307] close(3 [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5571, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 5572] <... futex resumed>) = 1 [pid 5570] <... futex resumed>) = 0 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 5572] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5570] <... futex resumed>) = 0 [pid 5572] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... restart_syscall resumed>) = 0 [pid 308] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./173/binderfs") = 0 [ 132.122237][ T5577] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/175/bus supports timestamps until 2038 (0x7fffffff) [ 132.160007][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] <... ioctl resumed>) = 0 [pid 5577] <... ioctl resumed>) = 0 [pid 5572] <... write resumed>) = 262144 [pid 307] <... close resumed>) = 0 [pid 5586] close(3 [pid 5577] close(4 [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5586] <... close resumed>) = 0 [pid 5577] <... close resumed>) = 0 [pid 5572] <... futex resumed>) = 1 [pid 5570] <... futex resumed>) = 0 [pid 5586] mkdir("./bus", 0777 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5570] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5592 [pid 5586] <... mkdir resumed>) = 0 [pid 5577] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5570] <... futex resumed>) = 0 [pid 5586] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5577] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5577] chdir("./file0" [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... chdir resumed>) = 0 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5577] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5577] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5592 attached [pid 5592] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5592] chdir("./174") = 0 [pid 5592] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5592] setpgid(0, 0) = 0 [pid 5592] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5577] <... open resumed>) = 4 [pid 5592] <... openat resumed>) = 3 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5592] write(3, "1000", 4 [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5575] <... futex resumed>) = 0 [pid 5592] <... write resumed>) = 4 [pid 5592] close(3) = 0 [pid 5592] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5577] <... mount resumed>) = 0 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5577] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... open resumed>) = 5 [pid 5575] <... futex resumed>) = 0 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... futex resumed>) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5592] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5577] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5577] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] <... openat resumed>) = 6 [pid 5592] <... clone resumed>, parent_tid=[5594], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5594 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5577] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = 0 [pid 5577] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5577] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5572] <... write resumed>) = 1048576 [pid 5572] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5570] <... futex resumed>) = 0 [pid 5570] exit_group(0) = ? [pid 5577] <... write resumed>) = 262144 [pid 5572] <... futex resumed>) = ? ./strace-static-x86_64: Process 5594 attached [pid 5584] <... mount resumed>) = 0 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5572] +++ exited with 0 +++ [pid 5570] +++ exited with 0 +++ [pid 5594] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5594] memfd_create("syzkaller", 0) = 3 [pid 5594] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5594] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5577] <... futex resumed>) = 1 [pid 5575] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5570, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5584] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5577] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 132.174572][ T5584] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/170/bus supports timestamps until 2038 (0x7fffffff) [ 132.191940][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5584] <... openat resumed>) = 3 [pid 5577] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5575] <... futex resumed>) = 0 [pid 5594] <... write resumed>) = 1048576 [pid 5594] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5594] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5584] chdir("./bus") = 0 [pid 5584] ioctl(4, LOOP_CLR_FD [pid 5577] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5586] <... mount resumed>) = 0 [pid 5575] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./172/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./172/binderfs") = 0 [pid 305] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5586] chdir("./bus") = 0 [pid 5586] ioctl(4, LOOP_CLR_FD [pid 5577] <... write resumed>) = 1048576 [pid 5577] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5594] <... openat resumed>) = 4 [pid 5584] <... ioctl resumed>) = 0 [pid 5594] ioctl(4, LOOP_SET_FD, 3 [pid 5584] close(4 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5575] <... futex resumed>) = 0 [pid 5577] <... futex resumed>) = 1 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] <... ioctl resumed>) = 0 [pid 5594] close(3) = 0 [pid 5594] mkdir("./bus", 0777) = 0 [pid 5586] <... ioctl resumed>) = 0 [pid 5584] <... close resumed>) = 0 [pid 5594] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5586] close(4 [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... close resumed>) = 0 [pid 5584] <... futex resumed>) = 1 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5586] <... futex resumed>) = 1 [pid 5586] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5575] exit_group(0 [pid 5582] <... futex resumed>) = 0 [pid 5580] <... futex resumed>) = 0 [pid 5575] <... exit_group resumed>) = ? [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] lstat("./173/bus", [pid 5586] <... futex resumed>) = 0 [pid 5582] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 1 [pid 5584] <... futex resumed>) = 0 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5577] +++ exited with 0 +++ [pid 5575] +++ exited with 0 +++ [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5584] chdir("./file0" [pid 308] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5584] <... chdir resumed>) = 0 [pid 5586] chdir("./file0" [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5584] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5575, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 308] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] <... chdir resumed>) = 0 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... openat resumed>) = 4 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] fstat(4, [pid 5586] <... futex resumed>) = 1 [pid 5584] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5582] <... futex resumed>) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 308] getdents64(4, [pid 5586] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5584] <... open resumed>) = 4 [pid 5582] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5584] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 308] getdents64(4, [pid 5586] <... open resumed>) = 4 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 310] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] close(4 [pid 5586] <... futex resumed>) = 1 [pid 5584] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5582] <... futex resumed>) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... close resumed>) = 0 [pid 5586] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5584] <... mount resumed>) = 0 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./175/binderfs", [pid 308] rmdir("./173/bus" [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5584] <... futex resumed>) = 1 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] <... futex resumed>) = 0 [pid 310] unlink("./175/binderfs" [pid 308] <... rmdir resumed>) = 0 [pid 5586] <... mount resumed>) = 0 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 308] getdents64(3, [pid 5586] <... futex resumed>) = 1 [pid 5584] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5582] <... futex resumed>) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5586] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5584] <... open resumed>) = 5 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5582] <... futex resumed>) = 0 [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] <... futex resumed>) = 1 [pid 5580] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5586] <... open resumed>) = 5 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] rmdir("./173" [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5584] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 308] <... rmdir resumed>) = 0 [pid 5582] <... futex resumed>) = 0 [pid 5586] <... futex resumed>) = 1 [pid 5584] <... openat resumed>) = 6 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] mkdir("./174", 0777 [pid 5586] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5582] <... futex resumed>) = 0 [ 132.236179][ T5586] ext4 filesystem being mounted at /root/syzkaller.URAKkl/177/bus supports timestamps until 2038 (0x7fffffff) [ 132.252821][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.271403][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5584] <... futex resumed>) = 1 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5580] <... futex resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 5586] <... openat resumed>) = 6 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5584] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5580] <... futex resumed>) = 0 [pid 5586] <... futex resumed>) = 1 [pid 5584] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5582] <... futex resumed>) = 0 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... openat resumed>) = 3 [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] ioctl(3, LOOP_CLR_FD [pid 5586] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5600 attached , child_tidptr=0x55555748e5d0) = 5600 [pid 5600] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5600] chdir("./174") = 0 [pid 5600] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5600] setpgid(0, 0) = 0 [pid 5600] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5600] write(3, "1000", 4) = 4 [pid 5600] close(3) = 0 [pid 5600] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5584] <... write resumed>) = 262144 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5600] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5580] <... futex resumed>) = 0 [pid 5600] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5584] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5580] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] <... clone resumed>, parent_tid=[5601], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5601 [pid 5580] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5601 attached [pid 5601] set_robust_list(0x7f19bd6049e0, 24 [pid 5586] <... write resumed>) = 262144 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5582] <... futex resumed>) = 0 [pid 5586] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5586] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5582] <... futex resumed>) = 0 [pid 5586] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5582] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... set_robust_list resumed>) = 0 [pid 5594] <... mount resumed>) = 0 [pid 5584] <... write resumed>) = 1048576 [pid 5584] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5584] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5594] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5594] chdir("./bus") = 0 [pid 5594] ioctl(4, LOOP_CLR_FD [pid 5601] memfd_create("syzkaller", 0) = 3 [pid 5601] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 132.333030][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 132.349929][ T5594] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/174/bus supports timestamps until 2038 (0x7fffffff) [pid 5601] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5580] <... futex resumed>) = 0 [pid 5580] exit_group(0) = ? [pid 5584] <... futex resumed>) = ? [pid 5601] <... write resumed>) = 1048576 [pid 5601] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5601] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5594] <... ioctl resumed>) = 0 [pid 5584] +++ exited with 0 +++ [pid 5580] +++ exited with 0 +++ [pid 305] <... umount2 resumed>) = 0 [pid 5601] ioctl(4, LOOP_SET_FD, 3 [pid 5594] close(4 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5580, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5586] <... write resumed>) = 1048576 [pid 5601] <... ioctl resumed>) = 0 [pid 5594] <... close resumed>) = 0 [pid 5586] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./172/bus", [pid 5601] close(3 [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./170", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5601] <... close resumed>) = 0 [pid 5594] <... futex resumed>) = 1 [pid 5592] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5601] mkdir("./bus", 0777 [pid 5594] chdir("./file0" [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./170", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5601] <... mkdir resumed>) = 0 [pid 5594] <... chdir resumed>) = 0 [pid 5592] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 305] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5601] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] fstat(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5594] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5586] <... futex resumed>) = 1 [pid 5582] <... futex resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5586] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5582] exit_group(0 [pid 305] <... openat resumed>) = 4 [pid 5586] <... futex resumed>) = ? [pid 5582] <... exit_group resumed>) = ? [pid 305] fstat(4, [pid 5594] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(3, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5594] <... open resumed>) = 4 [pid 5592] <... futex resumed>) = 0 [pid 5586] +++ exited with 0 +++ [pid 5582] +++ exited with 0 +++ [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] getdents64(4, [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./170/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5582, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5594] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5594] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./170/binderfs", [pid 306] <... restart_syscall resumed>) = 0 [pid 5594] <... mount resumed>) = 0 [pid 5592] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] unlink("./170/binderfs" [pid 5594] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... unlink resumed>) = 0 [pid 306] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(4, [ 132.371291][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5594] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5594] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5592] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] close(4 [pid 5594] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 3 [pid 305] <... close resumed>) = 0 [pid 306] fstat(3, [pid 305] rmdir("./172/bus" [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 305] getdents64(3, [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... close resumed>) = 0 [pid 306] lstat("./177/binderfs", [pid 305] rmdir("./172" [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 306] unlink("./177/binderfs" [pid 305] mkdir("./173", 0777 [pid 306] <... unlink resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 306] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 132.415797][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.435233][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.436130][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5601] <... mount resumed>) = 0 [pid 5601] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5601] chdir("./bus") = 0 [pid 5601] ioctl(4, LOOP_CLR_FD [pid 5592] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5592] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5592] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5592] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5605], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5605 [pid 5592] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5605 attached [pid 5605] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5605] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5605] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] <... futex resumed>) = 0 [pid 5592] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5592] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... futex resumed>) = 1 [pid 5605] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5594] <... open resumed>) = 5 [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5594] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./175/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5605] <... write resumed>) = 262144 [pid 5605] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5592] <... futex resumed>) = 0 [pid 5592] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5594] <... futex resumed>) = 0 [pid 5592] <... futex resumed>) = 1 [pid 5594] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5592] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... openat resumed>) = 4 [pid 5605] <... futex resumed>) = 1 [pid 5605] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./175/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./175") = 0 [pid 310] mkdir("./176", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5594] <... write resumed>) = 1048576 [pid 5594] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5592] <... futex resumed>) = 0 [pid 5594] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5592] exit_group(0) = ? [pid 5605] <... futex resumed>) = ? [pid 5605] +++ exited with 0 +++ [pid 5594] <... futex resumed>) = ? [ 132.461607][ T5601] ext4 filesystem being mounted at /root/syzkaller.69675s/174/bus supports timestamps until 2038 (0x7fffffff) [ 132.461676][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5601] <... ioctl resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5601] close(4 [pid 310] <... openat resumed>) = 3 [pid 305] close(3 [pid 5601] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5601] <... futex resumed>) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5606 [pid 5601] chdir("./file0" [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... chdir resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5601] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... open resumed>) = 4 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... mount resumed>) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... futex resumed>) = 0 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5601] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... open resumed>) = 5 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... futex resumed>) = 0 [pid 5600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5601] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5601] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... openat resumed>) = 6 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5601] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5601] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5600] <... futex resumed>) = 0 [pid 5601] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... write resumed>) = 262144 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./170/bus", [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5600] <... futex resumed>) = 0 [pid 5600] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5600] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5601] <... futex resumed>) = 1 [pid 5601] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 309] umount2("./170/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./170/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5606 attached [pid 309] getdents64(4, [pid 5606] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5606] chdir("./173") = 0 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5606] setpgid(0, 0) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 5606] <... openat resumed>) = 3 [pid 5606] write(3, "1000", 4) = 4 [pid 309] rmdir("./170/bus" [pid 5606] close(3) = 0 [pid 5606] symlink("/dev/binderfs", "./binderfs" [pid 309] <... rmdir resumed>) = 0 [pid 5606] <... symlink resumed>) = 0 [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5606] <... futex resumed>) = 0 [pid 309] close(3 [pid 5606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] <... close resumed>) = 0 [pid 5606] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5606] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 309] rmdir("./170" [pid 5606] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5607], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5607 [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 5606] <... futex resumed>) = 0 [pid 309] mkdir("./171", 0777 [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5607 attached [pid 5607] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5607] memfd_create("syzkaller", 0 [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5607] <... memfd_create resumed>) = 3 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5601] <... write resumed>) = 1048576 [pid 5601] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5600] <... futex resumed>) = 0 [pid 5600] exit_group(0) = ? [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5607] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5594] +++ exited with 0 +++ [pid 5592] +++ exited with 0 +++ [pid 310] <... close resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 5607] ioctl(4, LOOP_SET_FD, 3 [pid 5601] +++ exited with 0 +++ [pid 5600] +++ exited with 0 +++ [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5592, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5607] <... ioctl resumed>) = 0 [pid 5607] close(3) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5609 [pid 309] close(3 [pid 5607] mkdir("./bus", 0777 [pid 309] <... close resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5600, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5607] <... mkdir resumed>) = 0 [pid 5607] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5610 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] lstat("./177/bus", [pid 307] <... openat resumed>) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] getdents64(3, [pid 308] fstat(3, [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(3, [pid 307] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] lstat("./174/binderfs", [pid 306] <... openat resumed>) = 4 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] fstat(4, [pid 308] lstat("./174/binderfs", [pid 307] unlink("./174/binderfs" [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] unlink("./174/binderfs" [pid 307] <... unlink resumed>) = 0 [pid 306] getdents64(4, [pid 308] <... unlink resumed>) = 0 [pid 307] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./177/bus") = 0 ./strace-static-x86_64: Process 5610 attached ./strace-static-x86_64: Process 5609 attached [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./177" [pid 5609] set_robust_list(0x55555748e5e0, 24 [pid 306] <... rmdir resumed>) = 0 [pid 5610] set_robust_list(0x55555748e5e0, 24 [pid 306] mkdir("./178", 0777 [pid 5610] <... set_robust_list resumed>) = 0 [pid 5609] <... set_robust_list resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 5610] chdir("./171" [pid 5609] chdir("./176" [pid 5610] <... chdir resumed>) = 0 [pid 5609] <... chdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... openat resumed>) = 3 [pid 5610] <... prctl resumed>) = 0 [pid 5609] <... prctl resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5610] setpgid(0, 0 [pid 5609] setpgid(0, 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5610] <... setpgid resumed>) = 0 [pid 5609] <... setpgid resumed>) = 0 [pid 306] close(3 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... close resumed>) = 0 [pid 5610] <... openat resumed>) = 3 [pid 5609] <... openat resumed>) = 3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5610] write(3, "1000", 4 [pid 5609] write(3, "1000", 4 [pid 5610] <... write resumed>) = 4 [pid 5609] <... write resumed>) = 4 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5611 [pid 5610] close(3 [pid 5609] close(3 [pid 5610] <... close resumed>) = 0 [pid 5609] <... close resumed>) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs" [pid 5609] symlink("/dev/binderfs", "./binderfs" [pid 5610] <... symlink resumed>) = 0 [pid 5609] <... symlink resumed>) = 0 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5609] <... futex resumed>) = 0 [pid 5610] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5610] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5609] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5610] <... mprotect resumed>) = 0 [pid 5609] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5610] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5609] <... mprotect resumed>) = 0 [pid 5609] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5610] <... clone resumed>, parent_tid=[5612], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5612 [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... clone resumed>, parent_tid=[5613], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5613 [pid 5610] <... futex resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5609] <... futex resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5613 attached [pid 5613] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5613] memfd_create("syzkaller", 0) = 3 [pid 5613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5611 attached [pid 5611] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5611] chdir("./178") = 0 [pid 5611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5611] setpgid(0, 0) = 0 [ 132.615135][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 132.628168][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.645435][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5611] write(3, "1000", 4) = 4 [pid 5611] close(3) = 0 [pid 5611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5611] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5611] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5614], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5614 [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5614 attached [pid 5614] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5614] memfd_create("syzkaller", 0) = 3 [pid 5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5612 attached [pid 5612] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5612] memfd_create("syzkaller", 0) = 3 [pid 5612] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5612] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5613] <... write resumed>) = 1048576 [pid 5613] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5613] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5613] ioctl(4, LOOP_SET_FD, 3 [pid 5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5612] <... write resumed>) = 1048576 [pid 5612] munmap(0x7f19b51e4000, 1048576 [pid 5613] <... ioctl resumed>) = 0 [pid 5613] close(3) = 0 [pid 5613] mkdir("./bus", 0777) = 0 [pid 5613] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5614] <... write resumed>) = 1048576 [pid 5614] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5614] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5614] ioctl(4, LOOP_SET_FD, 3 [pid 5612] <... munmap resumed>) = 0 [pid 5612] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5614] <... ioctl resumed>) = 0 [pid 5614] close(3) = 0 [pid 5614] mkdir("./bus", 0777) = 0 [pid 5612] <... openat resumed>) = 4 [pid 5612] ioctl(4, LOOP_SET_FD, 3 [pid 5614] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5607] <... mount resumed>) = 0 [pid 5607] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5607] chdir("./bus") = 0 [ 132.659999][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 132.700825][ T5607] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/173/bus supports timestamps until 2038 (0x7fffffff) [pid 5607] ioctl(4, LOOP_CLR_FD [pid 5612] <... ioctl resumed>) = 0 [pid 5612] close(3) = 0 [pid 5612] mkdir("./bus", 0777) = 0 [pid 5613] <... mount resumed>) = 0 [pid 5612] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5613] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5613] chdir("./bus") = 0 [pid 5613] ioctl(4, LOOP_CLR_FD [pid 5607] <... ioctl resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5607] close(4 [pid 307] <... umount2 resumed>) = 0 [pid 308] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./174/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, [pid 5607] <... close resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./174/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./174") = 0 [pid 308] mkdir("./175", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5623 ./strace-static-x86_64: Process 5623 attached [pid 5623] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5623] chdir("./175") = 0 [pid 5623] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5623] setpgid(0, 0) = 0 [pid 5623] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5623] write(3, "1000", 4 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5623] <... write resumed>) = 4 [pid 5607] chdir("./file0" [pid 5623] close(3) = 0 [pid 5623] symlink("/dev/binderfs", "./binderfs" [pid 5607] <... chdir resumed>) = 0 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5606] <... futex resumed>) = 0 [ 132.725710][ T5613] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/176/bus supports timestamps until 2038 (0x7fffffff) [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] <... symlink resumed>) = 0 [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] <... open resumed>) = 4 [pid 5623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5623] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5623] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5626], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5626 [pid 5623] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] <... futex resumed>) = 0 [pid 307] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 5607] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5607] <... mount resumed>) = 0 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5607] <... futex resumed>) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] lstat("./174/bus", [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 5607] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5607] <... open resumed>) = 5 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5613] <... ioctl resumed>) = 0 [pid 5607] <... futex resumed>) = 1 [pid 5606] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5607] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] <... openat resumed>) = 6 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 4 [pid 5607] <... futex resumed>) = 1 [pid 5606] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5607] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 5626 attached [pid 5607] <... write resumed>) = 262144 [pid 307] getdents64(4, [pid 5613] close(4 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 5613] <... close resumed>) = 0 [pid 307] rmdir("./174/bus" [pid 5626] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5626] memfd_create("syzkaller", 0 [pid 307] <... rmdir resumed>) = 0 [pid 5626] <... memfd_create resumed>) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 307] getdents64(3, [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5613] <... futex resumed>) = 1 [pid 5609] <... futex resumed>) = 0 [pid 307] close(3 [pid 5613] chdir("./file0" [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] <... close resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] rmdir("./174" [pid 5613] <... chdir resumed>) = 0 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] mkdir("./175", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5613] <... open resumed>) = 4 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5613] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5609] <... futex resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 3 [pid 5626] <... write resumed>) = 1048576 [pid 5614] <... mount resumed>) = 0 [pid 5613] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 1 [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5613] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5626] munmap(0x7f19b51e4000, 1048576 [pid 5614] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5613] <... mount resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] <... futex resumed>) = 1 [pid 5606] <... futex resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5612] <... mount resumed>) = 0 [pid 5626] <... munmap resumed>) = 0 [pid 5614] <... openat resumed>) = 3 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5607] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 5613] <... futex resumed>) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5614] chdir("./bus" [pid 5613] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] <... openat resumed>) = 3 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 5626] <... openat resumed>) = 4 [pid 5614] <... chdir resumed>) = 0 [pid 5613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5609] <... futex resumed>) = 0 [pid 5607] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5626] ioctl(4, LOOP_SET_FD, 3 [pid 5614] ioctl(4, LOOP_CLR_FD [pid 5613] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5612] chdir("./bus" [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5606] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5614] <... ioctl resumed>) = 0 [pid 5613] <... open resumed>) = 5 [pid 5614] close(4 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5628 [pid 5613] <... futex resumed>) = 1 [pid 5609] <... futex resumed>) = 0 [pid 5613] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... openat resumed>) = 6 [pid 5609] <... futex resumed>) = 0 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5613] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5613] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5628 attached [pid 5626] <... ioctl resumed>) = 0 [pid 5614] <... close resumed>) = 0 [pid 5609] <... futex resumed>) = 0 [pid 5628] set_robust_list(0x55555748e5e0, 24 [pid 5626] close(3 [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... close resumed>) = 0 [pid 5614] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5628] <... set_robust_list resumed>) = 0 [pid 5626] mkdir("./bus", 0777 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... mkdir resumed>) = 0 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5626] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5614] chdir("./file0" [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] chdir("./175" [pid 5614] <... chdir resumed>) = 0 [pid 5628] <... chdir resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5614] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5628] <... prctl resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5614] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] setpgid(0, 0 [pid 5614] <... open resumed>) = 4 [pid 5628] <... setpgid resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5614] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... openat resumed>) = 3 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5628] write(3, "1000", 4 [pid 5614] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5613] <... write resumed>) = 262144 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... write resumed>) = 4 [pid 5614] <... mount resumed>) = 0 [pid 5612] <... chdir resumed>) = 0 [pid 5607] <... write resumed>) = 1048576 [pid 5628] close(3 [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] ioctl(4, LOOP_CLR_FD [pid 5607] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... close resumed>) = 0 [pid 5614] <... futex resumed>) = 1 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... ioctl resumed>) = 0 [pid 5611] <... futex resumed>) = 0 [pid 5607] <... futex resumed>) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5613] <... futex resumed>) = 1 [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] <... futex resumed>) = 0 [ 132.804457][ T5614] ext4 filesystem being mounted at /root/syzkaller.URAKkl/178/bus supports timestamps until 2038 (0x7fffffff) [ 132.821259][ T5612] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/171/bus supports timestamps until 2038 (0x7fffffff) [pid 5606] exit_group(0 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5613] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] <... futex resumed>) = 0 [pid 5609] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] <... exit_group resumed>) = ? [pid 5614] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5609] <... futex resumed>) = 0 [pid 5614] <... open resumed>) = 5 [pid 5613] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5609] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5614] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5614] <... openat resumed>) = 6 [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] symlink("/dev/binderfs", "./binderfs" [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5611] <... futex resumed>) = 0 [pid 5614] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... symlink resumed>) = 0 [pid 5614] <... write resumed>) = 262144 [pid 5612] close(4 [pid 5607] +++ exited with 0 +++ [pid 5606] +++ exited with 0 +++ [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5614] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5611] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5613] <... write resumed>) = 1048576 [pid 5612] <... close resumed>) = 0 [pid 5611] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5628] <... futex resumed>) = 0 [pid 5613] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5613] <... futex resumed>) = 1 [pid 5612] <... futex resumed>) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5609] <... futex resumed>) = 0 [pid 5628] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5613] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] exit_group(0 [pid 305] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5628] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5613] <... futex resumed>) = ? [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5609] <... exit_group resumed>) = ? [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5628] <... mprotect resumed>) = 0 [pid 5613] +++ exited with 0 +++ [pid 5612] chdir("./file0" [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5628] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5612] <... chdir resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5609] +++ exited with 0 +++ [pid 305] fstat(3, [pid 5628] <... clone resumed>, parent_tid=[5632], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5632 [pid 5612] <... futex resumed>) = 1 [pid 5610] <... futex resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5609, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] getdents64(3, [pid 5628] <... futex resumed>) = 0 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 310] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5612] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] <... open resumed>) = 4 [pid 310] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 305] lstat("./173/binderfs", [pid 5612] <... futex resumed>) = 1 [pid 5610] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] unlink("./173/binderfs" [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 305] <... unlink resumed>) = 0 [pid 5612] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] <... mount resumed>) = 0 [pid 310] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5612] <... futex resumed>) = 1 [pid 5610] <... futex resumed>) = 0 [pid 310] lstat("./176/binderfs", [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 310] unlink("./176/binderfs" [pid 5612] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... unlink resumed>) = 0 [pid 5612] <... open resumed>) = 5 [pid 310] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5612] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... openat resumed>) = 6 [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5612] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [ 132.869613][ T5626] ext4 filesystem being mounted at /root/syzkaller.69675s/175/bus supports timestamps until 2038 (0x7fffffff) [pid 5612] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5632 attached [pid 5626] <... mount resumed>) = 0 [pid 5614] <... write resumed>) = 1048576 [pid 5612] <... write resumed>) = 262144 [pid 5632] set_robust_list(0x7f19bd6049e0, 24 [pid 5626] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5614] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5626] <... openat resumed>) = 3 [pid 5614] <... futex resumed>) = 1 [pid 5611] <... futex resumed>) = 0 [pid 5632] memfd_create("syzkaller", 0 [pid 5626] chdir("./bus" [pid 5614] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5611] exit_group(0 [pid 5632] <... memfd_create resumed>) = 3 [pid 5626] <... chdir resumed>) = 0 [pid 5614] <... futex resumed>) = ? [pid 5611] <... exit_group resumed>) = ? [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5626] ioctl(4, LOOP_CLR_FD [pid 5614] +++ exited with 0 +++ [pid 5611] +++ exited with 0 +++ [pid 5632] <... mmap resumed>) = 0x7f19b51e4000 [pid 5626] <... ioctl resumed>) = 0 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5626] close(4) = 0 [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] <... futex resumed>) = 0 [pid 5612] <... futex resumed>) = 1 [pid 5610] <... futex resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5626] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5632] <... write resumed>) = 1048576 [pid 5632] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [ 132.919837][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.933539][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 132.952656][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5632] ioctl(4, LOOP_SET_FD, 3 [pid 5623] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5623] <... futex resumed>) = 1 [pid 5632] <... ioctl resumed>) = 0 [pid 5626] <... futex resumed>) = 0 [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5610] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] chdir("./file0" [pid 5610] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5632] close(3 [pid 306] <... openat resumed>) = 3 [pid 5632] <... close resumed>) = 0 [pid 306] fstat(3, [pid 5632] mkdir("./bus", 0777 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] <... mkdir resumed>) = 0 [pid 5626] <... chdir resumed>) = 0 [pid 5610] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] getdents64(3, [pid 5626] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5632] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] <... futex resumed>) = 1 [pid 5623] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5626] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5623] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./178/binderfs", [pid 5623] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] unlink("./178/binderfs" [pid 5626] <... open resumed>) = 4 [pid 306] <... unlink resumed>) = 0 [pid 5626] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] <... futex resumed>) = 0 [pid 5626] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5623] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5626] <... mount resumed>) = 0 [pid 5623] <... futex resumed>) = 0 [pid 5626] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... futex resumed>) = 0 [pid 5623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5626] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5623] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5623] <... futex resumed>) = 0 [pid 5626] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [ 132.960023][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 132.999379][ T5632] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/175/bus supports timestamps until 2038 (0x7fffffff) [pid 5623] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5612] <... write resumed>) = 1048576 [pid 5612] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5610] <... futex resumed>) = 0 [pid 5610] exit_group(0) = ? [pid 5612] <... futex resumed>) = ? [pid 5632] <... mount resumed>) = 0 [pid 5612] +++ exited with 0 +++ [pid 5610] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./171", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./171", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./171/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./171/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 309] unlink("./171/binderfs") = 0 [pid 309] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./bus") = 0 [pid 5632] ioctl(4, LOOP_CLR_FD [pid 310] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./176/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./176/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./176") = 0 [pid 310] mkdir("./177", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5623] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5623] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5623] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5623] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5636], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5636 [pid 5623] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5636 attached [pid 5636] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5636] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5636] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5636] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5623] <... futex resumed>) = 0 [pid 5623] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5623] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5636] <... futex resumed>) = 0 [pid 5636] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5636] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... futex resumed>) = 0 [pid 5623] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5623] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5636] <... futex resumed>) = 1 [ 133.011255][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 133.029493][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 133.042638][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5636] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 5636] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... futex resumed>) = 0 [pid 5636] <... futex resumed>) = 1 [pid 5636] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5626] <... open resumed>) = 5 [pid 5626] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5626] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5623] exit_group(0 [pid 5626] <... futex resumed>) = ? [pid 5623] <... exit_group resumed>) = ? [pid 5626] +++ exited with 0 +++ [pid 5636] <... futex resumed>) = ? [ 133.058190][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5632] <... ioctl resumed>) = 0 [pid 5632] close(4 [pid 5636] +++ exited with 0 +++ [pid 5632] <... close resumed>) = 0 [pid 5623] +++ exited with 0 +++ [pid 310] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5623, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 306] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 309] lstat("./171/bus", [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] lstat("./178/bus", [pid 305] lstat("./173/bus", [pid 5632] chdir("./file0" [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] umount2("./171/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] <... chdir resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5637 [pid 309] openat(AT_FDCWD, "./171/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 4 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5632] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] fstat(4, [pid 308] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 4 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 3 [pid 306] fstat(4, [pid 305] <... openat resumed>) = 4 [pid 5632] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(4, [pid 308] fstat(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] fstat(4, [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5632] <... open resumed>) = 4 [pid 309] getdents64(4, [pid 308] getdents64(3, [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 309] close(4 [pid 308] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(4, ./strace-static-x86_64: Process 5637 attached [pid 5632] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5637] set_robust_list(0x55555748e5e0, 24 [pid 5632] <... mount resumed>) = 0 [pid 5628] <... futex resumed>) = 0 [pid 306] close(4 [pid 305] getdents64(4, [pid 5637] <... set_robust_list resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] rmdir("./171/bus" [pid 308] lstat("./175/binderfs", [pid 306] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5637] chdir("./177" [pid 5632] <... futex resumed>) = 0 [pid 5628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] rmdir("./178/bus" [pid 305] close(4 [pid 5637] <... chdir resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 308] unlink("./175/binderfs" [pid 306] getdents64(3, [pid 305] rmdir("./173/bus" [pid 5637] <... prctl resumed>) = 0 [pid 5632] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... unlink resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 5637] setpgid(0, 0 [pid 5632] <... open resumed>) = 5 [pid 306] close(3 [pid 305] getdents64(3, [pid 5637] <... setpgid resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 308] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 306] rmdir("./178" [pid 305] close(3 [pid 5637] <... openat resumed>) = 3 [pid 5632] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5637] write(3, "1000", 4 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [pid 306] mkdir("./179", 0777 [pid 305] rmdir("./173" [pid 5637] <... write resumed>) = 4 [pid 5632] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... mkdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 5637] close(3 [pid 5632] <... openat resumed>) = 6 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] mkdir("./174", 0777 [pid 5637] <... close resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 3 [pid 305] <... mkdir resumed>) = 0 [pid 5637] symlink("/dev/binderfs", "./binderfs" [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5637] <... symlink resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./171" [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... openat resumed>) = 3 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [pid 306] close(3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5637] <... futex resumed>) = 0 [pid 5632] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... rmdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 309] mkdir("./172", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5637] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5638], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5638 [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5639 ./strace-static-x86_64: Process 5639 attached [pid 5639] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5639] chdir("./179") = 0 [pid 5632] <... write resumed>) = 262144 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5639] setpgid(0, 0) = 0 [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5638 attached [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(3 [pid 5638] set_robust_list(0x7f19bd6049e0, 24 [pid 5632] <... futex resumed>) = 1 [pid 5628] <... futex resumed>) = 0 [pid 5639] <... openat resumed>) = 3 [pid 5639] write(3, "1000", 4 [pid 5632] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5628] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5628] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5639] <... write resumed>) = 4 [pid 5639] close(3) = 0 [pid 5639] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5638] memfd_create("syzkaller", 0 [pid 5639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5639] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5639] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5638] <... memfd_create resumed>) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5639] <... clone resumed>, parent_tid=[5640], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5640 [pid 5638] <... mmap resumed>) = 0x7f19b51e4000 [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5640 attached [pid 5640] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5640] memfd_create("syzkaller", 0) = 3 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5638] <... write resumed>) = 1048576 [pid 5638] munmap(0x7f19b51e4000, 1048576 [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5632] <... write resumed>) = 1048576 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5632] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5628] <... futex resumed>) = 0 [pid 309] close(3 [pid 5632] <... futex resumed>) = 1 [pid 5628] exit_group(0 [pid 309] <... close resumed>) = 0 [pid 5628] <... exit_group resumed>) = ? [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5641 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5642 [pid 5632] +++ exited with 0 +++ [pid 5628] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5628, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./175/binderfs", ./strace-static-x86_64: Process 5642 attached ./strace-static-x86_64: Process 5641 attached [pid 5640] <... write resumed>) = 1048576 [pid 5638] <... munmap resumed>) = 0 [pid 308] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5641] set_robust_list(0x55555748e5e0, 24 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] unlink("./175/binderfs" [pid 5641] <... set_robust_list resumed>) = 0 [pid 308] lstat("./175/bus", [pid 307] <... unlink resumed>) = 0 [pid 5641] chdir("./174" [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] <... chdir resumed>) = 0 [pid 308] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5641] <... prctl resumed>) = 0 [pid 308] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5641] setpgid(0, 0 [pid 308] <... openat resumed>) = 4 [pid 5641] <... setpgid resumed>) = 0 [pid 308] fstat(4, [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5641] <... openat resumed>) = 3 [pid 308] getdents64(4, [pid 5641] write(3, "1000", 4) = 4 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5641] close(3 [pid 308] getdents64(4, [pid 5641] <... close resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs" [pid 308] close(4 [pid 5641] <... symlink resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] rmdir("./175/bus" [pid 5641] <... futex resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] getdents64(3, [pid 5641] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5641] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5641] <... mprotect resumed>) = 0 [pid 308] close(3 [pid 5641] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./175" [pid 5641] <... clone resumed>, parent_tid=[5643], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5643 [pid 308] <... rmdir resumed>) = 0 [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] mkdir("./176", 0777 [pid 5641] <... futex resumed>) = 0 [pid 5640] munmap(0x7f19b51e4000, 1048576 [pid 308] <... mkdir resumed>) = 0 [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5640] <... munmap resumed>) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5640] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5638] <... openat resumed>) = 4 [pid 308] <... openat resumed>) = 3 [pid 5640] <... openat resumed>) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5640] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 5642] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5642] chdir("./172") = 0 [pid 5642] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5642] setpgid(0, 0) = 0 [pid 5642] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5642] write(3, "1000", 4) = 4 [pid 5642] close(3) = 0 [pid 5642] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5642] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5642] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5644], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5644 [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5644 attached [pid 5644] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5643 attached [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5638] <... ioctl resumed>) = 0 [pid 5638] close(3) = 0 [pid 5638] mkdir("./bus", 0777 [pid 5643] set_robust_list(0x7f19bd6049e0, 24 [pid 5640] <... ioctl resumed>) = 0 [pid 5638] <... mkdir resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 5640] close(3 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5640] <... close resumed>) = 0 [pid 5638] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5640] mkdir("./bus", 0777 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5647 [pid 5640] <... mkdir resumed>) = 0 [pid 5640] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5643] <... set_robust_list resumed>) = 0 [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5647] chdir("./176" [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5647] <... chdir resumed>) = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5647] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5650], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5650 [ 133.272019][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 133.289727][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5650 attached ) = 0 [pid 5644] <... write resumed>) = 1048576 [pid 5643] <... write resumed>) = 1048576 [pid 5638] <... mount resumed>) = 0 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5644] munmap(0x7f19b51e4000, 1048576 [pid 5643] munmap(0x7f19b51e4000, 1048576 [pid 5644] <... munmap resumed>) = 0 [pid 5643] <... munmap resumed>) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5644] <... openat resumed>) = 4 [pid 5643] <... openat resumed>) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3 [pid 5643] ioctl(4, LOOP_SET_FD, 3 [pid 5638] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] set_robust_list(0x7f19bd6049e0, 24 [pid 5638] chdir("./bus") = 0 [pid 5638] ioctl(4, LOOP_CLR_FD [pid 5650] <... set_robust_list resumed>) = 0 [pid 5650] memfd_create("syzkaller", 0) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5644] <... ioctl resumed>) = 0 [pid 5644] close(3) = 0 [pid 5644] mkdir("./bus", 0777) = 0 [pid 5644] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5640] <... mount resumed>) = 0 [pid 5643] <... ioctl resumed>) = 0 [pid 5643] close(3 [pid 5640] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5643] <... close resumed>) = 0 [pid 5643] mkdir("./bus", 0777 [pid 5640] <... openat resumed>) = 3 [pid 5640] chdir("./bus" [pid 5643] <... mkdir resumed>) = 0 [pid 5643] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5640] <... chdir resumed>) = 0 [pid 5640] ioctl(4, LOOP_CLR_FD [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5650] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5640] <... ioctl resumed>) = 0 [pid 5638] <... ioctl resumed>) = 0 [pid 5640] close(4) = 0 [pid 5638] close(4 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5640] chdir("./file0" [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... chdir resumed>) = 0 [pid 5638] <... close resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5640] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... open resumed>) = 4 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5640] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... mount resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5640] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... open resumed>) = 5 [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5640] <... futex resumed>) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5638] chdir("./file0" [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 133.317364][ T5638] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/177/bus supports timestamps until 2038 (0x7fffffff) [ 133.340006][ T5640] ext4 filesystem being mounted at /root/syzkaller.URAKkl/179/bus supports timestamps until 2038 (0x7fffffff) [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5638] <... chdir resumed>) = 0 [pid 5640] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... openat resumed>) = 6 [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5640] <... futex resumed>) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5640] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... write resumed>) = 262144 [pid 5638] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5639] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... openat resumed>) = 4 [pid 5639] <... futex resumed>) = 0 [pid 5638] <... open resumed>) = 4 [pid 307] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5650] ioctl(4, LOOP_SET_FD, 3 [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 307] lstat("./175/bus", [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 307] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5638] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5638] <... mount resumed>) = 0 [pid 307] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 4 [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 5638] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./175/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./175") = 0 [pid 307] mkdir("./176", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5650] <... ioctl resumed>) = 0 [pid 5638] <... open resumed>) = 5 [pid 307] <... openat resumed>) = 3 [pid 5650] close(3 [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5650] <... close resumed>) = 0 [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5650] mkdir("./bus", 0777 [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 5650] <... mkdir resumed>) = 0 [pid 5639] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 5650] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5638] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5644] <... mount resumed>) = 0 [pid 5638] <... openat resumed>) = 6 [pid 5644] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./bus") = 0 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5660 ./strace-static-x86_64: Process 5660 attached [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... write resumed>) = 1048576 [pid 5638] <... futex resumed>) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5644] <... futex resumed>) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5640] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] exit_group(0 [pid 5644] chdir("./file0" [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... futex resumed>) = ? [pid 5639] <... exit_group resumed>) = ? [pid 5644] <... chdir resumed>) = 0 [pid 5640] +++ exited with 0 +++ [pid 5639] +++ exited with 0 +++ [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5644] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... open resumed>) = 4 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5644] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... mount resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [ 133.418850][ T5644] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/172/bus supports timestamps until 2038 (0x7fffffff) [ 133.435080][ T5643] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/174/bus supports timestamps until 2038 (0x7fffffff) [pid 5644] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5637] <... futex resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5639, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5660] set_robust_list(0x55555748e5e0, 24 [pid 5650] <... mount resumed>) = 0 [pid 5644] <... open resumed>) = 5 [pid 5643] <... mount resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5644] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... openat resumed>) = 6 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5644] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... set_robust_list resumed>) = 0 [pid 5650] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5643] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5638] <... write resumed>) = 262144 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] chdir("./176" [pid 5650] <... openat resumed>) = 3 [pid 5643] <... openat resumed>) = 3 [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] <... chdir resumed>) = 0 [pid 5650] chdir("./bus" [pid 5643] chdir("./bus" [pid 5638] <... futex resumed>) = 0 [pid 5637] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5650] <... chdir resumed>) = 0 [pid 5643] <... chdir resumed>) = 0 [pid 5638] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5637] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] <... prctl resumed>) = 0 [pid 5650] ioctl(4, LOOP_CLR_FD [pid 5644] <... write resumed>) = 262144 [pid 5643] ioctl(4, LOOP_CLR_FD [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] setpgid(0, 0 [pid 5650] <... ioctl resumed>) = 0 [pid 5643] <... ioctl resumed>) = 0 [pid 306] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5660] <... setpgid resumed>) = 0 [pid 5650] close(4 [pid 5643] close(4 [pid 306] <... openat resumed>) = 3 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5650] <... close resumed>) = 0 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... close resumed>) = 0 [pid 306] fstat(3, [pid 5660] <... openat resumed>) = 3 [pid 5660] write(3, "1000", 4 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5660] <... write resumed>) = 4 [pid 5650] <... futex resumed>) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5644] <... futex resumed>) = 1 [pid 5643] <... futex resumed>) = 1 [pid 5642] <... futex resumed>) = 0 [pid 5641] <... futex resumed>) = 0 [pid 306] getdents64(3, [pid 5660] close(3 [pid 5650] chdir("./file0" [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5642] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... close resumed>) = 0 [pid 5650] <... chdir resumed>) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5644] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5660] symlink("/dev/binderfs", "./binderfs" [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5643] chdir("./file0" [pid 5642] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... symlink resumed>) = 0 [pid 5650] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] <... chdir resumed>) = 0 [pid 306] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... futex resumed>) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5660] <... futex resumed>) = 0 [pid 5643] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./179/binderfs", [pid 5650] <... open resumed>) = 4 [pid 5641] <... futex resumed>) = 0 [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./179/binderfs" [pid 5660] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5643] <... open resumed>) = 4 [pid 306] <... unlink resumed>) = 0 [pid 5660] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... mprotect resumed>) = 0 [pid 5650] <... futex resumed>) = 1 [pid 5647] <... futex resumed>) = 0 [ 133.461395][ T5650] ext4 filesystem being mounted at /root/syzkaller.69675s/176/bus supports timestamps until 2038 (0x7fffffff) [pid 5643] <... futex resumed>) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5660] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5650] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... mount resumed>) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5660] <... clone resumed>, parent_tid=[5663], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5663 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5660] <... futex resumed>) = 0 [pid 5650] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... mount resumed>) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] <... open resumed>) = 5 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5650] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] <... futex resumed>) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = 0 [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... futex resumed>) = 0 [pid 5647] <... futex resumed>) = 1 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5650] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] <... openat resumed>) = 6 [pid 5643] <... open resumed>) = 5 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5650] <... futex resumed>) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5650] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] <... futex resumed>) = 0 [pid 5643] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] <... openat resumed>) = 6 ./strace-static-x86_64: Process 5663 attached [pid 5663] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5663] memfd_create("syzkaller", 0) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5650] <... write resumed>) = 262144 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5641] <... futex resumed>) = 0 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5647] <... futex resumed>) = 0 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5650] <... futex resumed>) = 1 [pid 5647] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5647] <... futex resumed>) = 0 [pid 5643] <... write resumed>) = 262144 [pid 5647] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = 0 [pid 5643] <... futex resumed>) = 1 [pid 5641] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5643] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5641] <... futex resumed>) = 0 [pid 5637] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5637] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5644] <... write resumed>) = 1048576 [pid 5644] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] <... futex resumed>) = 0 [pid 5642] exit_group(0) = ? [pid 5644] <... futex resumed>) = ? [pid 5644] +++ exited with 0 +++ [pid 5642] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5642, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./172", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./172", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 133.497231][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./172/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./172/binderfs", [pid 5638] <... write resumed>) = 1048576 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./172/binderfs" [pid 5638] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 309] <... unlink resumed>) = 0 [pid 5638] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] <... write resumed>) = 1048576 [pid 5663] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] mkdir("./bus", 0777) = 0 [pid 5663] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5637] exit_group(0 [pid 5638] <... futex resumed>) = ? [pid 5637] <... exit_group resumed>) = ? [pid 5647] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5641] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5638] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./177/binderfs") = 0 [pid 310] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5643] <... write resumed>) = 1048576 [pid 5643] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5643] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] exit_group(0) = ? [pid 5643] <... futex resumed>) = ? [pid 5643] +++ exited with 0 +++ [pid 5641] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./174/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./174/binderfs") = 0 [ 133.541645][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 133.561341][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5650] <... write resumed>) = 1048576 [pid 5650] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5650] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5663] <... mount resumed>) = 0 [pid 5663] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./bus") = 0 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [ 133.605907][ T5663] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/176/bus supports timestamps until 2038 (0x7fffffff) [ 133.609258][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 133.620621][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 133.631803][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5647] exit_group(0 [pid 5650] <... futex resumed>) = ? [pid 5647] <... exit_group resumed>) = ? [pid 5650] +++ exited with 0 +++ [pid 5663] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [pid 5663] chdir("./file0") = 0 [pid 5663] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [pid 5663] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5663] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [pid 5663] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5663] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5663] <... futex resumed>) = 1 [pid 5663] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5647] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] <... umount2 resumed>) = 0 [pid 308] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./179/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5660] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... openat resumed>) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 5660] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5660] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./179/bus" [pid 5660] <... mmap resumed>) = 0x7f19b52c3000 [pid 308] <... openat resumed>) = 3 [pid 5660] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE [pid 308] fstat(3, [pid 306] <... rmdir resumed>) = 0 [pid 5660] <... mprotect resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 5660] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] getdents64(3, [pid 306] rmdir("./179"./strace-static-x86_64: Process 5667 attached [pid 5660] <... clone resumed>, parent_tid=[5667], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5667 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... rmdir resumed>) = 0 [pid 5667] set_robust_list(0x7f19b52e39e0, 24 [pid 5660] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] mkdir("./180", 0777 [pid 5660] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5660] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] lstat("./176/binderfs", [pid 5667] <... set_robust_list resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 5667] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 308] unlink("./176/binderfs" [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 308] <... unlink resumed>) = 0 [pid 308] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] <... openat resumed>) = 6 [ 133.656477][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 133.671106][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5667] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5660] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... futex resumed>) = 0 [pid 5667] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5667] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5660] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5660] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5667] <... futex resumed>) = 1 [pid 5663] <... open resumed>) = 5 [pid 305] <... umount2 resumed>) = 0 [pid 5663] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5663] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5663] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] lstat("./174/bus", [pid 309] <... umount2 resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5667] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 305] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./172/bus", [pid 305] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 4 [pid 309] umount2("./172/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./172/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./174/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./174") = 0 [pid 309] <... openat resumed>) = 4 [pid 305] mkdir("./175", 0777 [pid 5667] <... write resumed>) = 1048576 [pid 305] <... mkdir resumed>) = 0 [pid 5667] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5667] <... futex resumed>) = 1 [pid 5660] <... futex resumed>) = 0 [pid 5660] exit_group(0 [pid 5667] ????( [pid 5660] <... exit_group resumed>) = ? [pid 5663] <... futex resumed>) = 231 [pid 5667] <... ???? resumed>) = ? [pid 5663] +++ exited with 0 +++ [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./172/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./172") = 0 [pid 309] mkdir("./173", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 5667] +++ exited with 0 +++ [pid 5660] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 310] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5660, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] lstat("./177/bus", [pid 307] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 307] <... openat resumed>) = 3 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] fstat(3, [pid 310] getdents64(4, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 307] getdents64(3, [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] <... close resumed>) = 0 [pid 307] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] rmdir("./177/bus" [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... rmdir resumed>) = 0 [pid 307] lstat("./176/binderfs", [pid 310] getdents64(3, [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] unlink("./176/binderfs" [pid 310] close(3 [pid 307] <... unlink resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 307] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] rmdir("./177") = 0 [ 133.726422][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 133.749419][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] mkdir("./178", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] <... openat resumed>) = 3 [pid 310] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [ 133.801970][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 133.815281][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] close(3 [pid 310] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] close(3 [pid 309] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5668 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5669 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5670 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5670 attached [pid 5670] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 5671 attached ./strace-static-x86_64: Process 5669 attached ./strace-static-x86_64: Process 5668 attached ) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5671 [pid 5670] chdir("./175" [pid 5668] set_robust_list(0x55555748e5e0, 24 [pid 5671] set_robust_list(0x55555748e5e0, 24 [pid 5670] <... chdir resumed>) = 0 [pid 5669] set_robust_list(0x55555748e5e0, 24 [pid 5668] <... set_robust_list resumed>) = 0 [pid 5671] <... set_robust_list resumed>) = 0 [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5669] <... set_robust_list resumed>) = 0 [pid 5668] chdir("./178" [pid 5670] <... prctl resumed>) = 0 [pid 5671] chdir("./173" [pid 5670] setpgid(0, 0 [pid 5669] chdir("./180" [pid 5668] <... chdir resumed>) = 0 [pid 5671] <... chdir resumed>) = 0 [pid 5670] <... setpgid resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5669] <... chdir resumed>) = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5668] <... prctl resumed>) = 0 [pid 5670] <... openat resumed>) = 3 [pid 5669] <... prctl resumed>) = 0 [pid 5670] write(3, "1000", 4 [pid 5668] setpgid(0, 0 [pid 5669] setpgid(0, 0 [pid 5670] <... write resumed>) = 4 [pid 5669] <... setpgid resumed>) = 0 [pid 5668] <... setpgid resumed>) = 0 [pid 5670] close(3 [pid 5671] <... prctl resumed>) = 0 [pid 5670] <... close resumed>) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5670] symlink("/dev/binderfs", "./binderfs" [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5671] setpgid(0, 0 [pid 5668] <... openat resumed>) = 3 [pid 5671] <... setpgid resumed>) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] <... symlink resumed>) = 0 [pid 5668] write(3, "1000", 4 [pid 5671] write(3, "1000", 4 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... openat resumed>) = 3 [pid 5670] <... futex resumed>) = 0 [pid 5668] <... write resumed>) = 4 [pid 5670] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5669] write(3, "1000", 4 [pid 5668] close(3 [pid 5671] <... write resumed>) = 4 [pid 5670] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5669] <... write resumed>) = 4 [pid 5668] <... close resumed>) = 0 [pid 5671] close(3 [pid 5670] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5669] close(3 [pid 5668] symlink("/dev/binderfs", "./binderfs" [pid 5671] <... close resumed>) = 0 [pid 5670] <... mprotect resumed>) = 0 [pid 5669] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5671] symlink("/dev/binderfs", "./binderfs" [pid 5668] <... symlink resumed>) = 0 [pid 5670] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5669] symlink("/dev/binderfs", "./binderfs" [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... symlink resumed>) = 0 [pid 5669] <... symlink resumed>) = 0 [pid 5668] <... futex resumed>) = 0 [pid 5670] <... clone resumed>, parent_tid=[5672], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5672 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5670] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = 0 [pid 5668] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5668] <... mprotect resumed>) = 0 [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5669] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5668] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] lstat("./176/bus", [pid 5671] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5669] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5671] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5669] <... mprotect resumed>) = 0 [pid 5668] <... clone resumed>, parent_tid=[5673], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5673 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5671] <... mprotect resumed>) = 0 [pid 5669] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5668] <... futex resumed>) = 0 [pid 308] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5669] <... clone resumed>, parent_tid=[5674], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5674 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5671] <... clone resumed>, parent_tid=[5675], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5675 [pid 308] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5675 attached ./strace-static-x86_64: Process 5673 attached ) = 0 [pid 308] <... openat resumed>) = 4 [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] fstat(4, [pid 5675] set_robust_list(0x7f19bd6049e0, 24 [pid 5673] set_robust_list(0x7f19bd6049e0, 24 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 5672 attached [pid 308] getdents64(4, [pid 5672] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5672] memfd_create("syzkaller", 0 [pid 5675] <... set_robust_list resumed>) = 0 [pid 308] getdents64(4, [pid 5672] <... memfd_create resumed>) = 3 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5673] memfd_create("syzkaller", 0 [pid 308] close(4) = 0 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] rmdir("./176/bus" [pid 5672] <... mmap resumed>) = 0x7f19b51e4000 [pid 5675] memfd_create("syzkaller", 0 [pid 5673] <... memfd_create resumed>) = 3 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5674 attached [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] getdents64(3, [pid 5674] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5673] <... mmap resumed>) = 0x7f19b51e4000 [pid 5675] <... memfd_create resumed>) = 3 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5674] memfd_create("syzkaller", 0 [pid 308] close(3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5674] <... memfd_create resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] rmdir("./176" [pid 5675] <... mmap resumed>) = 0x7f19b51e4000 [pid 5674] <... mmap resumed>) = 0x7f19b51e4000 [pid 308] <... rmdir resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./176/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./176/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./176") = 0 [pid 307] mkdir("./177", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 308] mkdir("./177", 0777 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... mkdir resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5676 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 5674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5677 [pid 5672] <... write resumed>) = 1048576 [pid 5672] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5677 attached ./strace-static-x86_64: Process 5676 attached [pid 5676] set_robust_list(0x55555748e5e0, 24 [pid 5677] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5677] chdir("./177") = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5676] <... set_robust_list resumed>) = 0 [pid 5676] chdir("./177") = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5677] <... openat resumed>) = 3 [pid 5676] <... prctl resumed>) = 0 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs" [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5676] setpgid(0, 0 [pid 5677] <... symlink resumed>) = 0 [pid 5676] <... setpgid resumed>) = 0 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5677] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5677] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5677] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5676] <... openat resumed>) = 3 [pid 5676] write(3, "1000", 4 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5674] <... write resumed>) = 1048576 [pid 5677] <... clone resumed>, parent_tid=[5679], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5679 [pid 5676] <... write resumed>) = 4 [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] close(3 [pid 5677] <... futex resumed>) = 0 [pid 5676] <... close resumed>) = 0 [pid 5672] <... ioctl resumed>) = 0 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5672] close(3) = 0 [pid 5672] mkdir("./bus", 0777 [pid 5674] munmap(0x7f19b51e4000, 1048576 [pid 5672] <... mkdir resumed>) = 0 [pid 5672] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5674] <... munmap resumed>) = 0 [pid 5676] symlink("/dev/binderfs", "./binderfs" [pid 5674] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5674] ioctl(4, LOOP_SET_FD, 3 [pid 5676] <... symlink resumed>) = 0 [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... ioctl resumed>) = 0 [pid 5674] close(3) = 0 [pid 5674] mkdir("./bus", 0777 [pid 5676] <... futex resumed>) = 0 [pid 5676] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5674] <... mkdir resumed>) = 0 [pid 5676] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5674] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5676] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5676] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5679 attached , parent_tid=[5681], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5681 [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5679] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5679] memfd_create("syzkaller", 0) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5681 attached [pid 5675] <... write resumed>) = 1048576 [pid 5681] set_robust_list(0x7f19bd6049e0, 24 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5675] munmap(0x7f19b51e4000, 1048576 [pid 5673] <... write resumed>) = 1048576 [pid 5672] <... mount resumed>) = 0 [pid 5673] munmap(0x7f19b51e4000, 1048576 [pid 5672] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./bus" [pid 5673] <... munmap resumed>) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5672] <... chdir resumed>) = 0 [pid 5673] <... openat resumed>) = 4 [pid 5672] ioctl(4, LOOP_CLR_FD [pid 5673] ioctl(4, LOOP_SET_FD, 3 [pid 5672] <... ioctl resumed>) = 0 [pid 5672] close(4 [pid 5674] <... mount resumed>) = 0 [pid 5672] <... close resumed>) = 0 [pid 5673] <... ioctl resumed>) = 0 [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] close(3 [pid 5672] <... futex resumed>) = 1 [pid 5673] <... close resumed>) = 0 [pid 5672] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5673] mkdir("./bus", 0777 [pid 5670] <... futex resumed>) = 0 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = 0 [pid 5670] <... futex resumed>) = 1 [pid 5672] chdir("./file0" [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... mkdir resumed>) = 0 [pid 5672] <... chdir resumed>) = 0 [pid 5673] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] <... futex resumed>) = 0 [pid 5672] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... set_robust_list resumed>) = 0 [pid 5670] <... futex resumed>) = 0 [pid 5681] memfd_create("syzkaller", 0 [pid 5672] <... open resumed>) = 4 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] <... futex resumed>) = 0 [pid 5681] <... memfd_create resumed>) = 3 [pid 5672] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5672] <... mount resumed>) = 0 [pid 5670] <... futex resumed>) = 0 [pid 5681] <... mmap resumed>) = 0x7f19b51e4000 [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 0 [pid 5670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5672] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... open resumed>) = 5 [pid 5670] <... futex resumed>) = 0 [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... futex resumed>) = 0 [pid 5670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5672] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... munmap resumed>) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5672] <... openat resumed>) = 6 [pid 5670] <... futex resumed>) = 0 [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... openat resumed>) = 4 [pid 5672] <... futex resumed>) = 0 [pid 5670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5675] ioctl(4, LOOP_SET_FD, 3 [pid 5672] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... write resumed>) = 262144 [pid 5670] <... futex resumed>) = 0 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5674] chdir("./bus") = 0 [pid 5674] ioctl(4, LOOP_CLR_FD [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = 0 [pid 5670] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5670] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] <... write resumed>) = 1048576 [pid 5679] munmap(0x7f19b51e4000, 1048576 [pid 5672] <... futex resumed>) = 1 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5672] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5679] <... munmap resumed>) = 0 [ 133.970246][ T5672] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/175/bus supports timestamps until 2038 (0x7fffffff) [ 133.986476][ T5674] ext4 filesystem being mounted at /root/syzkaller.URAKkl/180/bus supports timestamps until 2038 (0x7fffffff) [pid 5679] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5681] <... write resumed>) = 1048576 [pid 5679] <... openat resumed>) = 4 [pid 5675] <... ioctl resumed>) = 0 [pid 5674] <... ioctl resumed>) = 0 [pid 5681] munmap(0x7f19b51e4000, 1048576 [pid 5679] ioctl(4, LOOP_SET_FD, 3 [pid 5675] close(3 [pid 5674] close(4 [pid 5675] <... close resumed>) = 0 [pid 5673] <... mount resumed>) = 0 [pid 5675] mkdir("./bus", 0777 [pid 5673] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] <... mkdir resumed>) = 0 [pid 5675] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5681] <... munmap resumed>) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5673] chdir("./bus") = 0 [pid 5673] ioctl(4, LOOP_CLR_FD [pid 5679] <... ioctl resumed>) = 0 [pid 5674] <... close resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5674] chdir("./file0" [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... chdir resumed>) = 0 [pid 5669] <... futex resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5674] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] <... open resumed>) = 4 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5674] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... mount resumed>) = 0 [pid 5669] <... futex resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5674] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... open resumed>) = 5 [pid 5669] <... futex resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5674] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5674] <... openat resumed>) = 6 [pid 5669] <... futex resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] <... futex resumed>) = 0 [pid 5669] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5674] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] close(3 [pid 5669] <... futex resumed>) = 0 [pid 5681] <... openat resumed>) = 4 [pid 5679] <... close resumed>) = 0 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] ioctl(4, LOOP_SET_FD, 3 [pid 5679] mkdir("./bus", 0777) = 0 [pid 5679] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5681] <... ioctl resumed>) = 0 [pid 5681] close(3 [pid 5673] <... ioctl resumed>) = 0 [pid 5681] <... close resumed>) = 0 [pid 5681] mkdir("./bus", 0777) = 0 [pid 5673] close(4 [pid 5681] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5673] <... close resumed>) = 0 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] chdir("./file0" [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... chdir resumed>) = 0 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] <... futex resumed>) = 0 [pid 5673] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5668] <... futex resumed>) = 0 [pid 5674] <... write resumed>) = 262144 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 134.024483][ T5673] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/178/bus supports timestamps until 2038 (0x7fffffff) [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... futex resumed>) = 0 [pid 5669] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5674] <... futex resumed>) = 1 [pid 5669] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5674] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5673] <... open resumed>) = 4 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5673] <... futex resumed>) = 1 [pid 5673] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5669] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 134.072071][ T5675] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/173/bus supports timestamps until 2038 (0x7fffffff) [ 134.105865][ T5679] ext4 filesystem being mounted at /root/syzkaller.69675s/177/bus supports timestamps until 2038 (0x7fffffff) [pid 5673] <... write resumed>) = 262144 [pid 5672] <... write resumed>) = 1048576 [pid 5681] <... mount resumed>) = 0 [pid 5675] <... mount resumed>) = 0 [pid 5672] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5679] <... mount resumed>) = 0 [pid 5675] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5672] <... futex resumed>) = 0 [pid 5681] <... openat resumed>) = 3 [pid 5679] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5674] <... write resumed>) = 1048576 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] exit_group(0 [pid 5675] <... openat resumed>) = 3 [pid 5681] chdir("./bus" [pid 5675] chdir("./bus" [pid 5672] +++ exited with 0 +++ [pid 5670] <... exit_group resumed>) = ? [pid 5681] <... chdir resumed>) = 0 [pid 5679] <... openat resumed>) = 3 [pid 5675] <... chdir resumed>) = 0 [pid 5674] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] <... futex resumed>) = 1 [pid 5670] +++ exited with 0 +++ [pid 5668] <... futex resumed>) = 0 [pid 5669] exit_group(0 [pid 5668] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5669] <... exit_group resumed>) = ? [pid 5668] <... futex resumed>) = 0 [pid 5668] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] ioctl(4, LOOP_CLR_FD) = 0 [pid 5681] close(4) = 0 [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5676] <... futex resumed>) = 0 [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] <... futex resumed>) = 0 [pid 5681] chdir("./file0" [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... chdir resumed>) = 0 [pid 5675] ioctl(4, LOOP_CLR_FD [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5670, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] chdir("./bus" [pid 5675] <... ioctl resumed>) = 0 [pid 5674] <... futex resumed>) = ? [pid 5673] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5681] <... futex resumed>) = 1 [pid 5679] <... chdir resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] close(4 [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] ioctl(4, LOOP_CLR_FD [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... close resumed>) = 0 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] <... futex resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5679] <... ioctl resumed>) = 0 [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... open resumed>) = 4 [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 305] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] close(4 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] <... futex resumed>) = 1 [pid 5679] <... close resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] chdir("./file0" [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5676] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5681] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] <... mount resumed>) = 0 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5675] <... chdir resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5674] +++ exited with 0 +++ [pid 5669] +++ exited with 0 +++ [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] fstat(3, [pid 5681] <... futex resumed>) = 1 [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] chdir("./file0" [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... restart_syscall resumed>) = 0 [pid 305] getdents64(3, [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] <... chdir resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5681] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5681] <... open resumed>) = 5 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 306] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] <... futex resumed>) = 1 [pid 5676] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... open resumed>) = 4 [pid 306] <... openat resumed>) = 3 [pid 5677] <... futex resumed>) = 0 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] <... futex resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] fstat(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5681] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./175/binderfs", [pid 5681] <... openat resumed>) = 6 [pid 5679] <... open resumed>) = 4 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] getdents64(3, [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5681] <... futex resumed>) = 1 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] unlink("./175/binderfs" [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... mount resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./180/binderfs", [pid 305] <... unlink resumed>) = 0 [pid 5681] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5679] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5681] <... write resumed>) = 262144 [pid 5679] <... mount resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 134.111189][ T5681] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/177/bus supports timestamps until 2038 (0x7fffffff) [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] unlink("./180/binderfs" [pid 305] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 5681] <... futex resumed>) = 1 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5676] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... open resumed>) = 5 [pid 5681] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5676] <... futex resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5679] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5676] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5679] <... open resumed>) = 5 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5675] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... openat resumed>) = 6 [pid 5668] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5679] <... openat resumed>) = 6 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5675] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5679] <... futex resumed>) = 1 [pid 5677] <... futex resumed>) = 0 [pid 5675] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5673] <... write resumed>) = 1048576 [pid 5673] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5673] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5668] exit_group(0 [pid 5673] <... futex resumed>) = ? [pid 5668] <... exit_group resumed>) = ? [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5673] +++ exited with 0 +++ [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] +++ exited with 0 +++ [ 134.166458][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 134.182051][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 134.198135][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5677] <... futex resumed>) = 0 [pid 5675] <... write resumed>) = 262144 [pid 5679] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5668, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./178/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./178/binderfs") = 0 [pid 310] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5679] <... write resumed>) = 262144 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5679] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] <... futex resumed>) = 0 [pid 5671] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5675] <... futex resumed>) = 1 [pid 5675] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5676] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5677] <... futex resumed>) = 0 [pid 5681] <... write resumed>) = 1048576 [pid 5677] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5681] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5679] <... futex resumed>) = 0 [pid 5677] <... futex resumed>) = 1 [pid 5681] <... futex resumed>) = 0 [pid 5677] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5681] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5679] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5676] exit_group(0) = ? [pid 5681] <... futex resumed>) = ? [pid 5681] +++ exited with 0 +++ [pid 5676] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5676, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 307] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5679] <... write resumed>) = 1048576 [pid 307] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5679] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5677] <... futex resumed>) = 0 [pid 5677] exit_group(0 [pid 307] getdents64(3, [pid 5677] <... exit_group resumed>) = ? [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 307] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5671] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5671] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [ 134.220518][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 134.239069][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.253752][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./177/binderfs" [pid 5679] <... futex resumed>) = ? [pid 307] <... unlink resumed>) = 0 [pid 307] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5675] <... write resumed>) = 1048576 [pid 5675] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5675] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] exit_group(0 [pid 5675] <... futex resumed>) = ? [pid 5671] <... exit_group resumed>) = ? [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./175/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./175/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./175") = 0 [pid 305] mkdir("./176", 0777) = 0 [ 134.302742][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.317097][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5675] +++ exited with 0 +++ [pid 5671] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] umount2("./173", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./173", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./173/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./173/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./173/binderfs") = 0 [pid 309] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./180/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./180/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./180") = 0 [pid 306] mkdir("./181", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5679] +++ exited with 0 +++ [pid 5677] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... close resumed>) = 0 [pid 310] lstat("./178/bus", [pid 307] lstat("./177/bus", [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5698 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 307] fstat(4, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 307] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 307] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 307] close(4 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 310] rmdir("./178/bus" [pid 307] rmdir("./177/bus" [pid 310] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 310] getdents64(3, [pid 307] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [ 134.420999][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.434609][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 310] close(3 [pid 307] close(3 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 310] rmdir("./178" [pid 307] rmdir("./177" [pid 310] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 310] mkdir("./179", 0777 [pid 307] mkdir("./178", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] ioctl(3, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 307] close(3 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5699 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5700 ./strace-static-x86_64: Process 5698 attached [pid 5698] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5698] chdir("./176") = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5698] setpgid(0, 0) = 0 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5698] write(3, "1000", 4) = 4 [pid 5698] close(3) = 0 [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5698] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5698] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5701], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5701 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5700 attached [pid 5700] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5700] chdir("./178") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5700] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5700] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5702], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5702 [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5701 attached [pid 5701] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5701] memfd_create("syzkaller", 0) = 3 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5677, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 5702 attached [pid 5702] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5702] memfd_create("syzkaller", 0) = 3 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 309] <... umount2 resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 309] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... openat resumed>) = 3 [pid 308] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] ioctl(3, LOOP_CLR_FD [pid 309] lstat("./173/bus", [pid 308] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] umount2("./173/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] fstat(3, [pid 306] close(3 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... close resumed>) = 0 [pid 308] getdents64(3, [pid 309] openat(AT_FDCWD, "./173/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... openat resumed>) = 4 [pid 308] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] fstat(4, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./177/binderfs", [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5703 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] getdents64(4, [pid 308] unlink("./177/binderfs") = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./173/bus" [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 309] <... rmdir resumed>) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./173") = 0 [pid 309] mkdir("./174", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5704 [pid 5702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 5699 attached [pid 5699] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 5704 attached ) = 0 [pid 5699] chdir("./179" [pid 5704] set_robust_list(0x55555748e5e0, 24 [pid 5699] <... chdir resumed>) = 0 [pid 5704] <... set_robust_list resumed>) = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5704] chdir("./174") = 0 [pid 5699] <... prctl resumed>) = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5699] setpgid(0, 0./strace-static-x86_64: Process 5703 attached ) = 0 [pid 5704] <... prctl resumed>) = 0 [pid 5703] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5704] setpgid(0, 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5704] <... setpgid resumed>) = 0 [pid 5699] <... openat resumed>) = 3 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5699] write(3, "1000", 4 [pid 5703] chdir("./181") = 0 [pid 5704] <... openat resumed>) = 3 [pid 5699] <... write resumed>) = 4 [pid 5704] write(3, "1000", 4 [pid 5699] close(3) = 0 [pid 5704] <... write resumed>) = 4 [pid 5704] close(3 [pid 5699] symlink("/dev/binderfs", "./binderfs" [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] <... close resumed>) = 0 [pid 5703] setpgid(0, 0 [pid 5699] <... symlink resumed>) = 0 [pid 5704] symlink("/dev/binderfs", "./binderfs" [pid 5703] <... setpgid resumed>) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5704] <... symlink resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5704] <... futex resumed>) = 0 [pid 5699] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5704] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5699] <... mprotect resumed>) = 0 [pid 5704] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5704] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5699] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5704] <... mprotect resumed>) = 0 [pid 5699] <... clone resumed>, parent_tid=[5705], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5705 [pid 5704] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5703] <... openat resumed>) = 3 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... clone resumed>, parent_tid=[5706], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5706 [pid 5699] <... futex resumed>) = 0 [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5704] <... futex resumed>) = 0 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5706 attached ./strace-static-x86_64: Process 5705 attached [pid 5706] set_robust_list(0x7f19bd6049e0, 24 [pid 5705] set_robust_list(0x7f19bd6049e0, 24 [pid 5703] <... symlink resumed>) = 0 [pid 5706] <... set_robust_list resumed>) = 0 [pid 5705] <... set_robust_list resumed>) = 0 [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5701] <... write resumed>) = 1048576 [pid 5703] <... futex resumed>) = 0 [pid 5703] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5706] memfd_create("syzkaller", 0 [pid 5705] memfd_create("syzkaller", 0 [pid 5703] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5703] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5706] <... memfd_create resumed>) = 3 [pid 5705] <... memfd_create resumed>) = 3 [pid 5703] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5707], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5707 [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5706] <... mmap resumed>) = 0x7f19b51e4000 [pid 5705] <... mmap resumed>) = 0x7f19b51e4000 [pid 5701] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3 [pid 5702] <... write resumed>) = 1048576 [pid 5702] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5701] <... ioctl resumed>) = 0 [pid 5701] close(3) = 0 [pid 5701] mkdir("./bus", 0777 [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5701] <... mkdir resumed>) = 0 [pid 5701] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5702] <... openat resumed>) = 4 [pid 5702] ioctl(4, LOOP_SET_FD, 3 [pid 5706] <... write resumed>) = 1048576 [pid 5705] <... write resumed>) = 1048576 [pid 5702] <... ioctl resumed>) = 0 [pid 5701] <... mount resumed>) = 0 [pid 5701] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./bus") = 0 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5702] close(3 [pid 5701] close(4) = 0 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5702] <... close resumed>) = 0 [pid 5701] <... futex resumed>) = 1 [pid 5701] chdir("./file0") = 0 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... futex resumed>) = 1 [pid 5701] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5702] mkdir("./bus", 0777 [pid 5705] munmap(0x7f19b51e4000, 1048576 [pid 5706] munmap(0x7f19b51e4000, 1048576 [pid 5702] <... mkdir resumed>) = 0 [pid 5705] <... munmap resumed>) = 0 [pid 5701] <... open resumed>) = 4 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... futex resumed>) = 1 [pid 5701] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5705] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5702] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5701] <... mount resumed>) = 0 [pid 5705] <... openat resumed>) = 4 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] <... munmap resumed>) = 0 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... futex resumed>) = 1 [pid 5701] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5706] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5705] ioctl(4, LOOP_SET_FD, 3 [pid 5701] <... futex resumed>) = 1 [pid 5701] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... futex resumed>) = 1 [pid 5701] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651./strace-static-x86_64: Process 5707 attached [pid 5707] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5707] memfd_create("syzkaller", 0) = 3 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 134.538199][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 134.575554][ T5701] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/176/bus supports timestamps until 2038 (0x7fffffff) [pid 5701] <... write resumed>) = 262144 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5698] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5701] <... futex resumed>) = 1 [pid 5701] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5705] <... ioctl resumed>) = 0 [pid 5706] <... openat resumed>) = 4 [pid 5705] close(3) = 0 [pid 5705] mkdir("./bus", 0777 [pid 5706] ioctl(4, LOOP_SET_FD, 3 [pid 5705] <... mkdir resumed>) = 0 [pid 5705] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5707] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5701] <... write resumed>) = 1048576 [pid 5701] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5698] <... futex resumed>) = 0 [pid 5698] exit_group(0) = ? [pid 5701] <... futex resumed>) = ? [pid 5706] <... ioctl resumed>) = 0 [pid 5701] +++ exited with 0 +++ [pid 5698] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5698, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5706] close(3 [pid 305] <... restart_syscall resumed>) = 0 [pid 5706] <... close resumed>) = 0 [pid 5706] mkdir("./bus", 0777 [pid 305] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, [pid 5706] <... mkdir resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 5706] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./176/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./176/binderfs") = 0 [pid 305] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5707] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 134.603614][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 134.633434][ T5702] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/178/bus supports timestamps until 2038 (0x7fffffff) [pid 5707] ioctl(4, LOOP_SET_FD, 3 [pid 5702] <... mount resumed>) = 0 [pid 5702] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5702] chdir("./bus") = 0 [pid 5702] ioctl(4, LOOP_CLR_FD [pid 5705] <... mount resumed>) = 0 [pid 5705] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5705] chdir("./bus") = 0 [pid 5705] ioctl(4, LOOP_CLR_FD [pid 5706] <... mount resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5707] <... ioctl resumed>) = 0 [pid 5706] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5702] <... ioctl resumed>) = 0 [pid 308] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5705] <... ioctl resumed>) = 0 [pid 5707] close(3 [pid 5706] <... openat resumed>) = 3 [pid 5705] close(4 [pid 5702] close(4 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5702] <... close resumed>) = 0 [pid 5707] <... close resumed>) = 0 [pid 5705] <... close resumed>) = 0 [pid 308] lstat("./177/bus", [pid 5707] mkdir("./bus", 0777 [pid 5706] chdir("./bus" [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5705] <... futex resumed>) = 1 [pid 5702] <... futex resumed>) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 0 [pid 308] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5707] <... mkdir resumed>) = 0 [pid 5706] <... chdir resumed>) = 0 [pid 5705] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] chdir("./file0" [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = 0 [pid 5707] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5706] ioctl(4, LOOP_CLR_FD [pid 5705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] <... chdir resumed>) = 0 [pid 5700] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] chdir("./file0" [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] <... chdir resumed>) = 0 [pid 5702] <... futex resumed>) = 0 [pid 5700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 134.670414][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 134.681090][ T5705] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/179/bus supports timestamps until 2038 (0x7fffffff) [ 134.684520][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 134.698795][ T5706] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/174/bus supports timestamps until 2038 (0x7fffffff) [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... openat resumed>) = 4 [pid 5705] <... futex resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(4, [pid 5705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5699] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5702] <... open resumed>) = 4 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] <... open resumed>) = 4 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(4, [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] lstat("./176/bus", [pid 5702] <... futex resumed>) = 1 [pid 5700] <... futex resumed>) = 0 [pid 308] close(4 [pid 5705] <... futex resumed>) = 1 [pid 5702] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = 0 [pid 5705] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] <... mount resumed>) = 0 [pid 5700] <... futex resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] <... futex resumed>) = 0 [pid 308] rmdir("./177/bus" [pid 5705] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5702] <... futex resumed>) = 0 [pid 5700] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... rmdir resumed>) = 0 [pid 5705] <... mount resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5700] <... futex resumed>) = 0 [pid 308] getdents64(3, [pid 5705] <... futex resumed>) = 1 [pid 5699] <... futex resumed>) = 0 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5699] <... futex resumed>) = 0 [pid 308] close(3 [pid 305] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 4 [pid 308] rmdir("./177" [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, [pid 308] <... rmdir resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] mkdir("./178", 0777 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./176/bus" [pid 308] <... mkdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./176" [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] <... rmdir resumed>) = 0 [pid 305] mkdir("./177", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5707] <... mount resumed>) = 0 [pid 5707] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5707] chdir("./bus") = 0 [pid 5707] ioctl(4, LOOP_CLR_FD [pid 5706] <... ioctl resumed>) = 0 [pid 5702] <... open resumed>) = 5 [pid 305] <... openat resumed>) = 3 [pid 5706] close(4 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... ioctl resumed>) = 0 [pid 5706] <... close resumed>) = 0 [pid 5702] <... futex resumed>) = 1 [pid 308] <... openat resumed>) = 3 [pid 5705] <... open resumed>) = 5 [pid 5700] <... futex resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5707] close(4 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5707] <... close resumed>) = 0 [pid 5706] <... futex resumed>) = 1 [pid 5705] <... futex resumed>) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5700] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(3 [pid 305] <... close resumed>) = 0 [pid 5707] <... futex resumed>) = 1 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] <... openat resumed>) = 6 [pid 5704] <... futex resumed>) = 0 [pid 5703] <... futex resumed>) = 0 [pid 5699] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5707] chdir("./file0" [pid 5706] chdir("./file0" [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] <... openat resumed>) = 6 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5707] <... chdir resumed>) = 0 [pid 5706] <... chdir resumed>) = 0 [pid 5705] <... futex resumed>) = 0 [pid 5703] <... futex resumed>) = 0 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5723 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5702] <... futex resumed>) = 1 [pid 5700] <... futex resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5724 [pid 5707] <... futex resumed>) = 0 [pid 5706] <... futex resumed>) = 1 [pid 5705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5704] <... futex resumed>) = 0 [pid 5703] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5702] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5700] <... futex resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5707] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... open resumed>) = 4 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5707] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... mount resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5707] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... open resumed>) = 5 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5707] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5707] <... openat resumed>) = 6 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5703] <... futex resumed>) = 0 [pid 5707] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5706] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5705] <... write resumed>) = 262144 [pid 5704] <... futex resumed>) = 0 [pid 5702] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5724 attached [pid 5724] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5724] chdir("./178") = 0 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5724] setpgid(0, 0) = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5724] write(3, "1000", 4) = 4 [pid 5724] close(3) = 0 [pid 5707] <... write resumed>) = 262144 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... futex resumed>) = 0 [pid 5707] <... futex resumed>) = 1 [pid 5703] <... futex resumed>) = 0 [pid 5724] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5707] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5703] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5703] <... futex resumed>) = 0 [pid 5724] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5703] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5724] <... mprotect resumed>) = 0 [pid 5724] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5706] <... open resumed>) = 4 [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] <... write resumed>) = 262144 ./strace-static-x86_64: Process 5723 attached [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] <... futex resumed>) = 1 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = 0 [pid 5724] <... clone resumed>, parent_tid=[5725], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5725 [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5725 attached [pid 5725] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5706] <... futex resumed>) = 1 [pid 5699] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = 0 [pid 5705] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5702] <... futex resumed>) = 1 [pid 5700] <... futex resumed>) = 0 [ 134.758955][ T5707] ext4 filesystem being mounted at /root/syzkaller.URAKkl/181/bus supports timestamps until 2038 (0x7fffffff) [pid 5700] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] <... futex resumed>) = 0 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5725] memfd_create("syzkaller", 0 [pid 5723] set_robust_list(0x55555748e5e0, 24 [pid 5706] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5704] <... futex resumed>) = 0 [pid 5702] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5700] <... futex resumed>) = 0 [pid 5699] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] <... memfd_create resumed>) = 3 [pid 5723] <... set_robust_list resumed>) = 0 [pid 5706] <... mount resumed>) = 0 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5700] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... mmap resumed>) = 0x7f19b51e4000 [pid 5723] chdir("./177" [pid 5706] <... futex resumed>) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5723] <... chdir resumed>) = 0 [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5705] <... write resumed>) = 1048576 [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5704] <... futex resumed>) = 0 [pid 5723] setpgid(0, 0 [pid 5706] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5705] <... futex resumed>) = 1 [pid 5699] <... futex resumed>) = 0 [pid 5723] <... setpgid resumed>) = 0 [pid 5706] <... open resumed>) = 5 [pid 5705] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5699] exit_group(0 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5707] <... write resumed>) = 1048576 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5705] <... futex resumed>) = ? [pid 5699] <... exit_group resumed>) = ? [pid 5723] <... openat resumed>) = 3 [pid 5706] <... futex resumed>) = 1 [pid 5723] write(3, "1000", 4 [pid 5704] <... futex resumed>) = 0 [pid 5723] <... write resumed>) = 4 [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] close(3 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5705] +++ exited with 0 +++ [pid 5704] <... futex resumed>) = 0 [pid 5707] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5699] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5699, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5723] <... close resumed>) = 0 [pid 5707] <... futex resumed>) = 1 [pid 5706] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5703] <... futex resumed>) = 0 [pid 5703] exit_group(0 [pid 5723] symlink("/dev/binderfs", "./binderfs" [pid 5706] <... openat resumed>) = 6 [pid 5703] <... exit_group resumed>) = ? [pid 310] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5723] <... symlink resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5723] <... futex resumed>) = 0 [pid 5707] +++ exited with 0 +++ [pid 5706] <... futex resumed>) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5703] +++ exited with 0 +++ [pid 310] getdents64(3, [pid 5723] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5703, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5723] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5706] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5704] <... futex resumed>) = 0 [pid 310] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5723] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5706] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5723] <... mprotect resumed>) = 0 [pid 310] lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./179/binderfs" [pid 5725] <... write resumed>) = 1048576 [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5723] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5706] <... write resumed>) = 262144 [pid 306] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5723] <... clone resumed>, parent_tid=[5726], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5726 [pid 306] <... openat resumed>) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./181/binderfs", [pid 5723] <... futex resumed>) = 0 [pid 5706] <... futex resumed>) = 1 [pid 5704] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5704] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] unlink("./181/binderfs" [pid 5706] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5704] <... futex resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5704] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5726 attached [pid 5726] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5726] memfd_create("syzkaller", 0) = 3 [pid 5726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5725] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5725] ioctl(4, LOOP_SET_FD, 3 [pid 5726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5700] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5725] <... ioctl resumed>) = 0 [pid 5725] close(3) = 0 [pid 5725] mkdir("./bus", 0777) = 0 [pid 5725] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5726] <... write resumed>) = 1048576 [pid 5726] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [ 134.857538][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 134.875077][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.888964][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5726] ioctl(4, LOOP_SET_FD, 3 [pid 5706] <... write resumed>) = 1048576 [pid 5702] <... write resumed>) = 1048576 [pid 5726] <... ioctl resumed>) = 0 [pid 5706] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5702] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5700] exit_group(0 [pid 5706] <... futex resumed>) = 1 [pid 5704] <... futex resumed>) = 0 [pid 5702] <... futex resumed>) = ? [pid 5700] <... exit_group resumed>) = ? [pid 5706] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5704] exit_group(0 [pid 5702] +++ exited with 0 +++ [pid 5700] +++ exited with 0 +++ [pid 5706] <... futex resumed>) = ? [pid 5704] <... exit_group resumed>) = ? [pid 5706] +++ exited with 0 +++ [pid 5704] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5700, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 5726] close(3) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5704, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5726] mkdir("./bus", 0777 [pid 307] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./174", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] <... mkdir resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./174", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5726] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 307] <... openat resumed>) = 3 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] fstat(3, [pid 309] getdents64(3, [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] getdents64(3, [pid 309] umount2("./174/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] lstat("./174/binderfs", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] lstat("./178/binderfs", [pid 309] unlink("./174/binderfs" [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... unlink resumed>) = 0 [pid 307] unlink("./178/binderfs" [pid 309] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... unlink resumed>) = 0 [ 134.909690][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.942558][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] <... mount resumed>) = 0 [pid 5725] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5725] chdir("./bus") = 0 [ 134.952989][ T5725] ext4 filesystem being mounted at /root/syzkaller.69675s/178/bus supports timestamps until 2038 (0x7fffffff) [ 134.956283][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 134.967938][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 134.993914][ T5726] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/177/bus supports timestamps until 2038 (0x7fffffff) [pid 5725] ioctl(4, LOOP_CLR_FD [pid 5726] <... mount resumed>) = 0 [pid 5726] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5726] chdir("./bus") = 0 [pid 5726] ioctl(4, LOOP_CLR_FD [pid 5725] <... ioctl resumed>) = 0 [pid 5725] close(4 [pid 310] <... umount2 resumed>) = 0 [pid 5725] <... close resumed>) = 0 [pid 310] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 5725] chdir("./file0" [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] <... chdir resumed>) = 0 [pid 5724] <... futex resumed>) = 0 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5725] <... futex resumed>) = 0 [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] <... futex resumed>) = 0 [pid 5725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] lstat("./179/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5725] <... open resumed>) = 4 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 310] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5725] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5724] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5725] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 4 [pid 5725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(4, [pid 5725] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5724] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] getdents64(4, [pid 5725] <... open resumed>) = 5 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 5725] <... futex resumed>) = 1 [pid 5724] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5725] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(4 [pid 5725] <... openat resumed>) = 6 [pid 5724] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] rmdir("./179/bus" [pid 5725] <... futex resumed>) = 0 [pid 5724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5725] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 5726] <... ioctl resumed>) = 0 [pid 5724] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 5726] close(4 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./179" [pid 5725] <... write resumed>) = 262144 [pid 310] <... rmdir resumed>) = 0 [pid 310] mkdir("./180", 0777 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 5724] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5724] <... futex resumed>) = 0 [pid 5724] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5725] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5725] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5724] <... futex resumed>) = 0 [pid 5725] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5724] exit_group(0) = ? [pid 5725] <... futex resumed>) = ? [ 134.995205][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5726] <... close resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] <... futex resumed>) = 1 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] close(3 [pid 5723] <... futex resumed>) = 0 [pid 309] lstat("./174/bus", [pid 310] <... close resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] umount2("./174/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] <... futex resumed>) = 0 [pid 5723] <... futex resumed>) = 1 [pid 307] <... umount2 resumed>) = 0 [pid 306] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] chdir("./file0" [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5726] <... chdir resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5733 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./181/bus", [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] lstat("./178/bus", [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./174/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 4 [pid 307] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5723] <... futex resumed>) = 0 [pid 309] fstat(4, [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5726] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 306] fstat(4, [pid 307] fstat(4, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 5726] <... open resumed>) = 4 [pid 5725] +++ exited with 0 +++ [pid 5724] +++ exited with 0 +++ [pid 309] getdents64(4, [pid 307] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, ./strace-static-x86_64: Process 5733 attached [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 309] getdents64(4, [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5724, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5733] set_robust_list(0x55555748e5e0, 24 [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4 [pid 5733] <... set_robust_list resumed>) = 0 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5723] <... futex resumed>) = 0 [pid 309] close(4 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] close(4 [pid 306] <... close resumed>) = 0 [pid 5733] chdir("./180" [pid 5726] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 308] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... close resumed>) = 0 [pid 306] rmdir("./181/bus" [pid 5733] <... chdir resumed>) = 0 [pid 5726] <... mount resumed>) = 0 [pid 309] rmdir("./174/bus" [pid 308] <... openat resumed>) = 3 [pid 307] rmdir("./178/bus" [pid 306] <... rmdir resumed>) = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 308] fstat(3, [pid 307] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 5733] <... prctl resumed>) = 0 [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5733] setpgid(0, 0 [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] getdents64(3, [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 5733] <... setpgid resumed>) = 0 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5723] <... futex resumed>) = 0 [pid 309] close(3 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] close(3 [pid 306] <... close resumed>) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5726] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 308] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... close resumed>) = 0 [pid 306] rmdir("./181" [pid 5733] <... openat resumed>) = 3 [pid 5726] <... open resumed>) = 5 [pid 309] rmdir("./174" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] rmdir("./178" [pid 306] <... rmdir resumed>) = 0 [pid 5733] write(3, "1000", 4 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 308] lstat("./178/binderfs", [pid 307] <... rmdir resumed>) = 0 [pid 306] mkdir("./182", 0777 [pid 5733] <... write resumed>) = 4 [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 309] mkdir("./175", 0777 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] mkdir("./179", 0777 [pid 306] <... mkdir resumed>) = 0 [pid 5733] close(3 [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... mkdir resumed>) = 0 [pid 308] unlink("./178/binderfs" [pid 307] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5733] <... close resumed>) = 0 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5723] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... unlink resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 5733] symlink("/dev/binderfs", "./binderfs" [pid 5726] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... openat resumed>) = 3 [pid 308] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5733] <... symlink resumed>) = 0 [pid 5726] <... openat resumed>) = 6 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 5733] <... futex resumed>) = 0 [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 309] close(3 [pid 307] close(3 [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5726] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5723] <... futex resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5726] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5734 attached [pid 5733] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5726] <... write resumed>) = 262144 [pid 307] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5734] set_robust_list(0x55555748e5e0, 24 [pid 5733] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5734 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5734] <... set_robust_list resumed>) = 0 [pid 5733] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5726] <... futex resumed>) = 1 [pid 5723] <... futex resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5735 [pid 5734] chdir("./175" [pid 5733] <... mprotect resumed>) = 0 [pid 5726] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5723] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5736 [pid 5734] <... chdir resumed>) = 0 [pid 5733] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5723] <... futex resumed>) = 0 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5723] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... prctl resumed>) = 0 [pid 5733] <... clone resumed>, parent_tid=[5737], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5737 [pid 5734] setpgid(0, 0 [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... setpgid resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5734] <... openat resumed>) = 3 [pid 5734] write(3, "1000", 4) = 4 [pid 5734] close(3) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5734] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5734] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5734] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5738], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5738 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5736 attached [pid 5736] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5736] chdir("./179") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5738 attached [pid 5736] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5738] set_robust_list(0x7f19bd6049e0, 24 [pid 5736] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5738] <... set_robust_list resumed>) = 0 [pid 5736] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5738] memfd_create("syzkaller", 0 [pid 5736] <... mprotect resumed>) = 0 [pid 5738] <... memfd_create resumed>) = 3 [pid 5736] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5736] <... clone resumed>, parent_tid=[5739], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5739 [pid 5738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5739 attached [pid 5739] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5739] memfd_create("syzkaller", 0) = 3 [pid 5739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5737 attached [pid 5737] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5737] memfd_create("syzkaller", 0) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5735 attached [pid 5735] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5735] chdir("./182") = 0 [pid 5735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5735] setpgid(0, 0) = 0 [pid 5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5735] write(3, "1000", 4) = 4 [pid 5735] close(3) = 0 [pid 5735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5735] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5735] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5735] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5740], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5740 [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 135.183006][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 135.196885][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5738] <... write resumed>) = 1048576 [pid 5739] <... write resumed>) = 1048576 [pid 5739] munmap(0x7f19b51e4000, 1048576 [pid 5723] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5738] munmap(0x7f19b51e4000, 1048576./strace-static-x86_64: Process 5740 attached [pid 5726] <... write resumed>) = 1048576 [pid 5726] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... munmap resumed>) = 0 [pid 5726] <... futex resumed>) = 0 [pid 5740] set_robust_list(0x7f19bd6049e0, 24 [pid 5726] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5740] <... set_robust_list resumed>) = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5723] exit_group(0 [pid 5740] memfd_create("syzkaller", 0 [pid 5726] <... futex resumed>) = ? [pid 5723] <... exit_group resumed>) = ? [pid 5726] +++ exited with 0 +++ [pid 5739] <... munmap resumed>) = 0 [pid 5739] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5737] <... write resumed>) = 1048576 [pid 5737] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5737] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... umount2 resumed>) = 0 [pid 5739] <... openat resumed>) = 4 [pid 5739] ioctl(4, LOOP_SET_FD, 3 [pid 5740] <... memfd_create resumed>) = 3 [pid 5740] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] <... ioctl resumed>) = 0 [pid 5723] +++ exited with 0 +++ [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5723, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] lstat("./178/bus", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./177/binderfs") = 0 [pid 305] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5738] <... openat resumed>) = 4 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5738] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] close(3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... close resumed>) = 0 [pid 308] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5739] mkdir("./bus", 0777 [pid 308] <... openat resumed>) = 4 [pid 5739] <... mkdir resumed>) = 0 [pid 308] fstat(4, [pid 5739] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./178/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./178") = 0 [pid 308] mkdir("./179", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5740] <... mmap resumed>) = 0x7f19b51e4000 [pid 5740] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5738] <... ioctl resumed>) = 0 [pid 5738] close(3) = 0 [pid 5738] mkdir("./bus", 0777) = 0 [pid 5738] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5737] <... ioctl resumed>) = 0 [pid 5737] close(3) = 0 [pid 5737] mkdir("./bus", 0777) = 0 [pid 5737] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] <... openat resumed>) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5746 [pid 5740] <... write resumed>) = 1048576 [pid 5740] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5740] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [ 135.284366][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 135.299428][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 ./strace-static-x86_64: Process 5746 attached [pid 5740] ioctl(4, LOOP_SET_FD, 3 [pid 5737] <... mount resumed>) = 0 [pid 5737] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5737] chdir("./bus") = 0 [pid 5737] ioctl(4, LOOP_CLR_FD [pid 5738] <... mount resumed>) = 0 [pid 5739] <... mount resumed>) = 0 [pid 5739] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5738] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5746] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5739] <... openat resumed>) = 3 [pid 5746] chdir("./179") = 0 [pid 5746] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5746] setpgid(0, 0) = 0 [pid 5746] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5746] write(3, "1000", 4) = 4 [pid 5746] close(3) = 0 [pid 5746] symlink("/dev/binderfs", "./binderfs" [pid 5738] <... openat resumed>) = 3 [pid 5739] chdir("./bus" [pid 5746] <... symlink resumed>) = 0 [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5746] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5746] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5752], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5752 [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5738] chdir("./bus" [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] <... chdir resumed>) = 0 [pid 5738] <... chdir resumed>) = 0 [pid 5738] ioctl(4, LOOP_CLR_FD [pid 5739] ioctl(4, LOOP_CLR_FD [pid 5740] <... ioctl resumed>) = 0 [pid 5737] <... ioctl resumed>) = 0 [pid 5740] close(3 [pid 5737] close(4 [pid 5740] <... close resumed>) = 0 [pid 5737] <... close resumed>) = 0 [pid 5740] mkdir("./bus", 0777 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... mkdir resumed>) = 0 [pid 5737] <... futex resumed>) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5740] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5737] chdir("./file0" [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... chdir resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... open resumed>) = 4 [pid 5733] <... futex resumed>) = 0 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... mount resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... open resumed>) = 5 [pid 5733] <... futex resumed>) = 0 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5737] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5733] <... futex resumed>) = 0 [pid 5739] <... ioctl resumed>) = 0 [pid 5738] <... ioctl resumed>) = 0 [pid 5737] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] close(4 [pid 5738] close(4 [pid 5737] <... openat resumed>) = 6 [pid 5739] <... close resumed>) = 0 [pid 5738] <... close resumed>) = 0 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] <... futex resumed>) = 1 [pid 5733] <... futex resumed>) = 0 [pid 5739] <... futex resumed>) = 1 [pid 5738] <... futex resumed>) = 1 [pid 5737] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5738] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] <... futex resumed>) = 0 [pid 5739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] chdir("./file0" [pid 5738] chdir("./file0" [pid 5737] <... write resumed>) = 262144 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] <... chdir resumed>) = 0 [pid 5738] <... chdir resumed>) = 0 [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5739] <... futex resumed>) = 1 [pid 5738] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5738] <... open resumed>) = 4 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] <... open resumed>) = 4 [pid 5738] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] <... futex resumed>) = 1 [pid 5738] <... mount resumed>) = 0 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 5739] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] <... mount resumed>) = 0 [pid 5738] <... futex resumed>) = 0 [pid 5737] <... futex resumed>) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5733] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5752 attached [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 135.335032][ T5737] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/180/bus supports timestamps until 2038 (0x7fffffff) [ 135.338267][ T5739] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/179/bus supports timestamps until 2038 (0x7fffffff) [ 135.347987][ T5738] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/175/bus supports timestamps until 2038 (0x7fffffff) [pid 5738] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5737] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5733] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] set_robust_list(0x7f19bd6049e0, 24 [pid 5739] <... futex resumed>) = 0 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5737] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5734] <... futex resumed>) = 0 [pid 5733] <... futex resumed>) = 0 [pid 5752] <... set_robust_list resumed>) = 0 [pid 5739] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5738] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5737] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5733] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] memfd_create("syzkaller", 0 [pid 5739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5740] <... mount resumed>) = 0 [pid 5740] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5740] chdir("./bus") = 0 [pid 5740] ioctl(4, LOOP_CLR_FD [pid 5736] <... futex resumed>) = 0 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... memfd_create resumed>) = 3 [pid 5752] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5739] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 305] <... umount2 resumed>) = 0 [pid 5752] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5739] <... open resumed>) = 5 [pid 5738] <... open resumed>) = 5 [pid 5737] <... write resumed>) = 1048576 [pid 305] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5739] <... futex resumed>) = 1 [pid 5737] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./177/bus", [pid 5739] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5737] <... futex resumed>) = 1 [pid 5733] <... futex resumed>) = 0 [pid 305] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] <... futex resumed>) = 0 [pid 5733] exit_group(0 [pid 5737] ????( [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5737] <... ???? resumed>) = ? [pid 5733] <... exit_group resumed>) = ? [pid 305] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5738] <... futex resumed>) = 1 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... futex resumed>) = 0 [pid 5739] <... futex resumed>) = 0 [pid 5738] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... futex resumed>) = 1 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 4 [pid 5739] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 0 [pid 5739] <... openat resumed>) = 6 [pid 5738] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] <... openat resumed>) = 6 [pid 5737] +++ exited with 0 +++ [pid 5733] +++ exited with 0 +++ [pid 305] fstat(4, [pid 5739] <... futex resumed>) = 1 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5736] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5733, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5739] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5738] <... futex resumed>) = 1 [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] <... futex resumed>) = 0 [pid 305] getdents64(4, [pid 5739] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5738] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] <... futex resumed>) = 0 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... write resumed>) = 1048576 [pid 5740] <... ioctl resumed>) = 0 [pid 5739] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 0 [pid 310] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5738] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 5740] close(4 [pid 305] close(4 [pid 5740] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rmdir("./177/bus" [pid 5740] <... futex resumed>) = 1 [pid 5735] <... futex resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 5740] chdir("./file0" [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5740] <... chdir resumed>) = 0 [pid 5735] <... futex resumed>) = 0 [pid 305] getdents64(3, [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5740] <... futex resumed>) = 0 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5740] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(3 [pid 5735] <... futex resumed>) = 0 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 5740] <... open resumed>) = 4 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] rmdir("./177" [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rmdir resumed>) = 0 [pid 5740] <... futex resumed>) = 1 [pid 5735] <... futex resumed>) = 0 [pid 305] mkdir("./178", 0777 [pid 5740] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... mkdir resumed>) = 0 [pid 5740] <... mount resumed>) = 0 [pid 5735] <... futex resumed>) = 0 [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5740] <... futex resumed>) = 0 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... openat resumed>) = 3 [pid 5740] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5740] <... open resumed>) = 5 [pid 5735] <... futex resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] close(3 [pid 5740] <... futex resumed>) = 0 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 135.406623][ T5740] ext4 filesystem being mounted at /root/syzkaller.URAKkl/182/bus supports timestamps until 2038 (0x7fffffff) [pid 305] <... close resumed>) = 0 [pid 5752] munmap(0x7f19b51e4000, 1048576 [pid 5740] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5739] <... write resumed>) = 262144 [pid 5738] <... write resumed>) = 262144 [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5752] <... munmap resumed>) = 0 [pid 5740] <... openat resumed>) = 6 [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5752] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5739] <... futex resumed>) = 1 [pid 5738] <... futex resumed>) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5734] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 5752] <... openat resumed>) = 4 [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5739] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5738] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5736] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5752] ioctl(4, LOOP_SET_FD, 3 [pid 5738] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5736] <... futex resumed>) = 0 [pid 5734] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 5740] <... futex resumed>) = 1 [pid 5738] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5736] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5735] <... futex resumed>) = 0 [pid 5734] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5755 ./strace-static-x86_64: Process 5755 attached [pid 5752] <... ioctl resumed>) = 0 [pid 5740] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5752] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5752] <... close resumed>) = 0 [pid 310] lstat("./180/binderfs", [pid 5752] mkdir("./bus", 0777 [pid 5740] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5752] <... mkdir resumed>) = 0 [pid 5740] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5735] <... futex resumed>) = 0 [pid 310] unlink("./180/binderfs" [pid 5752] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5755] set_robust_list(0x55555748e5e0, 24 [pid 5740] <... write resumed>) = 262144 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5755] <... set_robust_list resumed>) = 0 [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5735] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5735] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] chdir("./178" [pid 5735] <... futex resumed>) = 0 [pid 5740] <... futex resumed>) = 0 [pid 5755] <... chdir resumed>) = 0 [pid 5740] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5735] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5755] setpgid(0, 0) = 0 [pid 5755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5755] write(3, "1000", 4) = 4 [pid 5755] close(3) = 0 [pid 5755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5755] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5755] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5757], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5757 [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5739] <... write resumed>) = 1048576 [pid 5739] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5757 attached ) = 1 [pid 5736] <... futex resumed>) = 0 [pid 5736] exit_group(0) = ? [pid 5757] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5757] memfd_create("syzkaller", 0) = 3 [pid 5757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 135.485760][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5739] +++ exited with 0 +++ [pid 5736] +++ exited with 0 +++ [pid 5734] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5736, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./179/binderfs", [pid 5757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5740] <... write resumed>) = 1048576 [pid 5738] <... write resumed>) = 1048576 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5757] <... write resumed>) = 1048576 [pid 5740] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5738] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5734] exit_group(0 [pid 307] unlink("./179/binderfs" [pid 5757] munmap(0x7f19b51e4000, 1048576 [pid 5752] <... mount resumed>) = 0 [pid 5740] <... futex resumed>) = 0 [pid 5735] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5734] <... exit_group resumed>) = ? [pid 5757] <... munmap resumed>) = 0 [pid 5752] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5735] exit_group(0 [pid 307] <... unlink resumed>) = 0 [pid 5757] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5752] <... openat resumed>) = 3 [pid 5735] <... exit_group resumed>) = ? [pid 5757] <... openat resumed>) = 4 [pid 5752] chdir("./bus" [pid 5738] <... futex resumed>) = ? [pid 307] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] ioctl(4, LOOP_SET_FD, 3 [pid 5752] <... chdir resumed>) = 0 [ 135.524657][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 135.547891][ T5752] ext4 filesystem being mounted at /root/syzkaller.69675s/179/bus supports timestamps until 2038 (0x7fffffff) [pid 5752] ioctl(4, LOOP_CLR_FD [pid 5757] <... ioctl resumed>) = 0 [pid 5752] <... ioctl resumed>) = 0 [pid 5757] close(3 [pid 5752] close(4 [pid 5740] +++ exited with 0 +++ [pid 5735] +++ exited with 0 +++ [pid 5757] <... close resumed>) = 0 [pid 5752] <... close resumed>) = 0 [pid 5757] mkdir("./bus", 0777 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... mkdir resumed>) = 0 [pid 5752] <... futex resumed>) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5757] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] chdir("./file0" [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... chdir resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... open resumed>) = 4 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... mount resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... open resumed>) = 5 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... openat resumed>) = 6 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5746] <... futex resumed>) = 0 [pid 5752] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5752] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5746] <... futex resumed>) = 0 [pid 5752] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... write resumed>) = 262144 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5735, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = 0 [pid 5746] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5746] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5752] <... futex resumed>) = 1 [pid 5752] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 306] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./182/binderfs" [pid 5738] +++ exited with 0 +++ [pid 5734] +++ exited with 0 +++ [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5734, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 309] umount2("./175", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./175", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./175/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./175/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./175/binderfs") = 0 [pid 309] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5752] <... write resumed>) = 1048576 [pid 5752] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5746] <... futex resumed>) = 0 [pid 5746] exit_group(0) = ? [pid 5752] <... futex resumed>) = ? [ 135.577990][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 135.601512][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 135.610678][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5757] <... mount resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5752] +++ exited with 0 +++ [pid 5746] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./180/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5746, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 310] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] <... restart_syscall resumed>) = 0 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 308] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] getdents64(4, [pid 308] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... openat resumed>) = 3 [pid 310] close(4 [pid 308] fstat(3, [pid 310] <... close resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] rmdir("./180/bus" [pid 308] getdents64(3, [pid 310] <... rmdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] getdents64(3, [pid 308] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(3 [pid 308] lstat("./179/binderfs", [pid 310] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] rmdir("./180" [pid 308] unlink("./179/binderfs" [pid 310] <... rmdir resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 310] mkdir("./181", 0777 [pid 308] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5763 [pid 5757] <... openat resumed>) = 3 [pid 5757] chdir("./bus") = 0 [pid 5757] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5763 attached [pid 5763] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5763] chdir("./181") = 0 [pid 5763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5763] setpgid(0, 0) = 0 [pid 5763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5763] write(3, "1000", 4) = 4 [pid 5763] close(3) = 0 [ 135.615246][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 135.628723][ T5757] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/178/bus supports timestamps until 2038 (0x7fffffff) [ 135.651763][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5763] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5763] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5763] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5764], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5764 [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5764 attached [pid 5764] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5764] memfd_create("syzkaller", 0) = 3 [pid 5764] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5764] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5764] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5764] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5757] <... ioctl resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5757] close(4) = 0 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5755] <... futex resumed>) = 0 [pid 5757] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5755] <... futex resumed>) = 0 [pid 5757] chdir("./file0" [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5757] <... chdir resumed>) = 0 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5755] <... futex resumed>) = 0 [pid 5757] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5755] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5757] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] lstat("./182/bus", [pid 5757] <... open resumed>) = 4 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5757] <... futex resumed>) = 1 [pid 5755] <... futex resumed>) = 0 [pid 306] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5755] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5757] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5757] <... mount resumed>) = 0 [pid 306] <... openat resumed>) = 4 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5755] <... futex resumed>) = 0 [pid 306] fstat(4, [pid 5757] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5755] <... futex resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5757] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./182/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./182") = 0 [pid 306] mkdir("./183", 0777) = 0 [ 135.679368][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 135.693956][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 135.700074][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5764] <... openat resumed>) = 4 [pid 5757] <... open resumed>) = 5 [pid 309] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 5764] ioctl(4, LOOP_SET_FD, 3 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] ioctl(3, LOOP_CLR_FD [pid 5757] <... futex resumed>) = 1 [pid 5755] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./175/bus", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5757] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5755] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] lstat("./179/bus", [pid 309] umount2("./175/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./175/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, [pid 5757] <... openat resumed>) = 6 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] getdents64(4, [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5757] <... futex resumed>) = 0 [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5757] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5755] <... futex resumed>) = 0 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] close(4) = 0 [pid 309] rmdir("./175/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./175") = 0 [pid 309] mkdir("./176", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5757] <... write resumed>) = 262144 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] fstat(4, [pid 5755] <... futex resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5757] <... futex resumed>) = 1 [pid 5755] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5755] <... futex resumed>) = 0 [pid 5757] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5755] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./179/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./179") = 0 [pid 307] mkdir("./180", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5757] <... write resumed>) = 1048576 [pid 5757] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5755] <... futex resumed>) = 0 [pid 5757] <... futex resumed>) = 1 [pid 5755] exit_group(0 [pid 5757] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5755] <... exit_group resumed>) = ? [pid 5764] <... ioctl resumed>) = 0 [pid 5757] +++ exited with 0 +++ [pid 5755] +++ exited with 0 +++ [pid 309] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5764] close(3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] close(3 [pid 5764] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... close resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5755, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5764] mkdir("./bus", 0777 [pid 309] close(3 [pid 308] lstat("./179/bus", [pid 307] close(3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5764] <... mkdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5764] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5766 [pid 305] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... openat resumed>) = 3 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5767 [pid 308] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5768 [pid 305] fstat(3, [pid 308] <... openat resumed>) = 4 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] fstat(4, [pid 305] getdents64(3, [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] getdents64(4, [pid 305] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] getdents64(4, [pid 305] lstat("./178/binderfs", ./strace-static-x86_64: Process 5768 attached [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] close(4 [pid 305] unlink("./178/binderfs" [pid 308] <... close resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 308] rmdir("./179/bus" [pid 305] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 5767 attached [pid 5768] set_robust_list(0x55555748e5e0, 24 [pid 308] getdents64(3, [pid 5767] set_robust_list(0x55555748e5e0, 24 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5767] <... set_robust_list resumed>) = 0 [pid 308] close(3 [pid 5767] chdir("./176" [pid 308] <... close resumed>) = 0 [pid 5767] <... chdir resumed>) = 0 [pid 308] rmdir("./179" [pid 5767] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... rmdir resumed>) = 0 [pid 5767] <... prctl resumed>) = 0 [pid 308] mkdir("./180", 0777 [pid 5767] setpgid(0, 0 [pid 308] <... mkdir resumed>) = 0 [pid 5767] <... setpgid resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... openat resumed>) = 3 [pid 5767] <... openat resumed>) = 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5767] write(3, "1000", 4 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5767] <... write resumed>) = 4 [pid 308] close(3 [pid 5767] close(3 [pid 308] <... close resumed>) = 0 ./strace-static-x86_64: Process 5766 attached [pid 5767] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5767] symlink("/dev/binderfs", "./binderfs" [pid 5766] set_robust_list(0x55555748e5e0, 24 [pid 5767] <... symlink resumed>) = 0 [pid 5766] <... set_robust_list resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5771 [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] chdir("./183" [pid 5767] <... futex resumed>) = 0 [pid 5766] <... chdir resumed>) = 0 [pid 5767] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5766] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5767] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5766] <... prctl resumed>) = 0 [pid 5767] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5766] setpgid(0, 0 [pid 5767] <... mprotect resumed>) = 0 [pid 5766] <... setpgid resumed>) = 0 [pid 5767] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5766] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5767] <... clone resumed>, parent_tid=[5772], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5772 [pid 5766] write(3, "1000", 4 [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... write resumed>) = 4 [pid 5767] <... futex resumed>) = 0 [pid 5766] close(3 [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5766] <... close resumed>) = 0 [pid 5766] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5772 attached [pid 5768] <... set_robust_list resumed>) = 0 [pid 5766] <... symlink resumed>) = 0 [pid 5772] set_robust_list(0x7f19bd6049e0, 24 [pid 5768] chdir("./180" [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] <... set_robust_list resumed>) = 0 [pid 5768] <... chdir resumed>) = 0 [pid 5766] <... futex resumed>) = 0 [pid 5766] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5766] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5766] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5773], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5773 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 5771 attached [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5771] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5771] chdir("./180") = 0 [pid 5771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5771] setpgid(0, 0) = 0 [pid 5771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5771] write(3, "1000", 4) = 4 [pid 5771] close(3) = 0 [pid 5771] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5771] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5771] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5774], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5774 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5774 attached [pid 5774] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5774] memfd_create("syzkaller", 0) = 3 [pid 5772] memfd_create("syzkaller", 0 [pid 5768] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5774] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5768] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5773 attached [pid 5772] <... memfd_create resumed>) = 3 [pid 5773] set_robust_list(0x7f19bd6049e0, 24 [pid 5772] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5768] setpgid(0, 0 [pid 5774] <... mmap resumed>) = 0x7f19b51e4000 [pid 5773] <... set_robust_list resumed>) = 0 [pid 5772] <... mmap resumed>) = 0x7f19b51e4000 [pid 5768] <... setpgid resumed>) = 0 [pid 5764] <... mount resumed>) = 0 [pid 5774] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5773] memfd_create("syzkaller", 0 [pid 5772] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5768] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5773] <... memfd_create resumed>) = 3 [pid 5768] <... openat resumed>) = 3 [pid 5773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5768] write(3, "1000", 4 [pid 5773] <... mmap resumed>) = 0x7f19b51e4000 [pid 5768] <... write resumed>) = 4 [pid 5774] <... write resumed>) = 1048576 [pid 5773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5768] close(3 [pid 5764] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5774] munmap(0x7f19b51e4000, 1048576 [pid 5773] <... write resumed>) = 1048576 [pid 5772] <... write resumed>) = 1048576 [pid 5768] <... close resumed>) = 0 [pid 5764] <... openat resumed>) = 3 [pid 5774] <... munmap resumed>) = 0 [pid 5773] munmap(0x7f19b51e4000, 1048576 [pid 5772] munmap(0x7f19b51e4000, 1048576 [pid 5768] symlink("/dev/binderfs", "./binderfs" [pid 5764] chdir("./bus" [pid 5774] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5773] <... munmap resumed>) = 0 [pid 5772] <... munmap resumed>) = 0 [pid 5768] <... symlink resumed>) = 0 [pid 5764] <... chdir resumed>) = 0 [pid 5773] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5772] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] ioctl(4, LOOP_CLR_FD [pid 5768] <... futex resumed>) = 0 [pid 5768] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5768] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5768] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5775 attached , parent_tid=[5775], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5775 [pid 5775] set_robust_list(0x7f19bd6049e0, 24 [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... set_robust_list resumed>) = 0 [pid 5768] <... futex resumed>) = 0 [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5775] memfd_create("syzkaller", 0) = 3 [pid 5775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 135.903618][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 135.919313][ T5764] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/181/bus supports timestamps until 2038 (0x7fffffff) [ 135.931720][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5775] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5775] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5774] <... openat resumed>) = 4 [pid 5774] ioctl(4, LOOP_SET_FD, 3 [pid 5773] <... openat resumed>) = 4 [pid 5774] <... ioctl resumed>) = 0 [pid 5773] ioctl(4, LOOP_SET_FD, 3 [pid 5774] close(3) = 0 [pid 5774] mkdir("./bus", 0777) = 0 [pid 5772] <... openat resumed>) = 4 [pid 5764] <... ioctl resumed>) = 0 [pid 5774] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... umount2 resumed>) = 0 [pid 5764] close(4) = 0 [pid 305] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./178/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./178/bus" [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, [pid 5764] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5764] chdir("./file0" [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 5763] <... futex resumed>) = 0 [pid 5764] <... chdir resumed>) = 0 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] rmdir("./178" [pid 5764] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5764] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... rmdir resumed>) = 0 [pid 5772] ioctl(4, LOOP_SET_FD, 3 [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5764] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] mkdir("./179", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5764] <... open resumed>) = 4 [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5764] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... mount resumed>) = 0 [pid 5763] <... futex resumed>) = 0 [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] <... ioctl resumed>) = 0 [pid 5772] close(3 [pid 5764] <... futex resumed>) = 0 [pid 5763] <... futex resumed>) = 1 [pid 5775] <... openat resumed>) = 4 [pid 5772] <... close resumed>) = 0 [pid 5764] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] ioctl(4, LOOP_SET_FD, 3 [pid 5773] <... ioctl resumed>) = 0 [pid 5772] mkdir("./bus", 0777 [pid 5764] <... open resumed>) = 5 [pid 305] <... openat resumed>) = 3 [pid 5772] <... mkdir resumed>) = 0 [pid 5773] close(3 [pid 5772] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5773] <... close resumed>) = 0 [pid 5764] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5764] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5764] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... mount resumed>) = 0 [pid 5764] <... openat resumed>) = 6 [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5764] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5763] <... futex resumed>) = 0 [pid 5764] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5774] chdir("./bus") = 0 [pid 5774] ioctl(4, LOOP_CLR_FD) = 0 [pid 5774] close(4) = 0 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [pid 5774] chdir("./file0") = 0 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [pid 5774] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5764] <... write resumed>) = 262144 [pid 5774] <... open resumed>) = 4 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [pid 5774] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [pid 5774] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] close(3 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [pid 5774] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] mkdir("./bus", 0777 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... close resumed>) = 0 [pid 5773] <... mkdir resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5774] <... futex resumed>) = 1 [pid 5774] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5773] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... ioctl resumed>) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5782 [pid 5764] <... futex resumed>) = 1 [pid 5763] <... futex resumed>) = 0 [pid 5763] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5763] <... futex resumed>) = 0 [pid 5763] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5782 attached [pid 5782] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5782] chdir("./179") = 0 [pid 5782] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5775] close(3 [pid 5782] setpgid(0, 0 [pid 5775] <... close resumed>) = 0 [pid 5782] <... setpgid resumed>) = 0 [pid 5775] mkdir("./bus", 0777 [pid 5782] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5775] <... mkdir resumed>) = 0 [pid 5774] <... write resumed>) = 262144 [pid 5782] <... openat resumed>) = 3 [pid 5775] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5782] write(3, "1000", 4) = 4 [pid 5782] close(3) = 0 [pid 5782] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5782] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5782] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5782] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5784], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5784 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5771] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5774] <... futex resumed>) = 1 [ 136.017240][ T5774] ext4 filesystem being mounted at /root/syzkaller.69675s/180/bus supports timestamps until 2038 (0x7fffffff) [pid 5774] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 5774] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5771] <... futex resumed>) = 0 [pid 5771] exit_group(0) = ? [pid 5774] <... futex resumed>) = ? ./strace-static-x86_64: Process 5784 attached [pid 5763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5784] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5774] +++ exited with 0 +++ [pid 5784] memfd_create("syzkaller", 0 [pid 5771] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5771, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 5784] <... memfd_create resumed>) = 3 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 5784] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 5784] <... mmap resumed>) = 0x7f19b51e4000 [pid 308] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./180/binderfs") = 0 [pid 308] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... mount resumed>) = 0 [pid 5773] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5773] chdir("./bus") = 0 [pid 5773] ioctl(4, LOOP_CLR_FD) = 0 [ 136.080707][ T5773] ext4 filesystem being mounted at /root/syzkaller.URAKkl/183/bus supports timestamps until 2038 (0x7fffffff) [ 136.094217][ T5772] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/176/bus supports timestamps until 2038 (0x7fffffff) [pid 5773] close(4) = 0 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5773] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] <... mount resumed>) = 0 [pid 5772] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5772] chdir("./bus") = 0 [pid 5772] ioctl(4, LOOP_CLR_FD) = 0 [pid 5772] close(4 [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5764] <... write resumed>) = 1048576 [pid 5766] <... futex resumed>) = 1 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5764] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5764] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5773] <... futex resumed>) = 0 [pid 5773] chdir("./file0") = 0 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] <... futex resumed>) = 1 [pid 5773] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5763] exit_group(0 [pid 5764] <... futex resumed>) = ? [pid 5763] <... exit_group resumed>) = ? [pid 5764] +++ exited with 0 +++ [pid 5763] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5763, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./181/binderfs") = 0 [pid 310] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5773] <... open resumed>) = 4 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5773] <... futex resumed>) = 1 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5766] <... futex resumed>) = 0 [pid 5784] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5775] <... mount resumed>) = 0 [pid 5773] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5772] <... close resumed>) = 0 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] <... open resumed>) = 5 [pid 5766] <... futex resumed>) = 0 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] <... futex resumed>) = 0 [pid 5766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5773] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5773] <... openat resumed>) = 6 [pid 5766] <... futex resumed>) = 0 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] <... futex resumed>) = 0 [pid 5766] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5773] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 136.120759][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 136.134811][ T5775] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/180/bus supports timestamps until 2038 (0x7fffffff) [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... write resumed>) = 1048576 [pid 5775] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5773] <... write resumed>) = 262144 [pid 5766] <... futex resumed>) = 0 [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] munmap(0x7f19b51e4000, 1048576 [pid 5775] <... openat resumed>) = 3 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... munmap resumed>) = 0 [pid 5775] chdir("./bus" [pid 5772] <... futex resumed>) = 1 [pid 5767] <... futex resumed>) = 0 [pid 5766] <... futex resumed>) = 0 [pid 5784] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5775] <... chdir resumed>) = 0 [pid 5773] <... futex resumed>) = 1 [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... openat resumed>) = 4 [pid 5775] ioctl(4, LOOP_CLR_FD [pid 5773] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5767] <... futex resumed>) = 0 [pid 5766] <... futex resumed>) = 0 [pid 5784] ioctl(4, LOOP_SET_FD, 3 [pid 5775] <... ioctl resumed>) = 0 [pid 5772] chdir("./file0" [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5766] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] close(4 [pid 5772] <... chdir resumed>) = 0 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5767] <... futex resumed>) = 0 [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5767] <... futex resumed>) = 0 [pid 5772] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5772] <... open resumed>) = 4 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5767] <... futex resumed>) = 0 [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5767] <... futex resumed>) = 0 [pid 5772] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5772] <... mount resumed>) = 0 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5767] <... futex resumed>) = 0 [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5767] <... futex resumed>) = 0 [pid 5772] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... ioctl resumed>) = 0 [pid 5775] <... close resumed>) = 0 [pid 5772] <... open resumed>) = 5 [pid 5784] close(3 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... close resumed>) = 0 [pid 5775] <... futex resumed>) = 1 [pid 5772] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5767] <... futex resumed>) = 0 [pid 5784] mkdir("./bus", 0777 [pid 5775] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... mkdir resumed>) = 0 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] <... futex resumed>) = 0 [pid 5767] <... futex resumed>) = 0 [pid 5784] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5775] chdir("./file0" [pid 5772] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] <... chdir resumed>) = 0 [pid 5772] <... openat resumed>) = 6 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = 1 [pid 5772] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5767] <... futex resumed>) = 0 [pid 5775] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5772] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5772] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] <... futex resumed>) = 0 [pid 5767] <... futex resumed>) = 0 [pid 5775] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5772] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] <... open resumed>) = 4 [pid 5772] <... write resumed>) = 262144 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = 1 [pid 5772] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5767] <... futex resumed>) = 0 [pid 5775] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5767] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] <... futex resumed>) = 0 [pid 5775] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5772] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5767] <... futex resumed>) = 0 [pid 5775] <... mount resumed>) = 0 [pid 5767] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5768] <... futex resumed>) = 0 [pid 5775] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5775] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5768] <... futex resumed>) = 0 [pid 5775] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5773] <... write resumed>) = 1048576 [pid 5773] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5766] <... futex resumed>) = 0 [pid 5773] <... futex resumed>) = 1 [pid 5766] exit_group(0) = ? [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./180/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./180/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./180") = 0 [pid 308] mkdir("./181", 0777) = 0 [ 136.169247][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 136.171130][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 136.203671][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5784] <... mount resumed>) = 0 [pid 5784] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5784] chdir("./bus") = 0 [pid 5784] ioctl(4, LOOP_CLR_FD [pid 5772] <... write resumed>) = 1048576 [pid 5772] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5767] <... futex resumed>) = 0 [pid 5767] exit_group(0) = ? [pid 5775] <... open resumed>) = 5 [pid 5773] +++ exited with 0 +++ [pid 5766] +++ exited with 0 +++ [pid 308] <... openat resumed>) = 3 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5766, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5775] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./183/binderfs") = 0 [pid 306] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5775] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5768] <... futex resumed>) = 0 [pid 308] close(3 [pid 5775] <... openat resumed>) = 6 [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 5768] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5775] <... futex resumed>) = 0 [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5775] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5768] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./181/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./181/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./181" [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 310] mkdir("./182", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5794 [pid 5784] <... ioctl resumed>) = 0 [pid 5784] close(4) = 0 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5793 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] chdir("./file0" [pid 5782] <... futex resumed>) = 0 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... chdir resumed>) = 0 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5784] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... open resumed>) = 4 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5782] <... futex resumed>) = 0 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... futex resumed>) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5784] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... mount resumed>) = 0 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5784] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5784] <... open resumed>) = 5 [pid 5782] <... futex resumed>) = 0 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5784] <... futex resumed>) = 0 [pid 5782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5784] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5793 attached [pid 5784] <... openat resumed>) = 6 [pid 5782] <... futex resumed>) = 0 [pid 5793] set_robust_list(0x55555748e5e0, 24 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... set_robust_list resumed>) = 0 [pid 5784] <... futex resumed>) = 0 [pid 5782] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] chdir("./181" [pid 5784] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] <... chdir resumed>) = 0 [pid 5784] <... write resumed>) = 262144 [pid 5782] <... futex resumed>) = 0 [pid 5775] <... write resumed>) = 262144 [pid 5793] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] <... prctl resumed>) = 0 [pid 5793] setpgid(0, 0) = 0 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5793] write(3, "1000", 4) = 4 ./strace-static-x86_64: Process 5794 attached [pid 5793] close(3 [pid 5772] +++ exited with 0 +++ [pid 5767] +++ exited with 0 +++ [pid 5794] set_robust_list(0x55555748e5e0, 24 [pid 5793] <... close resumed>) = 0 [pid 5775] <... futex resumed>) = 1 [pid 5768] <... futex resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5767, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5794] <... set_robust_list resumed>) = 0 [pid 5793] symlink("/dev/binderfs", "./binderfs" [pid 5768] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] chdir("./182" [pid 5793] <... symlink resumed>) = 0 [pid 5775] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5768] <... futex resumed>) = 0 [pid 5794] <... chdir resumed>) = 0 [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5768] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5793] <... futex resumed>) = 0 [pid 5794] <... prctl resumed>) = 0 [pid 5793] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5794] setpgid(0, 0 [pid 5793] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5794] <... setpgid resumed>) = 0 [pid 5793] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 309] umount2("./176", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5793] <... mprotect resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5794] <... openat resumed>) = 3 [pid 5793] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 309] openat(AT_FDCWD, "./176", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5794] write(3, "1000", 4 [pid 309] <... openat resumed>) = 3 [pid 5794] <... write resumed>) = 4 [pid 5793] <... clone resumed>, parent_tid=[5795], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5795 [pid 309] fstat(3, [pid 5794] close(3 [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5794] <... close resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 5794] symlink("/dev/binderfs", "./binderfs" [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5794] <... symlink resumed>) = 0 [pid 309] umount2("./176/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5794] <... futex resumed>) = 0 [pid 309] lstat("./176/binderfs", [pid 5794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5794] <... mmap resumed>) = 0x7f19bd5e4000 [pid 309] unlink("./176/binderfs" [pid 5794] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 309] <... unlink resumed>) = 0 [pid 5794] <... mprotect resumed>) = 0 [ 136.254752][ T5784] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/179/bus supports timestamps until 2038 (0x7fffffff) [ 136.283084][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5795 attached [pid 5794] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5796], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5796 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5795] set_robust_list(0x7f19bd6049e0, 24 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5795] <... set_robust_list resumed>) = 0 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5782] <... futex resumed>) = 0 [pid 5784] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5782] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] memfd_create("syzkaller", 0 [pid 5782] <... futex resumed>) = 0 [pid 5782] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5796 attached [pid 5796] set_robust_list(0x7f19bd6049e0, 24 [pid 5795] <... memfd_create resumed>) = 3 [pid 5796] <... set_robust_list resumed>) = 0 [pid 5796] memfd_create("syzkaller", 0 [pid 5795] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5796] <... memfd_create resumed>) = 3 [pid 5795] <... mmap resumed>) = 0x7f19b51e4000 [pid 5796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 136.319019][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 136.347030][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5795] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5768] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5795] <... write resumed>) = 1048576 [pid 5795] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5782] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5795] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5775] <... write resumed>) = 1048576 [pid 5795] <... openat resumed>) = 4 [pid 5775] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] ioctl(4, LOOP_SET_FD, 3 [pid 5775] <... futex resumed>) = 0 [pid 5796] <... write resumed>) = 1048576 [pid 5796] munmap(0x7f19b51e4000, 1048576 [pid 5775] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5796] <... munmap resumed>) = 0 [pid 5768] exit_group(0 [pid 5796] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5768] <... exit_group resumed>) = ? [pid 5775] <... futex resumed>) = -1 (errno 18446744073709551359) [pid 5775] +++ exited with 0 +++ [pid 5796] <... openat resumed>) = 4 [pid 5795] <... ioctl resumed>) = 0 [pid 5784] <... write resumed>) = 1048576 [pid 5768] +++ exited with 0 +++ [pid 5796] ioctl(4, LOOP_SET_FD, 3 [pid 5784] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5782] exit_group(0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5768, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5784] <... futex resumed>) = ? [pid 5782] <... exit_group resumed>) = ? [pid 5784] +++ exited with 0 +++ [pid 307] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./180/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./180/binderfs" [pid 5795] close(3 [pid 307] <... unlink resumed>) = 0 [pid 307] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] <... close resumed>) = 0 [pid 5795] mkdir("./bus", 0777) = 0 [ 136.357211][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5795] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5796] <... ioctl resumed>) = 0 [pid 5782] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5782, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5796] close(3) = 0 [pid 5796] mkdir("./bus", 0777) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 305] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./179/binderfs") = 0 [ 136.400447][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 136.419655][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 136.424236][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5795] <... mount resumed>) = 0 [pid 5795] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5796] <... mount resumed>) = 0 [pid 5795] <... openat resumed>) = 3 [pid 5795] chdir("./bus") = 0 [pid 5795] ioctl(4, LOOP_CLR_FD [pid 5796] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5796] chdir("./bus") = 0 [pid 5796] ioctl(4, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./176/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./176/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./176/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./176/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./176") = 0 [pid 309] mkdir("./177", 0777) = 0 [ 136.446911][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 136.461774][ T5795] ext4 filesystem being mounted at /root/syzkaller.69675s/181/bus supports timestamps until 2038 (0x7fffffff) [ 136.474353][ T5796] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/182/bus supports timestamps until 2038 (0x7fffffff) [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5796] <... ioctl resumed>) = 0 [pid 5795] <... ioctl resumed>) = 0 [pid 5796] close(4 [pid 5795] close(4 [pid 5796] <... close resumed>) = 0 [pid 5795] <... close resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] <... futex resumed>) = 1 [pid 5795] <... futex resumed>) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5796] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./183/bus", [pid 5796] <... futex resumed>) = 0 [pid 5795] chdir("./file0" [pid 5796] chdir("./file0" [pid 5795] <... chdir resumed>) = 0 [pid 5794] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5796] <... chdir resumed>) = 0 [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] <... futex resumed>) = 0 [pid 5794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] ioctl(3, LOOP_CLR_FD [pid 5796] <... futex resumed>) = 0 [pid 5795] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5796] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5794] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] lstat("./180/bus", [pid 306] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5796] <... open resumed>) = 4 [pid 5795] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 306] <... openat resumed>) = 4 [pid 5796] <... futex resumed>) = 0 [pid 5795] <... open resumed>) = 4 [pid 5794] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] fstat(4, [pid 5796] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(4, ./strace-static-x86_64: Process 5803 attached [pid 5796] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5795] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 4 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... umount2 resumed>) = 0 [pid 5803] set_robust_list(0x55555748e5e0, 24 [pid 5796] <... mount resumed>) = 0 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5803 [pid 307] fstat(4, [pid 306] getdents64(4, [pid 305] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... set_robust_list resumed>) = 0 [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] chdir("./177" [pid 5796] <... futex resumed>) = 1 [pid 5795] <... mount resumed>) = 0 [pid 5794] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 306] close(4 [pid 305] lstat("./179/bus", [pid 5803] <... chdir resumed>) = 0 [pid 5796] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... close resumed>) = 0 [pid 5803] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 306] rmdir("./183/bus" [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5803] <... prctl resumed>) = 0 [pid 5796] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5795] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5803] setpgid(0, 0 [pid 5796] <... open resumed>) = 5 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 307] close(4 [pid 305] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5803] <... setpgid resumed>) = 0 [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 [pid 306] getdents64(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5803] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5796] <... futex resumed>) = 1 [pid 5795] <... open resumed>) = 5 [pid 5794] <... futex resumed>) = 0 [pid 307] rmdir("./180/bus" [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5803] <... openat resumed>) = 3 [pid 5796] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5795] <... futex resumed>) = 1 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... rmdir resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 5803] write(3, "1000", 4 [pid 5796] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5795] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 306] close(3 [pid 305] <... openat resumed>) = 4 [pid 5803] <... write resumed>) = 4 [pid 5796] <... openat resumed>) = 6 [pid 5795] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5793] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... close resumed>) = 0 [pid 305] fstat(4, [pid 5803] close(3 [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5795] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] close(3 [pid 306] rmdir("./183" [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5803] <... close resumed>) = 0 [pid 5796] <... futex resumed>) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5796] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5795] <... openat resumed>) = 6 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 5796] <... write resumed>) = 262144 [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] mkdir("./184", 0777 [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 305] getdents64(4, [pid 5795] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... mkdir resumed>) = 0 [pid 5793] <... futex resumed>) = 0 [pid 307] rmdir("./180" [pid 5803] symlink("/dev/binderfs", "./binderfs" [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... symlink resumed>) = 0 [pid 5796] <... futex resumed>) = 1 [pid 5794] <... futex resumed>) = 0 [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... rmdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5796] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5794] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 0 [pid 5795] <... write resumed>) = 262144 [pid 5794] <... futex resumed>) = 0 [pid 307] mkdir("./181", 0777 [pid 306] <... openat resumed>) = 3 [pid 305] getdents64(4, [pid 5803] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5803] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5803] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5803] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5795] <... futex resumed>) = 1 [pid 5793] <... futex resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5795] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5793] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(4 [pid 5803] <... clone resumed>, parent_tid=[5804], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5804 [pid 5793] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] close(3 [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] ioctl(3, LOOP_CLR_FD [pid 305] <... close resumed>) = 0 [pid 5803] <... futex resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] rmdir("./179/bus" [pid 307] close(3) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5805 [pid 305] <... rmdir resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5806 [pid 305] <... close resumed>) = 0 [pid 305] rmdir("./179") = 0 [pid 305] mkdir("./180", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5807 ./strace-static-x86_64: Process 5805 attached [pid 5805] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5805] chdir("./184") = 0 [pid 5805] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5805] setpgid(0, 0) = 0 [pid 5805] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5805] write(3, "1000", 4) = 4 [pid 5805] close(3) = 0 [pid 5805] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5805] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5796] <... write resumed>) = 1048576 [pid 5805] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5796] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5794] <... futex resumed>) = 0 [pid 5794] exit_group(0) = ? [pid 5796] <... futex resumed>) = ? [pid 5805] <... clone resumed>, parent_tid=[5808], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5808 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5796] +++ exited with 0 +++ [pid 5794] +++ exited with 0 +++ ./strace-static-x86_64: Process 5808 attached [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5794, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 5808] set_robust_list(0x7f19bd6049e0, 24 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 5808] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 5807 attached ./strace-static-x86_64: Process 5806 attached [pid 310] <... restart_syscall resumed>) = 0 [pid 5806] set_robust_list(0x55555748e5e0, 24 [pid 310] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] set_robust_list(0x55555748e5e0, 24 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5808] memfd_create("syzkaller", 0 [pid 310] getdents64(3, [pid 5808] <... memfd_create resumed>) = 3 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5806] <... set_robust_list resumed>) = 0 [pid 310] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5807] <... set_robust_list resumed>) = 0 [pid 5806] chdir("./181" [pid 310] lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5806] <... chdir resumed>) = 0 [pid 310] unlink("./182/binderfs" [pid 5808] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 310] <... unlink resumed>) = 0 [pid 5806] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5807] chdir("./180" [pid 5806] <... prctl resumed>) = 0 [pid 5808] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5808] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5808] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5806] setpgid(0, 0 [pid 5807] <... chdir resumed>) = 0 [pid 5806] <... setpgid resumed>) = 0 [pid 5808] <... openat resumed>) = 4 [pid 5808] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5808] close(3) = 0 [pid 5808] mkdir("./bus", 0777) = 0 [pid 5808] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5807] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5806] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 5804 attached [pid 5807] <... prctl resumed>) = 0 [pid 5804] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5807] setpgid(0, 0 [pid 5806] <... openat resumed>) = 3 [pid 5807] <... setpgid resumed>) = 0 [pid 5807] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5806] write(3, "1000", 4 [pid 5807] <... openat resumed>) = 3 [pid 5806] <... write resumed>) = 4 [pid 5804] memfd_create("syzkaller", 0) = 3 [pid 5804] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5806] close(3 [pid 5807] write(3, "1000", 4) = 4 [pid 5806] <... close resumed>) = 0 [pid 5806] symlink("/dev/binderfs", "./binderfs" [pid 5807] close(3 [pid 5806] <... symlink resumed>) = 0 [pid 5807] <... close resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] symlink("/dev/binderfs", "./binderfs" [pid 5806] <... futex resumed>) = 0 [pid 5807] <... symlink resumed>) = 0 [pid 5806] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5806] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5807] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5806] <... mprotect resumed>) = 0 [pid 5807] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5807] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5806] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5807] <... mprotect resumed>) = 0 [pid 5793] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5804] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5806] <... clone resumed>, parent_tid=[5811], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5811 [pid 5807] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] <... clone resumed>, parent_tid=[5813], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5813 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 136.657227][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 136.690748][ T5808] ext4 filesystem being mounted at /root/syzkaller.URAKkl/184/bus supports timestamps until 2038 (0x7fffffff) [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5813 attached ./strace-static-x86_64: Process 5811 attached ) = 0 [pid 5808] <... mount resumed>) = 0 [pid 5808] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5808] chdir("./bus") = 0 [pid 5808] ioctl(4, LOOP_CLR_FD) = 0 [pid 5808] close(4) = 0 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] chdir("./file0") = 0 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5811] set_robust_list(0x7f19bd6049e0, 24 [pid 5795] <... write resumed>) = 1048576 [pid 5813] set_robust_list(0x7f19bd6049e0, 24 [pid 5811] <... set_robust_list resumed>) = 0 [pid 5795] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5793] exit_group(0 [pid 5811] memfd_create("syzkaller", 0 [pid 5793] <... exit_group resumed>) = ? [pid 5811] <... memfd_create resumed>) = 3 [pid 5813] <... set_robust_list resumed>) = 0 [pid 5811] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5795] <... futex resumed>) = ? [pid 5811] <... mmap resumed>) = 0x7f19b51e4000 [pid 5813] memfd_create("syzkaller", 0 [pid 5811] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5804] <... write resumed>) = 1048576 [pid 5795] +++ exited with 0 +++ [pid 5793] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5793, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 308] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5813] <... memfd_create resumed>) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./181/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./181/binderfs") = 0 [pid 308] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] <... write resumed>) = 1048576 [pid 5804] munmap(0x7f19b51e4000, 1048576 [pid 5808] <... write resumed>) = 262144 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5805] <... futex resumed>) = 0 [pid 5805] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5805] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5808] <... futex resumed>) = 1 [pid 5808] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5813] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5804] <... munmap resumed>) = 0 [pid 5804] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5813] <... mmap resumed>) = 0x7f19b51e4000 [pid 5811] munmap(0x7f19b51e4000, 1048576 [pid 5804] <... openat resumed>) = 4 [pid 5813] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5811] <... munmap resumed>) = 0 [pid 5811] openat(AT_FDCWD, "/dev/loop2", O_RDWR [ 136.709098][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 136.738519][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5804] ioctl(4, LOOP_SET_FD, 3 [pid 5813] <... write resumed>) = 1048576 [pid 5811] <... openat resumed>) = 4 [pid 5804] <... ioctl resumed>) = 0 [pid 5811] ioctl(4, LOOP_SET_FD, 3 [pid 5804] close(3) = 0 [pid 5804] mkdir("./bus", 0777) = 0 [pid 5804] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5813] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5813] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5808] <... write resumed>) = 1048576 [pid 5808] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5808] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... ioctl resumed>) = 0 [pid 5813] <... openat resumed>) = 4 [pid 5805] <... futex resumed>) = 0 [pid 5813] ioctl(4, LOOP_SET_FD, 3 [pid 5811] close(3) = 0 [pid 5811] mkdir("./bus", 0777 [pid 5805] exit_group(0 [pid 5808] <... futex resumed>) = ? [pid 5805] <... exit_group resumed>) = ? [pid 5811] <... mkdir resumed>) = 0 [pid 5808] +++ exited with 0 +++ [ 136.765050][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5811] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5804] <... mount resumed>) = 0 [pid 5804] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5804] chdir("./bus") = 0 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5804] ioctl(4, LOOP_CLR_FD [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./182/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5813] <... ioctl resumed>) = 0 [pid 5805] +++ exited with 0 +++ [pid 310] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./182/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./182") = 0 [pid 310] mkdir("./183", 0777 [pid 5813] close(3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5805, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5813] <... close resumed>) = 0 [pid 5813] mkdir("./bus", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5813] <... mkdir resumed>) = 0 [pid 5813] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./184/binderfs") = 0 [ 136.810447][ T5804] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/177/bus supports timestamps until 2038 (0x7fffffff) [ 136.840685][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5811] <... mount resumed>) = 0 [pid 5811] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5811] chdir("./bus") = 0 [pid 5811] ioctl(4, LOOP_CLR_FD [pid 5804] <... ioctl resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5804] close(4 [pid 310] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./184/bus", [pid 5813] <... mount resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./184/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./184") = 0 [pid 306] mkdir("./185", 0777 [pid 5813] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 308] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./181/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./181/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./181" [pid 5813] <... openat resumed>) = 3 [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./182", 0777 [pid 5813] chdir("./bus" [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5813] <... chdir resumed>) = 0 [ 136.855294][ T5811] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/181/bus supports timestamps until 2038 (0x7fffffff) [ 136.857818][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 136.897541][ T5813] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/180/bus supports timestamps until 2038 (0x7fffffff) [pid 5813] ioctl(4, LOOP_CLR_FD [pid 5811] <... ioctl resumed>) = 0 [pid 5804] <... close resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... openat resumed>) = 3 [pid 5811] close(4 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5811] <... close resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5813] <... ioctl resumed>) = 0 [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 5823 attached [pid 5813] close(4 [pid 5811] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 308] close(3 [pid 306] <... openat resumed>) = 3 [pid 5823] set_robust_list(0x55555748e5e0, 24 [pid 5813] <... close resumed>) = 0 [pid 5811] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] chdir("./file0" [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5823 [pid 308] <... close resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5823] <... set_robust_list resumed>) = 0 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5806] <... futex resumed>) = 0 [pid 5804] <... chdir resumed>) = 0 [pid 5813] <... futex resumed>) = 1 [pid 5813] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5823] chdir("./183" [pid 5811] chdir("./file0" [pid 5807] <... futex resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5823] <... chdir resumed>) = 0 [pid 5811] <... chdir resumed>) = 0 [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5823] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5813] <... futex resumed>) = 0 [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 1 [pid 5804] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] close(3 [pid 5823] <... prctl resumed>) = 0 [pid 5813] chdir("./file0" [pid 5811] <... futex resumed>) = 1 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5824 [pid 306] <... close resumed>) = 0 [pid 5813] <... chdir resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5806] <... futex resumed>) = 0 [pid 5804] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] <... open resumed>) = 4 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5825 [pid 5811] <... open resumed>) = 4 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] setpgid(0, 0 [pid 5813] <... futex resumed>) = 1 [pid 5811] <... futex resumed>) = 1 [pid 5807] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5823] <... setpgid resumed>) = 0 [pid 5813] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5804] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5803] <... futex resumed>) = 0 [pid 5823] <... openat resumed>) = 3 [pid 5813] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5811] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5823] write(3, "1000", 4 [pid 5811] <... mount resumed>) = 0 [pid 5804] <... mount resumed>) = 0 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... write resumed>) = 4 [pid 5813] <... open resumed>) = 4 [pid 5811] <... futex resumed>) = 1 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5823] close(3 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... close resumed>) = 0 [pid 5813] <... futex resumed>) = 1 [pid 5811] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 5823] symlink("/dev/binderfs", "./binderfs" [pid 5813] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5804] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5823] <... symlink resumed>) = 0 [pid 5807] <... futex resumed>) = 0 [pid 5804] <... open resumed>) = 5 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] <... open resumed>) = 5 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5813] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5825 attached ./strace-static-x86_64: Process 5824 attached [pid 5823] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5813] <... mount resumed>) = 0 [pid 5823] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5804] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5813] <... futex resumed>) = 1 [pid 5811] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5807] <... futex resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5803] <... futex resumed>) = 0 [pid 5823] <... mprotect resumed>) = 0 [pid 5813] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5811] <... openat resumed>) = 6 [pid 5813] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... futex resumed>) = 0 [pid 5804] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5823] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5813] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5825] set_robust_list(0x55555748e5e0, 24 [pid 5824] set_robust_list(0x55555748e5e0, 24 [pid 5813] <... open resumed>) = 5 [pid 5811] <... futex resumed>) = 0 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] <... openat resumed>) = 6 [pid 5825] <... set_robust_list resumed>) = 0 [pid 5824] <... set_robust_list resumed>) = 0 [pid 5823] <... clone resumed>, parent_tid=[5826], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5826 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5811] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5813] <... futex resumed>) = 1 [pid 5807] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5826 attached [pid 5826] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5826] memfd_create("syzkaller", 0) = 3 [pid 5826] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5811] <... write resumed>) = 262144 [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] <... futex resumed>) = 0 [pid 5813] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5804] <... futex resumed>) = 1 [pid 5803] <... futex resumed>) = 0 [pid 5823] <... futex resumed>) = 0 [pid 5807] <... futex resumed>) = 0 [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] <... openat resumed>) = 6 [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5807] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5804] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5803] <... futex resumed>) = 0 [pid 5813] <... futex resumed>) = 0 [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5813] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5807] <... futex resumed>) = 0 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... write resumed>) = 1048576 [pid 5826] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5826] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5826] ioctl(4, LOOP_SET_FD, 3 [pid 5825] chdir("./185") = 0 [pid 5825] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5825] setpgid(0, 0) = 0 [pid 5825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5825] write(3, "1000", 4) = 4 [pid 5825] close(3) = 0 [pid 5825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5825] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5828], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5828 [pid 5825] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5804] <... write resumed>) = 262144 [pid 5824] chdir("./182" [pid 5813] <... write resumed>) = 262144 [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5803] <... futex resumed>) = 0 [pid 5804] <... futex resumed>) = 1 [pid 5806] <... futex resumed>) = 0 [pid 5803] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5806] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5804] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5803] <... futex resumed>) = 0 [pid 5806] <... futex resumed>) = 0 [pid 5803] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... ioctl resumed>) = 0 [pid 5826] close(3) = 0 [pid 5826] mkdir("./bus", 0777 [pid 5811] <... futex resumed>) = 1 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] <... mkdir resumed>) = 0 [pid 5826] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5811] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5813] <... futex resumed>) = 1 [pid 5807] <... futex resumed>) = 0 [pid 5824] <... chdir resumed>) = 0 [pid 5813] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5807] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5824] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5807] <... futex resumed>) = 0 [pid 5824] <... prctl resumed>) = 0 [pid 5807] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5824] setpgid(0, 0) = 0 [pid 5824] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5824] write(3, "1000", 4) = 4 [pid 5824] close(3) = 0 [pid 5824] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5828 attached [pid 5828] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5824] <... symlink resumed>) = 0 [pid 5828] memfd_create("syzkaller", 0) = 3 [pid 5828] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5824] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5828] <... mmap resumed>) = 0x7f19b51e4000 [pid 5824] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5824] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5829], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5829 [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5829 attached [pid 5829] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5829] memfd_create("syzkaller", 0) = 3 [pid 5829] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5828] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5829] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5806] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5803] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5826] <... mount resumed>) = 0 [pid 5826] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5826] chdir("./bus") = 0 [pid 5826] ioctl(4, LOOP_CLR_FD) = 0 [pid 5826] close(4 [pid 5828] <... write resumed>) = 1048576 [pid 5807] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5826] <... close resumed>) = 0 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] chdir("./file0") = 0 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5826] <... futex resumed>) = 1 [pid 5826] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5828] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5828] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5804] <... write resumed>) = 1048576 [pid 5804] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] ioctl(4, LOOP_SET_FD, 3 [pid 5811] <... write resumed>) = 1048576 [pid 5803] exit_group(0) = ? [pid 5826] <... write resumed>) = 262144 [pid 5804] <... futex resumed>) = ? [pid 5811] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5823] <... futex resumed>) = 0 [pid 5823] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5806] exit_group(0 [pid 5823] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5806] <... exit_group resumed>) = ? [pid 5826] <... futex resumed>) = 1 [pid 5826] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5811] <... futex resumed>) = ? [pid 5813] <... write resumed>) = 1048576 [pid 5813] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5807] exit_group(0) = ? [pid 5828] <... ioctl resumed>) = 0 [pid 5813] +++ exited with 0 +++ [pid 5807] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5807, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [ 137.039373][ T5826] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/183/bus supports timestamps until 2038 (0x7fffffff) [pid 305] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] <... write resumed>) = 1048576 [pid 5828] close(3 [pid 5811] +++ exited with 0 +++ [pid 5806] +++ exited with 0 +++ [pid 5804] +++ exited with 0 +++ [pid 5803] +++ exited with 0 +++ [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5803, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./177", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./177", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./177/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./177/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./177/binderfs") = 0 [pid 309] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] lstat("./180/binderfs", [pid 5829] munmap(0x7f19b51e4000, 1048576 [pid 5828] <... close resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5829] <... munmap resumed>) = 0 [pid 5828] mkdir("./bus", 0777 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5806, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] unlink("./180/binderfs" [pid 5829] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5828] <... mkdir resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 305] <... unlink resumed>) = 0 [pid 5829] <... openat resumed>) = 4 [pid 5828] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... restart_syscall resumed>) = 0 [pid 305] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] ioctl(4, LOOP_SET_FD, 3 [pid 5823] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5829] <... ioctl resumed>) = 0 [pid 5829] close(3 [pid 307] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] mkdir("./bus", 0777 [pid 307] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] <... mkdir resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 5829] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5826] <... write resumed>) = 1048576 [pid 307] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [ 137.111185][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 137.125090][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 137.139139][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5826] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5823] exit_group(0) = ? [pid 5826] <... futex resumed>) = ? [pid 307] lstat("./181/binderfs", [pid 5826] +++ exited with 0 +++ [pid 5823] +++ exited with 0 +++ [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5823, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 307] unlink("./181/binderfs") = 0 [pid 307] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5828] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./183/binderfs") = 0 [ 137.155408][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 137.157046][ T5828] ext4 filesystem being mounted at /root/syzkaller.URAKkl/185/bus supports timestamps until 2038 (0x7fffffff) [ 137.186432][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5828] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5828] chdir("./bus") = 0 [pid 5828] ioctl(4, LOOP_CLR_FD) = 0 [pid 5828] close(4) = 0 [pid 5828] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5828] chdir("./file0" [pid 5825] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... chdir resumed>) = 0 [pid 5825] <... futex resumed>) = 0 [pid 5828] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] <... futex resumed>) = 0 [pid 5825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5828] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5825] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... open resumed>) = 4 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5828] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5825] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] <... mount resumed>) = 0 [pid 5825] <... futex resumed>) = 0 [pid 5828] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5828] <... futex resumed>) = 0 [pid 5825] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5828] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5825] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5829] <... mount resumed>) = 0 [pid 5829] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5829] chdir("./bus") = 0 [pid 5829] ioctl(4, LOOP_CLR_FD) = 0 [pid 5829] close(4 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./177/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./177/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./177/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./177/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./177") = 0 [pid 309] mkdir("./178", 0777 [pid 5825] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] <... mkdir resumed>) = 0 [pid 5825] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5825] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5825] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5838], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5838 ./strace-static-x86_64: Process 5838 attached [pid 5825] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5838] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5838] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5825] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5838] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = 0 [pid 305] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5825] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5825] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5838] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5838] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 5829] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = 1 [pid 305] lstat("./180/bus", [pid 5829] chdir("./file0" [pid 5838] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... chdir resumed>) = 0 [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5838] <... futex resumed>) = 1 [pid 5825] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = 1 [pid 5829] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5838] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] <... open resumed>) = 4 [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 5829] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 4 [pid 5829] <... mount resumed>) = 0 [pid 305] fstat(4, [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] <... futex resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 305] getdents64(4, [pid 5829] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./180/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./180") = 0 [pid 305] mkdir("./181", 0777) = 0 [ 137.188674][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 137.213873][ T5829] ext4 filesystem being mounted at /root/syzkaller.69675s/182/bus supports timestamps until 2038 (0x7fffffff) [ 137.216308][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 137.233868][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5829] <... open resumed>) = 5 [pid 5828] <... open resumed>) = 5 [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5828] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5829] <... futex resumed>) = 1 [pid 5828] <... futex resumed>) = 0 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5828] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5825] exit_group(0 [pid 5828] <... futex resumed>) = ? [pid 5825] <... exit_group resumed>) = ? [pid 5828] +++ exited with 0 +++ [pid 309] <... openat resumed>) = 3 [pid 5838] <... futex resumed>) = ? [pid 5824] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 307] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./181/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./181/bus" [pid 5838] +++ exited with 0 +++ [pid 5825] +++ exited with 0 +++ [pid 307] <... rmdir resumed>) = 0 [pid 5829] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = 1 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] getdents64(3, [pid 305] ioctl(3, LOOP_CLR_FD [pid 5829] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5829] <... openat resumed>) = 6 [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(3 [pid 307] close(3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5825, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... close resumed>) = 0 [pid 305] close(3 [pid 5829] <... futex resumed>) = 0 [pid 5824] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... close resumed>) = 0 [pid 307] rmdir("./181" [pid 305] <... close resumed>) = 0 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... rmdir resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5824] <... futex resumed>) = 0 [pid 307] mkdir("./182", 0777 [pid 5829] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... mkdir resumed>) = 0 [pid 5829] <... write resumed>) = 262144 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5839 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./183/bus", [pid 307] <... openat resumed>) = 3 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5840 [pid 5829] <... futex resumed>) = 1 [pid 5824] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5829] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5824] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5824] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] close(3 [pid 306] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5824] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5841 [pid 310] <... openat resumed>) = 4 [pid 306] fstat(3, [pid 310] fstat(4, ./strace-static-x86_64: Process 5839 attached [pid 5839] set_robust_list(0x55555748e5e0, 24 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5839] <... set_robust_list resumed>) = 0 [pid 5839] chdir("./178" [pid 310] getdents64(4, [pid 306] getdents64(3, ./strace-static-x86_64: Process 5840 attached [pid 5840] set_robust_list(0x55555748e5e0, 24 [pid 5839] <... chdir resumed>) = 0 [pid 5840] <... set_robust_list resumed>) = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5840] chdir("./181" [pid 5839] <... prctl resumed>) = 0 [pid 310] getdents64(4, [pid 306] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5840] <... chdir resumed>) = 0 [pid 5839] setpgid(0, 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(4 [pid 306] lstat("./185/binderfs", [pid 310] <... close resumed>) = 0 [pid 310] rmdir("./183/bus" [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5840] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5839] <... setpgid resumed>) = 0 [pid 5840] <... prctl resumed>) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5840] setpgid(0, 0 [pid 5839] <... openat resumed>) = 3 [pid 310] <... rmdir resumed>) = 0 [pid 306] unlink("./185/binderfs" [pid 5840] <... setpgid resumed>) = 0 [pid 5839] write(3, "1000", 4 [pid 310] getdents64(3, [pid 5840] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5839] <... write resumed>) = 4 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... unlink resumed>) = 0 [pid 5840] <... openat resumed>) = 3 [pid 5839] close(3 [pid 310] close(3 [pid 306] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... close resumed>) = 0 [pid 5840] write(3, "1000", 4 [pid 5839] <... close resumed>) = 0 [pid 310] rmdir("./183" [pid 5840] <... write resumed>) = 4 [pid 5839] symlink("/dev/binderfs", "./binderfs" [pid 5840] close(3 [pid 5839] <... symlink resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 5840] <... close resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./184", 0777 [pid 5840] symlink("/dev/binderfs", "./binderfs" [pid 5839] <... futex resumed>) = 0 [pid 5840] <... symlink resumed>) = 0 [pid 5839] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... mmap resumed>) = 0x7f19bd5e4000 [pid 310] <... mkdir resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5839] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5840] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5839] <... mprotect resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 5840] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5839] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] ioctl(3, LOOP_CLR_FD [pid 5840] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5839] <... clone resumed>, parent_tid=[5842], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5842 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5840] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 5839] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 5840] <... clone resumed>, parent_tid=[5843], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5843 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5840] <... futex resumed>) = 0 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5844 ./strace-static-x86_64: Process 5844 attached [pid 5844] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5844] chdir("./184") = 0 [pid 5844] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5844] setpgid(0, 0) = 0 [pid 5844] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5844] write(3, "1000", 4) = 4 [pid 5844] close(3) = 0 [pid 5844] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5843 attached ) = 0 [pid 5843] set_robust_list(0x7f19bd6049e0, 24) = 0 ./strace-static-x86_64: Process 5842 attached ./strace-static-x86_64: Process 5841 attached [pid 5843] memfd_create("syzkaller", 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5843] <... memfd_create resumed>) = 3 [pid 5844] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5844] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5843] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5842] set_robust_list(0x7f19bd6049e0, 24 [pid 5841] set_robust_list(0x55555748e5e0, 24 [pid 5843] <... mmap resumed>) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5845 attached [pid 5842] <... set_robust_list resumed>) = 0 [pid 5841] <... set_robust_list resumed>) = 0 [pid 5844] <... clone resumed>, parent_tid=[5845], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5845 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5841] chdir("./182" [pid 5845] set_robust_list(0x7f19bd6049e0, 24 [pid 5842] memfd_create("syzkaller", 0 [pid 5841] <... chdir resumed>) = 0 [pid 5845] <... set_robust_list resumed>) = 0 [pid 5843] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5842] <... memfd_create resumed>) = 3 [pid 5841] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5845] memfd_create("syzkaller", 0 [pid 5842] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5841] <... prctl resumed>) = 0 [pid 5845] <... memfd_create resumed>) = 3 [pid 5842] <... mmap resumed>) = 0x7f19b51e4000 [pid 5841] setpgid(0, 0) = 0 [pid 5841] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5829] <... write resumed>) = 1048576 [pid 5829] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5824] <... futex resumed>) = 0 [pid 5829] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5824] exit_group(0) = ? [pid 5829] <... futex resumed>) = ? [pid 5829] +++ exited with 0 +++ [pid 5841] <... openat resumed>) = 3 [pid 5841] write(3, "1000", 4) = 4 [pid 5841] close(3) = 0 [pid 5841] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5841] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5841] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5846], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5846 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5843] <... write resumed>) = 1048576 [pid 5843] munmap(0x7f19b51e4000, 1048576 [pid 5845] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5843] <... munmap resumed>) = 0 [pid 5843] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 5846 attached [pid 5846] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5846] memfd_create("syzkaller", 0) = 3 [pid 5846] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5845] <... mmap resumed>) = 0x7f19b51e4000 [pid 5846] <... mmap resumed>) = 0x7f19b51e4000 [pid 5842] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5846] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5845] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5842] <... write resumed>) = 1048576 [pid 5846] <... write resumed>) = 1048576 [pid 5846] munmap(0x7f19b51e4000, 1048576 [pid 5842] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5846] <... munmap resumed>) = 0 [pid 5846] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5842] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./185/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./185/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./185") = 0 [pid 306] mkdir("./186", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5843] <... openat resumed>) = 4 [pid 5824] +++ exited with 0 +++ [pid 5843] ioctl(4, LOOP_SET_FD, 3 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5824, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 308] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5848 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3, [pid 5843] <... ioctl resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5843] close(3) = 0 [pid 5843] mkdir("./bus", 0777) = 0 [pid 5843] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5842] <... openat resumed>) = 4 [pid 5846] <... openat resumed>) = 4 [pid 5842] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./182/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5842] <... ioctl resumed>) = 0 [pid 308] unlink("./182/binderfs") = 0 [pid 308] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5842] close(3) = 0 [pid 5842] mkdir("./bus", 0777) = 0 [pid 5842] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5845] <... write resumed>) = 1048576 [pid 5845] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5845] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5846] <... ioctl resumed>) = 0 [pid 5846] close(3) = 0 [pid 5846] mkdir("./bus", 0777) = 0 [pid 5846] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5845] <... openat resumed>) = 4 [pid 5845] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5848 attached [pid 5843] <... mount resumed>) = 0 [pid 5843] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5843] chdir("./bus") = 0 [ 137.425968][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 137.439964][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 137.457642][ T5843] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/181/bus supports timestamps until 2038 (0x7fffffff) [pid 5843] ioctl(4, LOOP_CLR_FD [pid 5848] set_robust_list(0x55555748e5e0, 24 [pid 5845] <... ioctl resumed>) = 0 [pid 5842] <... mount resumed>) = 0 [pid 5848] <... set_robust_list resumed>) = 0 [pid 5848] chdir("./186") = 0 [pid 5848] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5848] setpgid(0, 0) = 0 [pid 5848] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5848] write(3, "1000", 4) = 4 [pid 5848] close(3) = 0 [pid 5848] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5848] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5848] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5858], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5858 [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5842] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5842] chdir("./bus") = 0 [pid 5842] ioctl(4, LOOP_CLR_FD) = 0 [pid 5842] close(4 [pid 5845] close(3./strace-static-x86_64: Process 5858 attached [pid 5858] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5858] memfd_create("syzkaller", 0) = 3 [pid 5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5843] <... ioctl resumed>) = 0 [pid 5843] close(4) = 0 [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5843] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5840] <... futex resumed>) = 0 [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] <... close resumed>) = 0 [pid 5845] mkdir("./bus", 0777 [pid 5843] <... futex resumed>) = 0 [pid 5842] <... close resumed>) = 0 [pid 5840] <... futex resumed>) = 1 [pid 5843] chdir("./file0" [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... mkdir resumed>) = 0 [pid 5843] <... chdir resumed>) = 0 [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5843] <... futex resumed>) = 1 [pid 5840] <... futex resumed>) = 0 [pid 5842] <... futex resumed>) = 1 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = 0 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = 1 [pid 5843] <... open resumed>) = 4 [pid 5842] chdir("./file0" [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... chdir resumed>) = 0 [pid 5843] <... futex resumed>) = 1 [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = 0 [pid 5843] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] <... futex resumed>) = 1 [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] <... futex resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = 0 [pid 5843] <... mount resumed>) = 0 [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5839] <... futex resumed>) = 0 [pid 5843] <... futex resumed>) = 1 [pid 5840] <... futex resumed>) = 0 [pid 5842] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5842] <... mount resumed>) = 0 [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 5843] <... open resumed>) = 5 [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5840] <... futex resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = 0 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] <... futex resumed>) = 0 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5843] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5842] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5842] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5840] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 0 [pid 5843] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5842] <... open resumed>) = 5 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5843] <... openat resumed>) = 6 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] <... futex resumed>) = 0 [pid 5840] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5842] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5842] <... openat resumed>) = 6 [pid 5840] <... futex resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5839] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = 0 [pid 5839] <... futex resumed>) = 1 [pid 5842] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... mount resumed>) = 0 [pid 5843] <... write resumed>) = 262144 [pid 5846] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... openat resumed>) = 3 [pid 5843] <... futex resumed>) = 1 [pid 5842] <... write resumed>) = 262144 [pid 5840] <... futex resumed>) = 0 [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5843] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 5846] chdir("./bus" [pid 5843] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5840] <... futex resumed>) = 0 [pid 5839] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5840] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... futex resumed>) = 1 [pid 5842] <... futex resumed>) = 0 [ 137.470882][ T5842] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/178/bus supports timestamps until 2038 (0x7fffffff) [ 137.491583][ T5846] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/182/bus supports timestamps until 2038 (0x7fffffff) [pid 5842] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5858] <... write resumed>) = 1048576 [pid 5846] <... chdir resumed>) = 0 [pid 5843] <... write resumed>) = 1048576 [pid 5839] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] munmap(0x7f19b51e4000, 1048576 [pid 5846] ioctl(4, LOOP_CLR_FD [pid 5843] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... munmap resumed>) = 0 [pid 5846] <... ioctl resumed>) = 0 [pid 5845] <... mount resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5858] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5846] close(4 [pid 5843] <... futex resumed>) = 1 [pid 5840] <... futex resumed>) = 0 [pid 308] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5858] <... openat resumed>) = 4 [pid 5846] <... close resumed>) = 0 [pid 5843] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5840] exit_group(0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5845] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5845] chdir("./bus") = 0 [pid 5845] ioctl(4, LOOP_CLR_FD) = 0 [pid 5845] close(4) = 0 [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 1 [pid 5845] chdir("./file0" [pid 5858] ioctl(4, LOOP_SET_FD, 3 [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5843] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 5840] <... exit_group resumed>) = ? [pid 308] lstat("./182/bus", [pid 5845] <... chdir resumed>) = 0 [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 1 [pid 5845] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5846] <... futex resumed>) = 1 [pid 5841] <... futex resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] chdir("./file0" [pid 5845] <... open resumed>) = 4 [pid 308] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 1 [pid 5845] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] <... chdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 4 [pid 5846] <... futex resumed>) = 1 [pid 5845] <... mount resumed>) = 0 [pid 5841] <... futex resumed>) = 0 [pid 308] fstat(4, [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 1 [pid 5845] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5846] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5841] <... futex resumed>) = 0 [pid 308] getdents64(4, [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5846] <... open resumed>) = 4 [pid 308] getdents64(4, [pid 5842] <... write resumed>) = 1048576 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... ioctl resumed>) = 0 [pid 5858] close(3 [pid 5846] <... futex resumed>) = 1 [pid 5845] <... open resumed>) = 5 [pid 5843] +++ exited with 0 +++ [pid 5842] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] <... futex resumed>) = 0 [pid 5840] +++ exited with 0 +++ [pid 308] close(4 [pid 5858] <... close resumed>) = 0 [pid 5846] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = 1 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5839] <... futex resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5840, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5858] mkdir("./bus", 0777 [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] <... futex resumed>) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5842] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] <... futex resumed>) = 0 [pid 5839] exit_group(0 [pid 308] rmdir("./182/bus" [pid 5858] <... mkdir resumed>) = 0 [pid 5846] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5845] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5842] <... futex resumed>) = ? [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5839] <... exit_group resumed>) = ? [pid 308] <... rmdir resumed>) = 0 [ 137.541913][ T5845] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/184/bus supports timestamps until 2038 (0x7fffffff) [pid 5858] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5846] <... mount resumed>) = 0 [pid 5845] <... openat resumed>) = 6 [pid 5844] <... futex resumed>) = 0 [pid 5842] +++ exited with 0 +++ [pid 5839] +++ exited with 0 +++ [pid 308] getdents64(3, [pid 305] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5839, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5846] <... futex resumed>) = 1 [pid 5845] <... futex resumed>) = 0 [pid 5844] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] <... futex resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 308] close(3 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5845] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5845] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5844] <... futex resumed>) = 0 [pid 5841] <... futex resumed>) = 0 [pid 308] rmdir("./182" [pid 305] <... openat resumed>) = 3 [pid 5846] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5845] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... open resumed>) = 5 [pid 309] umount2("./178", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... rmdir resumed>) = 0 [pid 305] fstat(3, [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] mkdir("./183", 0777 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5846] <... futex resumed>) = 1 [pid 5841] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./178", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... mkdir resumed>) = 0 [pid 305] getdents64(3, [pid 5846] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] <... futex resumed>) = 0 [pid 309] fstat(3, [pid 308] <... openat resumed>) = 3 [pid 305] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5846] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5846] <... openat resumed>) = 6 [pid 309] getdents64(3, [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] lstat("./181/binderfs", [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] close(3 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5846] <... futex resumed>) = 1 [pid 5845] <... write resumed>) = 262144 [pid 5841] <... futex resumed>) = 0 [pid 309] umount2("./178/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... close resumed>) = 0 [pid 305] unlink("./181/binderfs" [pid 5846] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5846] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5841] <... futex resumed>) = 0 [pid 309] lstat("./178/binderfs", [pid 305] <... unlink resumed>) = 0 [pid 5846] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5862 [pid 305] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5844] <... futex resumed>) = 0 [pid 5844] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5844] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5845] <... futex resumed>) = 1 [pid 5845] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5846] <... write resumed>) = 262144 [pid 309] unlink("./178/binderfs") = 0 ./strace-static-x86_64: Process 5862 attached [pid 5862] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5862] chdir("./183") = 0 [pid 5862] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5862] setpgid(0, 0) = 0 [pid 5862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5862] write(3, "1000", 4) = 4 [pid 5862] close(3) = 0 [pid 5862] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5862] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5862] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5864], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5864 [pid 309] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5864 attached [pid 5864] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5864] memfd_create("syzkaller", 0) = 3 [pid 5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5841] <... futex resumed>) = 0 [pid 5841] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5841] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5846] <... futex resumed>) = 1 [pid 5846] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5845] <... write resumed>) = 1048576 [ 137.620373][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 137.640214][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 137.654792][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5845] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5844] <... futex resumed>) = 0 [pid 5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5845] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5844] exit_group(0 [pid 5845] <... futex resumed>) = ? [pid 5844] <... exit_group resumed>) = ? [pid 5845] +++ exited with 0 +++ [pid 5844] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5844, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./184/binderfs") = 0 [pid 310] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5841] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5864] <... write resumed>) = 1048576 [pid 5864] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5864] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5864] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5864] close(3) = 0 [pid 5864] mkdir("./bus", 0777) = 0 [ 137.655342][ T5858] ext4 filesystem being mounted at /root/syzkaller.URAKkl/186/bus supports timestamps until 2038 (0x7fffffff) [ 137.668555][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 137.704186][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5864] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5858] <... mount resumed>) = 0 [pid 5858] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5858] chdir("./bus") = 0 [pid 5858] ioctl(4, LOOP_CLR_FD) = 0 [pid 5858] close(4) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5858] chdir("./file0" [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... chdir resumed>) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... write resumed>) = 1048576 [pid 5846] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5846] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5858] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5841] exit_group(0 [pid 5858] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5841] <... exit_group resumed>) = ? [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5846] <... futex resumed>) = ? [pid 5848] <... futex resumed>) = 0 [pid 5846] +++ exited with 0 +++ [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5841] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5841, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 307] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./182/binderfs", [pid 5858] <... open resumed>) = 4 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] unlink("./182/binderfs" [pid 5858] <... futex resumed>) = 1 [pid 5848] <... futex resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5848] <... futex resumed>) = 0 [pid 307] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... mount resumed>) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5858] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... open resumed>) = 5 [pid 5848] <... futex resumed>) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5858] <... openat resumed>) = 6 [pid 5848] <... futex resumed>) = 0 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5848] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5858] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5858] <... write resumed>) = 262144 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 137.722277][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 137.749784][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 5858] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5848] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5858] <... futex resumed>) = 0 [pid 5858] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5864] <... mount resumed>) = 0 [pid 5864] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5864] chdir("./bus") = 0 [pid 5864] ioctl(4, LOOP_CLR_FD [pid 5858] <... write resumed>) = 1048576 [pid 5858] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5848] <... futex resumed>) = 0 [pid 5848] exit_group(0) = ? [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./178/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./178/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./178/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./178/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./178") = 0 [pid 309] mkdir("./179", 0777) = 0 [ 137.758769][ T5864] ext4 filesystem being mounted at /root/syzkaller.69675s/183/bus supports timestamps until 2038 (0x7fffffff) [ 137.784409][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5864] <... ioctl resumed>) = 0 [pid 5864] close(4) = 0 [pid 5858] +++ exited with 0 +++ [pid 5848] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5864] <... futex resumed>) = 1 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] lstat("./184/bus", [pid 309] close(3 [pid 307] lstat("./182/bus", [pid 305] lstat("./181/bus", [pid 5862] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... close resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5864] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 310] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5869 [pid 307] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5864] chdir("./file0" [pid 310] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 4 [pid 305] <... openat resumed>) = 4 [pid 5864] <... chdir resumed>) = 0 [pid 310] fstat(4, [pid 307] fstat(4, [pid 305] fstat(4, [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5864] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 307] getdents64(4, [pid 305] getdents64(4, [pid 5864] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 307] getdents64(4, [pid 305] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 307] close(4 [pid 305] close(4 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 310] rmdir("./184/bus" [pid 307] rmdir("./182/bus" [pid 305] rmdir("./181/bus" [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] getdents64(3, [pid 307] getdents64(3, [pid 305] getdents64(3, [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5864] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = 1 [pid 310] close(3 [pid 307] close(3 [pid 305] close(3 [pid 5864] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 ./strace-static-x86_64: Process 5869 attached [pid 310] rmdir("./184" [pid 307] rmdir("./182" [pid 305] rmdir("./181" [pid 5864] <... open resumed>) = 4 [pid 310] <... rmdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 310] mkdir("./185", 0777 [pid 307] mkdir("./183", 0777 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5848, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] mkdir("./182", 0777 [pid 5869] set_robust_list(0x55555748e5e0, 24 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... mkdir resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 306] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... mkdir resumed>) = 0 [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 307] close(3 [pid 305] close(3 [pid 5869] <... set_robust_list resumed>) = 0 [pid 5864] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... close resumed>) = 0 [pid 5869] chdir("./179" [pid 5864] <... mount resumed>) = 0 [pid 5862] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5869] <... chdir resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 3 [pid 5869] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5864] <... futex resumed>) = 0 [pid 5862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5870 [pid 306] fstat(3, [pid 5869] <... prctl resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5871 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5872 [pid 5869] setpgid(0, 0 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 306] getdents64(3, [pid 5869] <... setpgid resumed>) = 0 [pid 5864] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 ./strace-static-x86_64: Process 5871 attached ./strace-static-x86_64: Process 5870 attached [pid 5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5864] <... open resumed>) = 5 [pid 306] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5871] set_robust_list(0x55555748e5e0, 24 [pid 5870] set_robust_list(0x55555748e5e0, 24 [pid 5869] <... openat resumed>) = 3 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5871] <... set_robust_list resumed>) = 0 [pid 5870] <... set_robust_list resumed>) = 0 [pid 5869] write(3, "1000", 4 [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 306] lstat("./186/binderfs", [pid 5871] chdir("./183" [pid 5870] chdir("./185" [pid 5869] <... write resumed>) = 4 [pid 5864] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 5872 attached [pid 5871] <... chdir resumed>) = 0 [pid 5870] <... chdir resumed>) = 0 [pid 5869] close(3 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 306] unlink("./186/binderfs" [pid 5872] set_robust_list(0x55555748e5e0, 24 [pid 5869] <... close resumed>) = 0 [pid 5864] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... unlink resumed>) = 0 [pid 5872] <... set_robust_list resumed>) = 0 [pid 5869] symlink("/dev/binderfs", "./binderfs" [pid 5864] <... openat resumed>) = 6 [pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5872] chdir("./182" [pid 5871] <... prctl resumed>) = 0 [pid 5869] <... symlink resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... prctl resumed>) = 0 [pid 5872] <... chdir resumed>) = 0 [pid 5871] setpgid(0, 0 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5872] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5871] <... setpgid resumed>) = 0 [pid 5870] setpgid(0, 0 [pid 5869] <... futex resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... prctl resumed>) = 0 [pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5870] <... setpgid resumed>) = 0 [pid 5869] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5864] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5862] <... futex resumed>) = 0 [pid 5872] setpgid(0, 0 [pid 5869] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5864] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5872] <... setpgid resumed>) = 0 [pid 5869] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5864] <... write resumed>) = 262144 [pid 5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5869] <... mprotect resumed>) = 0 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... openat resumed>) = 3 [pid 5869] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5864] <... futex resumed>) = 1 [pid 5862] <... futex resumed>) = 0 [pid 5872] write(3, "1000", 4 [pid 5864] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5862] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... write resumed>) = 4 [pid 5871] <... openat resumed>) = 3 [pid 5869] <... clone resumed>, parent_tid=[5873], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5873 [pid 5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5862] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5873 attached [pid 5872] close(3 [pid 5871] write(3, "1000", 4 [pid 5870] <... openat resumed>) = 3 [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5873] set_robust_list(0x7f19bd6049e0, 24 [pid 5872] <... close resumed>) = 0 [pid 5871] <... write resumed>) = 4 [pid 5870] write(3, "1000", 4 [pid 5869] <... futex resumed>) = 0 [pid 5872] symlink("/dev/binderfs", "./binderfs" [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5872] <... symlink resumed>) = 0 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5872] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5872] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5874], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5874 [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5874 attached [pid 5874] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5874] memfd_create("syzkaller", 0) = 3 [pid 5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5873] <... set_robust_list resumed>) = 0 [pid 5871] close(3 [pid 5870] <... write resumed>) = 4 [pid 5871] <... close resumed>) = 0 [pid 5870] close(3 [pid 5873] memfd_create("syzkaller", 0 [pid 5871] symlink("/dev/binderfs", "./binderfs" [pid 5870] <... close resumed>) = 0 [pid 5873] <... memfd_create resumed>) = 3 [pid 5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5871] <... symlink resumed>) = 0 [pid 5870] symlink("/dev/binderfs", "./binderfs" [pid 5873] <... mmap resumed>) = 0x7f19b51e4000 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... symlink resumed>) = 0 [pid 5871] <... futex resumed>) = 0 [pid 5871] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5871] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5871] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5875], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5875 [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5870] <... futex resumed>) = 0 [pid 5870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5870] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5870] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5876], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5876 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5875 attached [pid 5875] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5875] memfd_create("syzkaller", 0) = 3 [pid 5873] <... write resumed>) = 1048576 [pid 5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5873] munmap(0x7f19b51e4000, 1048576 [pid 5875] <... mmap resumed>) = 0x7f19b51e4000 [pid 5873] <... munmap resumed>) = 0 [pid 5873] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 5876 attached [pid 5876] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5876] memfd_create("syzkaller", 0) = 3 [pid 5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5876] <... mmap resumed>) = 0x7f19b51e4000 [pid 5875] <... write resumed>) = 1048576 [pid 5875] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5875] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5864] <... write resumed>) = 1048576 [pid 5864] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5862] <... futex resumed>) = 0 [pid 5862] exit_group(0) = ? [pid 5864] <... futex resumed>) = ? [pid 5874] <... write resumed>) = 1048576 [pid 5874] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5874] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5876] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5876] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5875] <... openat resumed>) = 4 [pid 5874] <... openat resumed>) = 4 [pid 5873] <... openat resumed>) = 4 [pid 5864] +++ exited with 0 +++ [pid 5862] +++ exited with 0 +++ [pid 306] <... umount2 resumed>) = 0 [pid 5874] ioctl(4, LOOP_SET_FD, 3 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5862, si_uid=0, si_status=0, si_utime=1, si_stime=7} --- [pid 306] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./186/bus", [pid 308] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... openat resumed>) = 3 [pid 306] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] fstat(3, [pid 306] <... openat resumed>) = 4 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, [pid 308] getdents64(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] getdents64(4, [pid 308] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] getdents64(4, [pid 308] lstat("./183/binderfs", [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] close(4 [pid 308] unlink("./183/binderfs" [pid 306] <... close resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 306] rmdir("./186/bus" [pid 5875] ioctl(4, LOOP_SET_FD, 3 [pid 5873] ioctl(4, LOOP_SET_FD, 3 [ 138.029611][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.044721][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... rmdir resumed>) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./186") = 0 [pid 306] mkdir("./187", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5874] <... ioctl resumed>) = 0 [pid 5874] close(3) = 0 [pid 5874] mkdir("./bus", 0777) = 0 [pid 5874] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5876] <... openat resumed>) = 4 [pid 5876] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5876] close(3) = 0 [pid 5876] mkdir("./bus", 0777) = 0 [pid 5876] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 5875] <... ioctl resumed>) = 0 [pid 5875] close(3) = 0 [pid 5873] <... ioctl resumed>) = 0 [pid 5875] mkdir("./bus", 0777 [pid 5873] close(3 [pid 5875] <... mkdir resumed>) = 0 [pid 5873] <... close resumed>) = 0 [pid 5875] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5873] mkdir("./bus", 0777) = 0 [pid 5873] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5883 ./strace-static-x86_64: Process 5883 attached [pid 5874] <... mount resumed>) = 0 [pid 5883] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5883] chdir("./187" [ 138.110087][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.127202][ T172] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.128203][ T5874] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/182/bus supports timestamps until 2038 (0x7fffffff) [pid 5874] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5883] <... chdir resumed>) = 0 [pid 5876] <... mount resumed>) = 0 [pid 5874] <... openat resumed>) = 3 [pid 5883] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5874] chdir("./bus" [pid 5883] <... prctl resumed>) = 0 [pid 5874] <... chdir resumed>) = 0 [pid 5883] setpgid(0, 0 [pid 5874] ioctl(4, LOOP_CLR_FD [pid 5883] <... setpgid resumed>) = 0 [pid 5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5883] write(3, "1000", 4) = 4 [pid 5883] close(3) = 0 [pid 5883] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5883] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5883] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5890], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5890 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5876] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5876] chdir("./bus") = 0 [pid 5876] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 5890 attached [pid 5890] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5890] memfd_create("syzkaller", 0) = 3 [pid 5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5890] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5875] <... mount resumed>) = 0 [pid 5875] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5875] chdir("./bus") = 0 [pid 5875] ioctl(4, LOOP_CLR_FD [pid 5873] <... mount resumed>) = 0 [pid 5890] <... openat resumed>) = 4 [pid 5876] <... ioctl resumed>) = 0 [pid 5874] <... ioctl resumed>) = 0 [pid 5890] ioctl(4, LOOP_SET_FD, 3 [pid 5876] close(4 [pid 5874] close(4 [pid 5890] <... ioctl resumed>) = 0 [pid 5876] <... close resumed>) = 0 [pid 5875] <... ioctl resumed>) = 0 [pid 5874] <... close resumed>) = 0 [pid 5873] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 308] <... umount2 resumed>) = 0 [pid 5890] close(3 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... close resumed>) = 0 [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = 0 [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] <... futex resumed>) = 0 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... futex resumed>) = 0 [pid 5876] chdir("./file0" [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] mkdir("./bus", 0777 [pid 5876] <... chdir resumed>) = 0 [pid 5874] chdir("./file0" [pid 5890] <... mkdir resumed>) = 0 [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... chdir resumed>) = 0 [pid 5890] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5876] <... futex resumed>) = 1 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] <... futex resumed>) = 0 [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] <... futex resumed>) = 0 [pid 5876] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5874] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5876] <... open resumed>) = 4 [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5872] <... futex resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5870] <... futex resumed>) = 0 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5874] <... open resumed>) = 4 [pid 5870] <... futex resumed>) = 0 [pid 5876] <... mount resumed>) = 0 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] <... futex resumed>) = 0 [pid 5874] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5874] <... mount resumed>) = 0 [pid 5872] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 5876] <... open resumed>) = 5 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] close(4 [pid 5874] <... futex resumed>) = 0 [pid 5873] <... openat resumed>) = 3 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5876] <... futex resumed>) = 0 [pid 5875] <... close resumed>) = 0 [pid 5874] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] chdir("./bus" [pid 5872] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... chdir resumed>) = 0 [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 0 [pid 5873] ioctl(4, LOOP_CLR_FD [pid 5872] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 308] lstat("./183/bus", [pid 5876] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5875] chdir("./file0" [pid 5874] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5873] <... ioctl resumed>) = 0 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5876] <... openat resumed>) = 6 [pid 5875] <... chdir resumed>) = 0 [pid 5874] <... open resumed>) = 5 [pid 5873] close(4 [pid 5871] <... futex resumed>) = 0 [pid 308] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... futex resumed>) = 1 [pid 5874] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... close resumed>) = 0 [pid 5872] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5875] <... futex resumed>) = 1 [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5875] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5873] <... futex resumed>) = 1 [pid 308] <... openat resumed>) = 4 [pid 5876] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5874] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5873] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] <... futex resumed>) = 0 [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... futex resumed>) = 0 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 5876] <... write resumed>) = 262144 [pid 5874] <... openat resumed>) = 6 [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] close(4 [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] <... futex resumed>) = 0 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = 0 [pid 5871] <... futex resumed>) = 1 [pid 5869] <... futex resumed>) = 1 [pid 308] <... close resumed>) = 0 [pid 5876] <... futex resumed>) = 1 [pid 5875] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5874] <... futex resumed>) = 1 [pid 5873] chdir("./file0" [pid 5872] <... futex resumed>) = 0 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] <... futex resumed>) = 0 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] rmdir("./183/bus" [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5874] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5870] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5874] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] <... chdir resumed>) = 0 [pid 5872] <... futex resumed>) = 0 [pid 5870] <... futex resumed>) = 0 [pid 5876] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5874] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5870] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5875] <... open resumed>) = 4 [pid 5874] <... write resumed>) = 262144 [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... rmdir resumed>) = 0 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5874] <... futex resumed>) = 1 [pid 5872] <... futex resumed>) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5869] <... futex resumed>) = 0 [ 138.175647][ T5876] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/185/bus supports timestamps until 2038 (0x7fffffff) [ 138.175800][ T5875] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/183/bus supports timestamps until 2038 (0x7fffffff) [ 138.200788][ T5873] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/179/bus supports timestamps until 2038 (0x7fffffff) [pid 308] getdents64(3, [pid 5875] <... futex resumed>) = 1 [pid 5874] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5873] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5872] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5871] <... futex resumed>) = 0 [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5872] <... futex resumed>) = 0 [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5869] <... futex resumed>) = 0 [pid 5872] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] <... futex resumed>) = 0 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5875] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 308] close(3 [pid 5875] <... mount resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./183" [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... rmdir resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5875] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5873] <... open resumed>) = 4 [pid 308] mkdir("./184", 0777 [pid 5875] <... open resumed>) = 5 [pid 308] <... mkdir resumed>) = 0 [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] <... futex resumed>) = 1 [pid 5873] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5869] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] <... mount resumed>) = 0 [pid 5875] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5873] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 5875] <... openat resumed>) = 6 [pid 5873] <... mount resumed>) = 0 [pid 5869] <... futex resumed>) = 0 [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 5890] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5875] <... futex resumed>) = 1 [pid 5873] <... futex resumed>) = 0 [pid 5871] <... futex resumed>) = 0 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] <... openat resumed>) = 3 [pid 5875] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5873] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5869] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] close(3 [pid 5890] chdir("./bus" [pid 5874] <... write resumed>) = 1048576 [pid 5874] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5872] <... futex resumed>) = 0 [pid 5872] exit_group(0) = ? [pid 5874] <... futex resumed>) = ? [pid 5874] +++ exited with 0 +++ [pid 5872] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = 0 [pid 5869] <... futex resumed>) = 1 [pid 5873] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... restart_syscall resumed>) = 0 [pid 5873] <... open resumed>) = 5 [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5869] <... futex resumed>) = 0 [pid 305] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5873] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5869] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5873] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 3 [pid 5873] <... openat resumed>) = 6 [pid 305] fstat(3, [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5869] <... futex resumed>) = 0 [pid 305] getdents64(3, [pid 5873] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5873] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5869] <... futex resumed>) = 0 [pid 305] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5873] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5875] <... write resumed>) = 262144 [pid 5873] <... write resumed>) = 262144 [pid 308] <... close resumed>) = 0 [pid 305] lstat("./182/binderfs", [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5873] <... futex resumed>) = 1 [pid 5869] <... futex resumed>) = 0 [pid 305] unlink("./182/binderfs" [pid 5873] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5869] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... unlink resumed>) = 0 [pid 5890] <... chdir resumed>) = 0 [pid 5870] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5869] <... futex resumed>) = 0 [pid 305] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5869] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5894 attached [pid 5894] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5890] ioctl(4, LOOP_CLR_FD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5894 [pid 5894] chdir("./184") = 0 [pid 5890] <... ioctl resumed>) = 0 [pid 5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5894] setpgid(0, 0 [pid 5890] close(4 [pid 5894] <... setpgid resumed>) = 0 [pid 5890] <... close resumed>) = 0 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5890] <... futex resumed>) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] <... openat resumed>) = 3 [pid 5890] chdir("./file0") = 0 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5883] <... futex resumed>) = 0 [pid 5890] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] write(3, "1000", 4 [pid 5890] <... open resumed>) = 4 [pid 5883] <... futex resumed>) = 0 [pid 5894] <... write resumed>) = 4 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] close(3 [pid 5890] <... futex resumed>) = 0 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5894] <... close resumed>) = 0 [ 138.259060][ T5890] ext4 filesystem being mounted at /root/syzkaller.URAKkl/187/bus supports timestamps until 2038 (0x7fffffff) [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] symlink("/dev/binderfs", "./binderfs" [pid 5890] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5883] <... futex resumed>) = 0 [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... mount resumed>) = 0 [pid 5875] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5875] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5871] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5890] <... futex resumed>) = 0 [pid 5875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5871] <... futex resumed>) = 0 [pid 5890] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5875] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5871] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5876] <... write resumed>) = 1048576 [pid 5894] <... symlink resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5876] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5890] <... futex resumed>) = 0 [pid 5883] <... futex resumed>) = 1 [pid 5890] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5894] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5890] <... open resumed>) = 5 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5894] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5870] exit_group(0 [pid 5894] <... mprotect resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5876] <... futex resumed>) = ? [pid 5870] <... exit_group resumed>) = ? [pid 5894] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5890] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5876] +++ exited with 0 +++ [pid 5890] <... openat resumed>) = 6 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5890] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5883] <... futex resumed>) = 1 [pid 5890] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5873] <... write resumed>) = 1048576 [pid 5870] +++ exited with 0 +++ [pid 5869] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5894] <... clone resumed>, parent_tid=[5895], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5895 [pid 5883] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5873] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5873] <... futex resumed>) = 0 [pid 5869] exit_group(0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5894] <... futex resumed>) = 0 [pid 5890] <... futex resumed>) = 0 [pid 5883] <... futex resumed>) = 1 [pid 5869] <... exit_group resumed>) = ? [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5890] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] <... write resumed>) = 262144 [pid 5875] <... write resumed>) = 1048576 [pid 5873] +++ exited with 0 +++ [pid 5869] +++ exited with 0 +++ [pid 310] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 5890] <... futex resumed>) = 1 [pid 310] fstat(3, [pid 5883] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5883] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(3, [pid 309] <... restart_syscall resumed>) = 0 [pid 5883] <... futex resumed>) = 0 [pid 5883] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5890] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5875] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./179", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./185/binderfs", [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] openat(AT_FDCWD, "./179", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] unlink("./185/binderfs" [pid 309] <... openat resumed>) = 3 [pid 5875] <... futex resumed>) = 1 [pid 5871] <... futex resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 309] fstat(3, [pid 5871] exit_group(0) = ? [pid 310] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./179/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./179/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 138.309040][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.339998][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 309] unlink("./179/binderfs") = 0 ./strace-static-x86_64: Process 5895 attached [pid 5895] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5895] memfd_create("syzkaller", 0) = 3 [pid 5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 309] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... write resumed>) = 1048576 [pid 5895] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5895] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5890] <... write resumed>) = 1048576 [pid 5890] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5883] <... futex resumed>) = 0 [pid 5883] exit_group(0) = ? [pid 5890] <... futex resumed>) = ? [ 138.378897][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.392656][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 138.406593][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] <... umount2 resumed>) = 0 [pid 5875] +++ exited with 0 +++ [pid 5871] +++ exited with 0 +++ [pid 305] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... openat resumed>) = 4 [pid 5895] ioctl(4, LOOP_SET_FD, 3 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] lstat("./182/bus", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5895] <... ioctl resumed>) = 0 [pid 5890] +++ exited with 0 +++ [pid 5883] +++ exited with 0 +++ [pid 307] <... openat resumed>) = 3 [pid 305] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] close(3) = 0 [pid 5895] mkdir("./bus", 0777) = 0 [pid 5895] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] fstat(3, [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] getdents64(3, [pid 305] <... openat resumed>) = 4 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] lstat("./183/binderfs", [pid 306] <... openat resumed>) = 3 [pid 305] getdents64(4, [pid 306] fstat(3, [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] unlink("./183/binderfs" [pid 305] close(4 [pid 306] getdents64(3, [pid 305] <... close resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] rmdir("./182/bus" [pid 307] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... rmdir resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] getdents64(3, [pid 306] unlink("./187/binderfs" [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [ 138.412403][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 306] <... unlink resumed>) = 0 [pid 305] close(3 [pid 306] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... close resumed>) = 0 [pid 305] rmdir("./182") = 0 [pid 305] mkdir("./183", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5897 ./strace-static-x86_64: Process 5897 attached [pid 5897] set_robust_list(0x55555748e5e0, 24) = 0 [ 138.454099][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 138.473231][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 138.487019][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5897] chdir("./183") = 0 [pid 310] <... umount2 resumed>) = 0 [pid 5897] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 310] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] <... prctl resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] setpgid(0, 0 [pid 310] lstat("./185/bus", [pid 5897] <... setpgid resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 310] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5897] write(3, "1000", 4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5897] <... write resumed>) = 4 [pid 310] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5897] close(3 [pid 310] <... openat resumed>) = 4 [pid 5897] <... close resumed>) = 0 [pid 310] fstat(4, [pid 5897] symlink("/dev/binderfs", "./binderfs" [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5897] <... symlink resumed>) = 0 [pid 310] getdents64(4, [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5897] <... futex resumed>) = 0 [pid 310] getdents64(4, [pid 5897] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5897] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5897] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5897] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5900], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5900 [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5900 attached [pid 5900] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5900] memfd_create("syzkaller", 0) = 3 [pid 5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] close(4 [pid 5895] <... mount resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 5895] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] rmdir("./185/bus") = 0 [pid 5895] <... openat resumed>) = 3 [pid 309] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] getdents64(3, [pid 5895] chdir("./bus" [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5895] <... chdir resumed>) = 0 [pid 310] close(3 [pid 5895] ioctl(4, LOOP_CLR_FD [pid 310] <... close resumed>) = 0 [pid 310] rmdir("./185" [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./179/bus", [pid 310] <... rmdir resumed>) = 0 [pid 310] mkdir("./186", 0777 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./179/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5900] <... write resumed>) = 1048576 [pid 309] openat(AT_FDCWD, "./179/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5900] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5900] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] <... openat resumed>) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./179/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./179") = 0 [pid 309] mkdir("./180", 0777) = 0 [ 138.487804][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 138.526715][ T5895] ext4 filesystem being mounted at /root/syzkaller.69675s/184/bus supports timestamps until 2038 (0x7fffffff) [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5900] <... openat resumed>) = 4 [pid 5895] <... ioctl resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] close(4 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] <... close resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 306] lstat("./187/bus", [pid 309] <... close resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5901 [pid 306] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./187/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./187") = 0 [pid 306] mkdir("./188", 0777 [pid 310] close(3 [pid 306] <... mkdir resumed>) = 0 [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5902 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5903 ./strace-static-x86_64: Process 5902 attached [pid 5902] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5902] chdir("./186") = 0 [pid 5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5902] setpgid(0, 0) = 0 [pid 5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5902] write(3, "1000", 4) = 4 [pid 5902] close(3) = 0 [pid 5902] symlink("/dev/binderfs", "./binderfs" [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5902] <... symlink resumed>) = 0 [pid 5895] chdir("./file0" [pid 307] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5895] <... chdir resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5902] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5902] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 307] lstat("./183/bus", [pid 5895] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5894] <... futex resumed>) = 0 [pid 5895] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5902] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5904], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5904 ./strace-static-x86_64: Process 5901 attached [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5901] set_robust_list(0x55555748e5e0, 24 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5901] <... set_robust_list resumed>) = 0 [pid 5895] <... open resumed>) = 4 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5901] chdir("./180" [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5901] <... chdir resumed>) = 0 [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 4 [pid 5901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5895] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] <... prctl resumed>) = 0 [pid 5894] <... futex resumed>) = 0 [pid 307] fstat(4, [pid 5895] <... mount resumed>) = 0 [pid 5901] setpgid(0, 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] <... setpgid resumed>) = 0 [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5895] <... futex resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 5895] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] <... openat resumed>) = 3 [pid 5895] <... open resumed>) = 5 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5894] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 5901] write(3, "1000", 4 [pid 5900] ioctl(4, LOOP_SET_FD, 3 [pid 5895] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5901] <... write resumed>) = 4 [pid 5895] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5894] <... futex resumed>) = 0 [pid 307] close(4 [pid 5901] close(3 [pid 5895] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 [pid 5901] <... close resumed>) = 0 [pid 307] rmdir("./183/bus" [pid 5901] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... rmdir resumed>) = 0 [pid 5895] <... openat resumed>) = 6 [pid 307] getdents64(3, [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5894] <... futex resumed>) = 0 [pid 5895] <... futex resumed>) = 1 [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 5895] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./183" [pid 5901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5901] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 5901] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] mkdir("./184", 0777 [pid 5901] <... clone resumed>, parent_tid=[5906], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5906 [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5904 attached [pid 5904] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5904] memfd_create("syzkaller", 0 [pid 307] <... mkdir resumed>) = 0 [pid 5904] <... memfd_create resumed>) = 3 [pid 5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 5906 attached [pid 5906] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5906] memfd_create("syzkaller", 0) = 3 [pid 5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5900] <... ioctl resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 5900] close(3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 5900] <... close resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5900] mkdir("./bus", 0777 [pid 307] close(3) = 0 [pid 5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5900] <... mkdir resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5900] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5907 ./strace-static-x86_64: Process 5903 attached [pid 5903] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5903] chdir("./188" [pid 5895] <... write resumed>) = 262144 [pid 5903] <... chdir resumed>) = 0 [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5895] <... futex resumed>) = 1 [pid 5894] <... futex resumed>) = 0 [pid 5894] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5894] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5903] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 5907 attached [pid 5907] set_robust_list(0x55555748e5e0, 24 [pid 5903] setpgid(0, 0) = 0 [pid 5895] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5907] <... set_robust_list resumed>) = 0 [pid 5907] chdir("./184" [pid 5903] <... openat resumed>) = 3 [pid 5907] <... chdir resumed>) = 0 [pid 5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5907] setpgid(0, 0) = 0 [pid 5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5903] write(3, "1000", 4 [pid 5907] <... openat resumed>) = 3 [pid 5904] <... write resumed>) = 1048576 [pid 5903] <... write resumed>) = 4 [pid 5907] write(3, "1000", 4 [pid 5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5903] close(3 [pid 5907] <... write resumed>) = 4 [pid 5906] <... write resumed>) = 1048576 [pid 5903] <... close resumed>) = 0 [pid 5907] close(3) = 0 [pid 5907] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5907] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5907] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5907] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5903] symlink("/dev/binderfs", "./binderfs" [pid 5907] <... clone resumed>, parent_tid=[5909], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5909 [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] <... symlink resumed>) = 0 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5904] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5904] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5904] ioctl(4, LOOP_SET_FD, 3 [pid 5903] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 5909 attached [pid 5909] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5903] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5909] memfd_create("syzkaller", 0 [pid 5903] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5909] <... memfd_create resumed>) = 3 [pid 5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5906] munmap(0x7f19b51e4000, 1048576 [pid 5903] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5911], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5911 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5906] <... munmap resumed>) = 0 [pid 5906] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5904] <... ioctl resumed>) = 0 [pid 5904] close(3) = 0 [pid 5904] mkdir("./bus", 0777) = 0 [pid 5904] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5906] <... openat resumed>) = 4 [pid 5906] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 5911 attached [pid 5911] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5911] memfd_create("syzkaller", 0) = 3 [pid 5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5906] <... ioctl resumed>) = 0 [pid 5906] close(3) = 0 [pid 5906] mkdir("./bus", 0777) = 0 [pid 5906] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5900] <... mount resumed>) = 0 [pid 5895] <... write resumed>) = 1048576 [pid 5894] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5900] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5895] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... openat resumed>) = 3 [pid 5895] <... futex resumed>) = 0 [pid 5900] chdir("./bus" [pid 5895] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5900] <... chdir resumed>) = 0 [pid 5894] exit_group(0) = ? [pid 5900] ioctl(4, LOOP_CLR_FD [pid 5895] <... futex resumed>) = ? [pid 5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5909] <... write resumed>) = 1048576 [ 138.654978][ T5900] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/183/bus supports timestamps until 2038 (0x7fffffff) [ 138.675459][ T5904] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/186/bus supports timestamps until 2038 (0x7fffffff) [pid 5904] <... mount resumed>) = 0 [pid 5900] <... ioctl resumed>) = 0 [pid 5895] +++ exited with 0 +++ [pid 5894] +++ exited with 0 +++ [pid 5911] <... write resumed>) = 1048576 [pid 5900] close(4 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5900] <... close resumed>) = 0 [pid 5904] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... openat resumed>) = 3 [pid 5900] <... futex resumed>) = 1 [pid 308] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5904] chdir("./bus" [pid 5900] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5904] <... chdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5904] ioctl(4, LOOP_CLR_FD [pid 308] <... openat resumed>) = 3 [pid 5904] <... ioctl resumed>) = 0 [pid 308] fstat(3, [pid 5904] close(4 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5911] munmap(0x7f19b51e4000, 1048576 [pid 5904] <... close resumed>) = 0 [pid 308] getdents64(3, [pid 5911] <... munmap resumed>) = 0 [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5911] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5904] <... futex resumed>) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... openat resumed>) = 4 [pid 5909] munmap(0x7f19b51e4000, 1048576 [pid 5904] chdir("./file0" [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = 1 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] ioctl(4, LOOP_SET_FD, 3 [pid 5909] <... munmap resumed>) = 0 [pid 5904] <... chdir resumed>) = 0 [pid 5902] <... futex resumed>) = 0 [pid 5900] chdir("./file0" [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] lstat("./184/binderfs", [pid 5909] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] <... chdir resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5904] <... futex resumed>) = 0 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] unlink("./184/binderfs" [pid 5904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5906] <... mount resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5906] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5902] <... futex resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5906] <... openat resumed>) = 3 [pid 5904] <... open resumed>) = 4 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5897] <... futex resumed>) = 0 [pid 5911] <... ioctl resumed>) = 0 [pid 5911] close(3) = 0 [pid 5911] mkdir("./bus", 0777) = 0 [pid 5911] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5900] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... openat resumed>) = 4 [pid 5909] ioctl(4, LOOP_SET_FD, 3 [pid 5906] chdir("./bus" [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... ioctl resumed>) = 0 [pid 5900] <... open resumed>) = 4 [pid 5909] close(3) = 0 [pid 5909] mkdir("./bus", 0777) = 0 [pid 5909] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5906] <... chdir resumed>) = 0 [pid 5904] <... futex resumed>) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5902] <... futex resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5906] ioctl(4, LOOP_CLR_FD [pid 5897] <... futex resumed>) = 0 [pid 5900] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] <... mount resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5906] <... ioctl resumed>) = 0 [pid 5904] <... mount resumed>) = 0 [pid 5900] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5906] close(4 [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... open resumed>) = 5 [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] <... futex resumed>) = 0 [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5904] <... futex resumed>) = 1 [pid 5906] <... close resumed>) = 0 [pid 5904] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5902] <... futex resumed>) = 0 [pid 5900] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... open resumed>) = 5 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] <... openat resumed>) = 6 [pid 5897] <... futex resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 1 [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] <... futex resumed>) = 0 [pid 5900] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5900] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5904] <... futex resumed>) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [ 138.699439][ T5906] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/180/bus supports timestamps until 2038 (0x7fffffff) [ 138.717796][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 138.735329][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] chdir("./file0" [pid 5904] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5900] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5911] <... mount resumed>) = 0 [pid 5906] <... chdir resumed>) = 0 [pid 5904] <... openat resumed>) = 6 [pid 5902] <... futex resumed>) = 0 [pid 5900] <... write resumed>) = 262144 [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... futex resumed>) = 1 [pid 5904] <... futex resumed>) = 0 [pid 5902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5902] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [pid 5906] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5904] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... open resumed>) = 4 [pid 5904] <... write resumed>) = 262144 [pid 5911] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5900] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5897] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] <... openat resumed>) = 3 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5897] <... futex resumed>) = 0 [pid 5906] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5897] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... mount resumed>) = 0 [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5901] <... futex resumed>) = 0 [pid 5906] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] <... open resumed>) = 5 [pid 5911] chdir("./bus" [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] <... chdir resumed>) = 0 [pid 5906] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5911] ioctl(4, LOOP_CLR_FD [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] <... ioctl resumed>) = 0 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5904] <... futex resumed>) = 1 [pid 5902] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [pid 5911] close(4 [pid 5906] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5904] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5902] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5911] <... close resumed>) = 0 [pid 5909] <... mount resumed>) = 0 [pid 5906] <... openat resumed>) = 6 [pid 5902] <... futex resumed>) = 0 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5902] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5911] <... futex resumed>) = 1 [pid 5909] <... openat resumed>) = 3 [pid 5906] <... futex resumed>) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [pid 5911] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] chdir("./bus" [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... chdir resumed>) = 0 [pid 5906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5903] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [pid 5911] chdir("./file0" [pid 5909] ioctl(4, LOOP_CLR_FD [pid 5906] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5911] <... chdir resumed>) = 0 [pid 5906] <... write resumed>) = 262144 [pid 5900] <... write resumed>) = 1048576 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] <... futex resumed>) = 1 [pid 5901] <... futex resumed>) = 0 [pid 5911] <... futex resumed>) = 1 [pid 5906] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5903] <... futex resumed>) = 0 [pid 5901] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] <... futex resumed>) = 1 [pid 5897] <... futex resumed>) = 0 [pid 5911] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5909] <... ioctl resumed>) = 0 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5901] <... futex resumed>) = 0 [pid 5900] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5897] exit_group(0 [pid 308] <... umount2 resumed>) = 0 [pid 5901] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] close(4 [pid 5903] <... futex resumed>) = 0 [pid 5900] <... futex resumed>) = 0 [pid 5897] <... exit_group resumed>) = ? [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5909] <... close resumed>) = 0 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5900] +++ exited with 0 +++ [pid 5897] +++ exited with 0 +++ [pid 5911] <... open resumed>) = 4 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 308] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5911] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5909] chdir("./file0" [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] lstat("./184/bus", [pid 5911] <... mount resumed>) = 0 [pid 5909] <... chdir resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... futex resumed>) = 0 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5911] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 138.762606][ T5911] ext4 filesystem being mounted at /root/syzkaller.URAKkl/188/bus supports timestamps until 2038 (0x7fffffff) [ 138.780910][ T5909] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/184/bus supports timestamps until 2038 (0x7fffffff) [pid 305] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5904] <... write resumed>) = 1048576 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] <... futex resumed>) = 0 [pid 5909] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5904] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] <... futex resumed>) = 1 [pid 308] <... openat resumed>) = 4 [pid 305] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5911] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5904] <... futex resumed>) = 1 [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5902] <... futex resumed>) = 0 [pid 308] fstat(4, [pid 5911] <... open resumed>) = 5 [pid 5909] <... open resumed>) = 4 [pid 5904] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5902] exit_group(0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5904] <... futex resumed>) = ? [pid 5902] <... exit_group resumed>) = ? [pid 308] getdents64(4, [pid 305] fstat(3, [pid 5911] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5906] <... write resumed>) = 1048576 [pid 5904] +++ exited with 0 +++ [pid 5903] <... futex resumed>) = 0 [pid 5902] +++ exited with 0 +++ [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5911] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 308] getdents64(4, [pid 305] getdents64(3, [pid 5911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5906] <... futex resumed>) = 1 [pid 5903] <... futex resumed>) = 0 [pid 5901] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5911] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5909] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5906] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5901] exit_group(0 [pid 308] close(4 [pid 305] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... openat resumed>) = 6 [pid 5909] <... mount resumed>) = 0 [pid 5906] <... futex resumed>) = ? [pid 5901] <... exit_group resumed>) = ? [pid 308] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5906] +++ exited with 0 +++ [pid 5901] +++ exited with 0 +++ [pid 310] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] rmdir("./184/bus" [pid 305] lstat("./183/binderfs", [pid 5911] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... rmdir resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5911] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 308] getdents64(3, [pid 305] unlink("./183/binderfs" [pid 5911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] umount2("./180", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] <... unlink resumed>) = 0 [pid 5911] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5909] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] fstat(3, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] close(3 [pid 305] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5911] <... write resumed>) = 262144 [pid 5909] <... open resumed>) = 5 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] openat(AT_FDCWD, "./180", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... close resumed>) = 0 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(3, [pid 309] <... openat resumed>) = 3 [pid 308] rmdir("./184" [pid 5911] <... futex resumed>) = 1 [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] fstat(3, [pid 308] <... rmdir resumed>) = 0 [pid 5911] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] mkdir("./185", 0777 [pid 5911] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 5903] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] getdents64(3, [pid 308] <... mkdir resumed>) = 0 [pid 5911] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5909] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5903] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] lstat("./186/binderfs", [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5909] <... openat resumed>) = 6 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... openat resumed>) = 3 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] unlink("./186/binderfs" [pid 309] umount2("./180/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] ioctl(3, LOOP_CLR_FD [pid 5909] <... futex resumed>) = 1 [pid 5907] <... futex resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] lstat("./180/binderfs", [pid 5909] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] <... futex resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] close(3 [pid 309] unlink("./180/binderfs") = 0 [pid 309] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 138.869750][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 138.892840][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 138.895806][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 5909] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... close resumed>) = 0 [pid 5909] <... write resumed>) = 262144 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5907] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5909] <... futex resumed>) = 0 [pid 5907] <... futex resumed>) = 1 [pid 5909] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5907] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5903] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5924 ./strace-static-x86_64: Process 5924 attached [pid 5911] <... write resumed>) = 1048576 [pid 5924] set_robust_list(0x55555748e5e0, 24 [pid 5911] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5903] exit_group(0 [pid 5924] <... set_robust_list resumed>) = 0 [pid 5903] <... exit_group resumed>) = ? [pid 5911] <... futex resumed>) = ? [pid 5924] chdir("./185" [pid 5911] +++ exited with 0 +++ [pid 5903] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./188/binderfs") = 0 [pid 306] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5924] <... chdir resumed>) = 0 [pid 5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 138.920169][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 138.937210][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 138.956522][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5924] setpgid(0, 0 [pid 5907] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5924] <... setpgid resumed>) = 0 [pid 5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5924] write(3, "1000", 4) = 4 [pid 5924] close(3) = 0 [pid 5924] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5924] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5924] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5925], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5925 [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5909] <... write resumed>) = 1048576 [pid 5909] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5909] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5907] exit_group(0) = ? [pid 5909] <... futex resumed>) = ? ./strace-static-x86_64: Process 5925 attached [pid 5925] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5925] memfd_create("syzkaller", 0) = 3 [pid 5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5925] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5925] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] <... umount2 resumed>) = 0 [pid 5909] +++ exited with 0 +++ [pid 5907] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./184/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./184/binderfs") = 0 [pid 307] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 138.970361][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 138.985251][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./183/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./183/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./183") = 0 [pid 305] mkdir("./184", 0777) = 0 [ 139.043105][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 139.057009][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5925] <... openat resumed>) = 4 [pid 5925] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5925] close(3 [pid 310] <... umount2 resumed>) = 0 [pid 5925] <... close resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 5925] mkdir("./bus", 0777 [pid 306] <... umount2 resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5925] <... mkdir resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5925] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] close(3 [pid 307] <... umount2 resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5927 attached [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5927 [pid 307] lstat("./184/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] lstat("./186/bus", [pid 309] lstat("./180/bus", [pid 307] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... openat resumed>) = 4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] umount2("./180/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] fstat(4, [pid 306] lstat("./188/bus", [pid 310] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] getdents64(4, [pid 310] <... openat resumed>) = 4 [pid 309] openat(AT_FDCWD, "./180/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] fstat(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... openat resumed>) = 4 [pid 306] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] getdents64(4, [pid 309] fstat(4, [pid 307] close(4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... close resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] getdents64(4, [pid 307] rmdir("./184/bus" [pid 309] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] close(4 [pid 307] getdents64(3, [pid 306] <... openat resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] rmdir("./186/bus" [pid 309] getdents64(4, [pid 307] close(3 [pid 306] fstat(4, [pid 310] <... rmdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 309] close(4 [pid 307] rmdir("./184" [pid 306] getdents64(4, [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./180/bus" [pid 307] mkdir("./185", 0777 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] close(3 [pid 307] <... mkdir resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] <... close resumed>) = 0 [pid 309] getdents64(3, [pid 306] getdents64(4, [pid 310] rmdir("./186" [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] close(3 [pid 306] close(4) = 0 [pid 309] <... close resumed>) = 0 [pid 310] mkdir("./187", 0777 [pid 306] rmdir("./188/bus" [pid 309] rmdir("./180" [pid 306] <... rmdir resumed>) = 0 [pid 5927] set_robust_list(0x55555748e5e0, 24 [pid 310] <... mkdir resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] mkdir("./181", 0777 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 306] close(3 [pid 5925] <... mount resumed>) = 0 [pid 5925] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5925] chdir("./bus") = 0 [pid 5925] ioctl(4, LOOP_CLR_FD [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./188") = 0 [pid 309] <... mkdir resumed>) = 0 [pid 306] mkdir("./189", 0777 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5927] <... set_robust_list resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5927] chdir("./184") = 0 [pid 5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5927] setpgid(0, 0) = 0 [pid 5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5927] write(3, "1000", 4) = 4 [pid 5927] close(3) = 0 [pid 5927] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5927] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5927] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5930 attached , parent_tid=[5930], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5930 [pid 5930] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5930] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5930] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5930] memfd_create("syzkaller", 0) = 3 [pid 5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5930] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5930] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5925] <... ioctl resumed>) = 0 [pid 5925] close(4) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 5925] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 309] close(3 [pid 307] close(3 [pid 306] close(3 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 5925] chdir("./file0" [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 5925] <... chdir resumed>) = 0 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5925] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [ 139.175050][ T5925] ext4 filesystem being mounted at /root/syzkaller.69675s/185/bus supports timestamps until 2038 (0x7fffffff) [pid 5925] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached [pid 5925] <... open resumed>) = 4 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5932 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5931 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5925] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5925] <... mount resumed>) = 0 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5924] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5934 attached ./strace-static-x86_64: Process 5933 attached ./strace-static-x86_64: Process 5931 attached [pid 5932] set_robust_list(0x55555748e5e0, 24 [pid 5930] <... openat resumed>) = 4 [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5933 [pid 5934] set_robust_list(0x55555748e5e0, 24 [pid 5932] <... set_robust_list resumed>) = 0 [pid 5931] set_robust_list(0x55555748e5e0, 24 [pid 5930] ioctl(4, LOOP_SET_FD, 3 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5934 [pid 5934] <... set_robust_list resumed>) = 0 [pid 5932] chdir("./187" [pid 5931] <... set_robust_list resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5934] chdir("./189" [pid 5933] set_robust_list(0x55555748e5e0, 24 [pid 5932] <... chdir resumed>) = 0 [pid 5931] chdir("./181" [pid 5930] <... ioctl resumed>) = 0 [pid 5925] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] <... chdir resumed>) = 0 [pid 5933] <... set_robust_list resumed>) = 0 [pid 5932] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5931] <... chdir resumed>) = 0 [pid 5930] close(3 [pid 5925] <... open resumed>) = 5 [pid 5934] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5933] chdir("./185" [pid 5932] <... prctl resumed>) = 0 [pid 5931] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5930] <... close resumed>) = 0 [pid 5934] <... prctl resumed>) = 0 [pid 5933] <... chdir resumed>) = 0 [pid 5932] setpgid(0, 0 [pid 5931] <... prctl resumed>) = 0 [pid 5930] mkdir("./bus", 0777 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] setpgid(0, 0 [pid 5933] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5932] <... setpgid resumed>) = 0 [pid 5931] setpgid(0, 0 [pid 5930] <... mkdir resumed>) = 0 [pid 5925] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5934] <... setpgid resumed>) = 0 [pid 5933] <... prctl resumed>) = 0 [pid 5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5931] <... setpgid resumed>) = 0 [pid 5930] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5933] setpgid(0, 0 [pid 5932] <... openat resumed>) = 3 [pid 5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5932] write(3, "1000", 4 [pid 5925] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] <... openat resumed>) = 3 [pid 5933] <... setpgid resumed>) = 0 [pid 5932] <... write resumed>) = 4 [pid 5931] <... openat resumed>) = 3 [pid 5925] <... openat resumed>) = 6 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5934] write(3, "1000", 4 [pid 5932] close(3 [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... write resumed>) = 4 [pid 5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5932] <... close resumed>) = 0 [pid 5931] write(3, "1000", 4 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5934] close(3 [pid 5932] symlink("/dev/binderfs", "./binderfs" [pid 5925] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5934] <... close resumed>) = 0 [pid 5933] <... openat resumed>) = 3 [pid 5932] <... symlink resumed>) = 0 [pid 5931] <... write resumed>) = 4 [pid 5934] symlink("/dev/binderfs", "./binderfs" [pid 5933] write(3, "1000", 4 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] close(3 [pid 5934] <... symlink resumed>) = 0 [pid 5933] <... write resumed>) = 4 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... close resumed>) = 0 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] close(3 [pid 5932] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5931] symlink("/dev/binderfs", "./binderfs" [pid 5934] <... futex resumed>) = 0 [pid 5933] <... close resumed>) = 0 [pid 5932] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5931] <... symlink resumed>) = 0 [pid 5934] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5933] symlink("/dev/binderfs", "./binderfs" [pid 5932] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5934] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5933] <... symlink resumed>) = 0 [pid 5932] <... mprotect resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5925] <... write resumed>) = 262144 [pid 5934] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5931] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5936 attached [pid 5934] <... mprotect resumed>) = 0 [pid 5933] <... futex resumed>) = 0 [pid 5931] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5925] <... futex resumed>) = 1 [pid 5924] <... futex resumed>) = 0 [pid 5936] set_robust_list(0x7f19bd6049e0, 24 [pid 5934] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5933] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5932] <... clone resumed>, parent_tid=[5936], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5936 [pid 5931] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5925] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5924] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... set_robust_list resumed>) = 0 [pid 5933] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... mprotect resumed>) = 0 [pid 5925] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5924] <... futex resumed>) = 0 [pid 5936] memfd_create("syzkaller", 0 [pid 5934] <... clone resumed>, parent_tid=[5937], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5937 [pid 5933] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5932] <... futex resumed>) = 0 [pid 5931] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5925] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5924] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... memfd_create resumed>) = 3 [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] <... mprotect resumed>) = 0 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5933] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5931] <... clone resumed>, parent_tid=[5939], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5939 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] <... clone resumed>, parent_tid=[5940], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5940 [pid 5931] <... futex resumed>) = 0 [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5933] <... futex resumed>) = 0 [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5940 attached [pid 5940] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5940] memfd_create("syzkaller", 0) = 3 [pid 5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5937 attached [pid 5937] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5937] memfd_create("syzkaller", 0) = 3 [pid 5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5934] <... futex resumed>) = 0 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 5939 attached [pid 5939] set_robust_list(0x7f19bd6049e0, 24 [pid 5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5939] <... set_robust_list resumed>) = 0 [pid 5939] memfd_create("syzkaller", 0) = 3 [pid 5940] <... write resumed>) = 1048576 [pid 5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5940] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5940] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5940] ioctl(4, LOOP_SET_FD, 3 [pid 5937] <... write resumed>) = 1048576 [pid 5937] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5937] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5940] <... ioctl resumed>) = 0 [pid 5940] close(3) = 0 [pid 5940] mkdir("./bus", 0777 [pid 5937] <... openat resumed>) = 4 [pid 5937] ioctl(4, LOOP_SET_FD, 3 [pid 5940] <... mkdir resumed>) = 0 [pid 5940] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5930] <... mount resumed>) = 0 [pid 5930] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5930] chdir("./bus") = 0 [pid 5930] ioctl(4, LOOP_CLR_FD [pid 5937] <... ioctl resumed>) = 0 [pid 5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5937] close(3) = 0 [pid 5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5937] mkdir("./bus", 0777) = 0 [pid 5937] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5930] <... ioctl resumed>) = 0 [pid 5930] close(4) = 0 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... futex resumed>) = 1 [pid 5930] chdir("./file0") = 0 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5924] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5930] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5925] <... write resumed>) = 1048576 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5925] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] <... open resumed>) = 5 [pid 5925] <... futex resumed>) = 0 [pid 5924] exit_group(0) = ? [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5927] <... futex resumed>) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... openat resumed>) = 6 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5927] <... futex resumed>) = 0 [pid 5930] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... write resumed>) = 1048576 [pid 5939] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5939] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [ 139.290593][ T5930] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/184/bus supports timestamps until 2038 (0x7fffffff) [pid 5939] ioctl(4, LOOP_SET_FD, 3 [pid 5936] <... write resumed>) = 1048576 [pid 5930] <... write resumed>) = 262144 [pid 5925] +++ exited with 0 +++ [pid 5924] +++ exited with 0 +++ [pid 5936] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5936] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 5936] ioctl(4, LOOP_SET_FD, 3 [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 5940] <... mount resumed>) = 0 [pid 5939] <... ioctl resumed>) = 0 [pid 5927] <... futex resumed>) = 0 [pid 5939] close(3) = 0 [pid 5927] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] mkdir("./bus", 0777 [pid 5936] <... ioctl resumed>) = 0 [pid 5927] <... futex resumed>) = 0 [pid 308] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5936] close(3) = 0 [pid 5936] mkdir("./bus", 0777) = 0 [pid 5936] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5930] <... futex resumed>) = 1 [pid 5930] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5927] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... mkdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5939] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] fstat(3, [pid 5940] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5940] <... openat resumed>) = 3 [pid 308] getdents64(3, [pid 5940] chdir("./bus") = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5940] ioctl(4, LOOP_CLR_FD [pid 308] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] <... ioctl resumed>) = 0 [pid 5937] <... mount resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5940] close(4 [pid 308] lstat("./185/binderfs", [pid 5937] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5940] <... close resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5940] <... futex resumed>) = 1 [pid 5933] <... futex resumed>) = 0 [pid 308] unlink("./185/binderfs" [pid 5940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] <... unlink resumed>) = 0 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5940] chdir("./file0" [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5940] <... chdir resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5940] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... open resumed>) = 4 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] <... futex resumed>) = 0 [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5940] <... futex resumed>) = 0 [pid 5940] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... mount resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = 0 [pid 5940] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... open resumed>) = 5 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5933] <... futex resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... openat resumed>) = 3 [pid 5933] <... futex resumed>) = 0 [ 139.347477][ T5940] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/185/bus supports timestamps until 2038 (0x7fffffff) [ 139.365031][ T5937] ext4 filesystem being mounted at /root/syzkaller.URAKkl/189/bus supports timestamps until 2038 (0x7fffffff) [pid 5940] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5937] chdir("./bus" [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... openat resumed>) = 6 [pid 5937] <... chdir resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] ioctl(4, LOOP_CLR_FD [pid 5940] <... futex resumed>) = 1 [pid 5937] <... ioctl resumed>) = 0 [pid 5933] <... futex resumed>) = 0 [pid 5940] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] close(4 [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5940] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] <... close resumed>) = 0 [pid 5933] <... futex resumed>) = 0 [pid 5940] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... write resumed>) = 262144 [pid 5937] <... futex resumed>) = 1 [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] <... futex resumed>) = 0 [pid 5933] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5933] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... futex resumed>) = 1 [pid 5940] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5934] <... futex resumed>) = 0 [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... futex resumed>) = 0 [pid 5934] <... futex resumed>) = 1 [pid 5937] chdir("./file0") = 0 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5930] <... write resumed>) = 1048576 [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5934] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5930] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5927] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5930] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 139.400398][ T5939] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/181/bus supports timestamps until 2038 (0x7fffffff) [ 139.413319][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 139.432216][ T5936] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/187/bus supports timestamps until 2038 (0x7fffffff) [pid 5927] exit_group(0 [pid 5930] <... futex resumed>) = ? [pid 5927] <... exit_group resumed>) = ? [pid 5939] <... mount resumed>) = 0 [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5930] +++ exited with 0 +++ [pid 5927] +++ exited with 0 +++ [pid 5939] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5937] <... futex resumed>) = 0 [pid 5936] <... mount resumed>) = 0 [pid 5934] <... futex resumed>) = 1 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 5939] <... openat resumed>) = 3 [pid 5937] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5936] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] chdir("./bus" [pid 5937] <... open resumed>) = 4 [pid 5936] <... openat resumed>) = 3 [pid 5939] <... chdir resumed>) = 0 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] chdir("./bus" [pid 5939] ioctl(4, LOOP_CLR_FD [pid 5937] <... futex resumed>) = 1 [pid 5936] <... chdir resumed>) = 0 [pid 5934] <... futex resumed>) = 0 [pid 5939] <... ioctl resumed>) = 0 [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] ioctl(4, LOOP_CLR_FD [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] close(4 [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] <... ioctl resumed>) = 0 [pid 5934] <... futex resumed>) = 0 [pid 5939] <... close resumed>) = 0 [pid 5937] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5936] close(4 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... mount resumed>) = 0 [pid 5936] <... close resumed>) = 0 [pid 305] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5939] <... futex resumed>) = 1 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] <... futex resumed>) = 1 [pid 5936] <... futex resumed>) = 1 [pid 5934] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = 0 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... openat resumed>) = 3 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 305] fstat(3, [pid 5939] chdir("./file0" [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5934] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = 0 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5939] <... chdir resumed>) = 0 [pid 5937] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5936] chdir("./file0" [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] getdents64(3, [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... open resumed>) = 5 [pid 5936] <... chdir resumed>) = 0 [pid 5939] <... futex resumed>) = 1 [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] <... futex resumed>) = 1 [pid 5932] <... futex resumed>) = 0 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... futex resumed>) = 1 [pid 5934] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 305] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... open resumed>) = 4 [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5934] <... futex resumed>) = 0 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [pid 5936] <... open resumed>) = 4 [pid 5931] <... futex resumed>) = 0 [pid 305] lstat("./184/binderfs", [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5937] <... openat resumed>) = 6 [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... futex resumed>) = 1 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 305] unlink("./184/binderfs" [pid 5939] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5937] <... futex resumed>) = 1 [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5934] <... futex resumed>) = 0 [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... mount resumed>) = 0 [pid 5937] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5934] <... futex resumed>) = 0 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5939] <... futex resumed>) = 1 [pid 5937] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5936] <... mount resumed>) = 0 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5931] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] <... futex resumed>) = 1 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5939] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... open resumed>) = 5 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [pid 5936] <... open resumed>) = 5 [pid 5931] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] <... futex resumed>) = 1 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5939] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... openat resumed>) = 6 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5932] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [pid 5936] <... openat resumed>) = 6 [pid 5931] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5939] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5936] <... futex resumed>) = 1 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5939] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... write resumed>) = 262144 [pid 5937] <... write resumed>) = 262144 [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5933] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5932] <... futex resumed>) = 0 [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5939] <... futex resumed>) = 1 [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] <... write resumed>) = 262144 [pid 5931] <... futex resumed>) = 0 [pid 5939] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 139.444776][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5931] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5937] <... futex resumed>) = 1 [pid 5936] <... futex resumed>) = 1 [pid 5934] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = 0 [pid 5931] <... futex resumed>) = 0 [pid 5937] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5936] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5934] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5931] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5936] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5934] <... futex resumed>) = 0 [pid 5932] <... futex resumed>) = 0 [pid 5936] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5934] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5932] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5940] <... write resumed>) = 1048576 [pid 5937] <... write resumed>) = 1048576 [pid 5936] <... write resumed>) = 1048576 [pid 5940] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5933] exit_group(0 [pid 5940] <... futex resumed>) = ? [pid 5933] <... exit_group resumed>) = ? [pid 5940] +++ exited with 0 +++ [pid 5936] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5932] <... futex resumed>) = 0 [pid 5932] exit_group(0) = ? [pid 5936] <... futex resumed>) = ? [pid 5937] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5934] <... futex resumed>) = 0 [pid 5939] <... write resumed>) = 1048576 [pid 5933] +++ exited with 0 +++ [pid 5931] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 308] <... umount2 resumed>) = 0 [pid 5934] exit_group(0 [pid 5939] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5936] +++ exited with 0 +++ [pid 5934] <... exit_group resumed>) = ? [pid 5932] +++ exited with 0 +++ [pid 5931] exit_group(0 [pid 308] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5939] <... futex resumed>) = ? [pid 5937] +++ exited with 0 +++ [pid 5934] +++ exited with 0 +++ [pid 5931] <... exit_group resumed>) = ? [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5939] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] lstat("./185/bus", [pid 307] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 3 [pid 310] fstat(3, [pid 308] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] fstat(3, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 308] fstat(4, [pid 307] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(4, [pid 307] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./187/binderfs", [pid 307] lstat("./185/binderfs", [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./187/binderfs" [pid 307] unlink("./185/binderfs" [pid 310] <... unlink resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 310] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(4, [ 139.491487][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 139.528008][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 139.565230][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 139.565238][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 139.574048][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5931] +++ exited with 0 +++ [pid 308] close(4 [pid 306] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] rmdir("./185/bus" [pid 306] fstat(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... rmdir resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./184/bus", [pid 309] umount2("./181", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(3, [pid 306] getdents64(3, [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] openat(AT_FDCWD, "./181", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] close(3 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... openat resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 306] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] fstat(3, [pid 308] rmdir("./185" [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... rmdir resumed>) = 0 [pid 309] getdents64(3, [pid 306] lstat("./189/binderfs", [pid 305] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... openat resumed>) = 4 [pid 309] umount2("./181/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] mkdir("./186", 0777 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] fstat(4, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./181/binderfs", [pid 308] <... mkdir resumed>) = 0 [pid 306] unlink("./189/binderfs" [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 309] unlink("./181/binderfs" [pid 308] <... openat resumed>) = 3 [pid 306] <... unlink resumed>) = 0 [pid 305] getdents64(4, [pid 309] <... unlink resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(4, [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5954 ./strace-static-x86_64: Process 5954 attached [pid 5954] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5954] chdir("./186") = 0 [pid 5954] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5954] setpgid(0, 0) = 0 [pid 5954] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5954] write(3, "1000", 4) = 4 [pid 5954] close(3) = 0 [pid 5954] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5954] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./184/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./184") = 0 [pid 305] mkdir("./185", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5954] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5954] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5955], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5955 [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5955 attached [pid 5955] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5955] memfd_create("syzkaller", 0) = 3 [pid 5955] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5955] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 5955] munmap(0x7f19b51e4000, 1048576) = 0 [ 139.579963][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 139.623098][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 139.636507][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 139.649953][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5955] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 307] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 5955] ioctl(4, LOOP_SET_FD, 3 [pid 307] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./185/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./185/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./185") = 0 [pid 307] mkdir("./186", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 5955] <... ioctl resumed>) = 0 [pid 5955] close(3) = 0 [pid 5955] mkdir("./bus", 0777) = 0 [ 139.659440][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 5955] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./189/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./189/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./189") = 0 [pid 306] mkdir("./190", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5955] <... mount resumed>) = 0 [pid 5955] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5955] chdir("./bus") = 0 [pid 5955] ioctl(4, LOOP_CLR_FD [pid 307] <... openat resumed>) = 3 [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5959 [pid 310] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5960 ./strace-static-x86_64: Process 5960 attached [pid 5960] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5960] chdir("./186") = 0 [pid 5960] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5960] setpgid(0, 0 [pid 310] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5961 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 139.744685][ T5955] ext4 filesystem being mounted at /root/syzkaller.69675s/186/bus supports timestamps until 2038 (0x7fffffff) [pid 310] lstat("./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] <... setpgid resumed>) = 0 [pid 5960] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5960] <... openat resumed>) = 3 [pid 5960] write(3, "1000", 4) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 5960] close(3 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 5960] <... close resumed>) = 0 [pid 5960] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] <... umount2 resumed>) = 0 ./strace-static-x86_64: Process 5961 attached ./strace-static-x86_64: Process 5959 attached [pid 5955] <... ioctl resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5960] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5960] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5960] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5962], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5962 [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] rmdir("./187/bus" [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5955] close(4./strace-static-x86_64: Process 5962 attached [pid 310] <... rmdir resumed>) = 0 [pid 309] lstat("./181/bus", [pid 5955] <... close resumed>) = 0 [pid 310] getdents64(3, [pid 5959] set_robust_list(0x55555748e5e0, 24 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5959] <... set_robust_list resumed>) = 0 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] umount2("./181/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5961] set_robust_list(0x55555748e5e0, 24 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 5959] chdir("./185" [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5961] <... set_robust_list resumed>) = 0 [pid 5959] <... chdir resumed>) = 0 [pid 5955] chdir("./file0" [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 309] openat(AT_FDCWD, "./181/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5961] chdir("./190" [pid 5959] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5955] <... chdir resumed>) = 0 [pid 310] rmdir("./187" [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 4 [pid 310] <... rmdir resumed>) = 0 [pid 309] fstat(4, [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 310] mkdir("./188", 0777 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 309] getdents64(4, [pid 5955] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] getdents64(4, [pid 310] <... openat resumed>) = 3 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 5955] <... open resumed>) = 4 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] close(4 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... close resumed>) = 0 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 310] close(3 [pid 309] rmdir("./181/bus" [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... rmdir resumed>) = 0 [pid 5955] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] set_robust_list(0x7f19bd6049e0, 24 [pid 309] getdents64(3, [pid 5955] <... mount resumed>) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5963 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 5959] <... prctl resumed>) = 0 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 5959] setpgid(0, 0 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] rmdir("./181" [pid 5959] <... setpgid resumed>) = 0 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5955] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... rmdir resumed>) = 0 [pid 5959] <... openat resumed>) = 3 [pid 5955] <... open resumed>) = 5 [pid 309] mkdir("./182", 0777 [pid 5961] <... chdir resumed>) = 0 [pid 5959] write(3, "1000", 4 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... mkdir resumed>) = 0 [pid 5961] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5959] <... write resumed>) = 4 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5961] <... prctl resumed>) = 0 [pid 5959] close(3 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 5961] setpgid(0, 0 [pid 5959] <... close resumed>) = 0 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 5961] <... setpgid resumed>) = 0 [pid 5959] symlink("/dev/binderfs", "./binderfs" [pid 5955] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5955] <... openat resumed>) = 6 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 5959] <... symlink resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 5961] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5959] <... futex resumed>) = 0 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 5961] <... openat resumed>) = 3 [pid 5959] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5955] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... set_robust_list resumed>) = 0 [pid 5961] write(3, "1000", 4 [pid 5959] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5962] memfd_create("syzkaller", 0) = 3 [pid 5962] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5959] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5964 [pid 5961] <... write resumed>) = 4 [pid 5959] <... mprotect resumed>) = 0 [pid 5961] close(3 [pid 5959] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 5963 attached [pid 5961] <... close resumed>) = 0 [pid 5961] symlink("/dev/binderfs", "./binderfs" [pid 5959] <... clone resumed>, parent_tid=[5965], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5965 [pid 5955] <... write resumed>) = 262144 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5963] set_robust_list(0x55555748e5e0, 24 [pid 5961] <... symlink resumed>) = 0 [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] <... set_robust_list resumed>) = 0 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 5963] chdir("./188" [pid 5961] <... futex resumed>) = 0 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5964 attached [pid 5963] <... chdir resumed>) = 0 [pid 5961] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5955] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5954] <... futex resumed>) = 0 [pid 5964] set_robust_list(0x55555748e5e0, 24 [pid 5963] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5961] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5955] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5954] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5964] <... set_robust_list resumed>) = 0 [pid 5963] <... prctl resumed>) = 0 [pid 5961] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5963] setpgid(0, 0) = 0 [pid 5963] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5963] write(3, "1000", 4) = 4 [pid 5963] close(3) = 0 [pid 5963] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5965 attached ) = 0 [pid 5965] set_robust_list(0x7f19bd6049e0, 24 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... set_robust_list resumed>) = 0 [pid 5965] memfd_create("syzkaller", 0 [pid 5963] <... futex resumed>) = 0 [pid 5965] <... memfd_create resumed>) = 3 [pid 5963] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5963] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5965] <... mmap resumed>) = 0x7f19b51e4000 [pid 5963] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5964] chdir("./182" [pid 5963] <... mprotect resumed>) = 0 [pid 5962] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5961] <... mprotect resumed>) = 0 [pid 5963] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5966], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5966 [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5964] <... chdir resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5964] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5961] <... clone resumed>, parent_tid=[5967], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5967 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] setpgid(0, 0./strace-static-x86_64: Process 5967 attached ) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5967] set_robust_list(0x7f19bd6049e0, 24 [pid 5964] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5964] <... openat resumed>) = 3 [pid 5964] write(3, "1000", 4) = 4 [pid 5964] close(3) = 0 [pid 5964] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5966 attached ) = 0 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] <... set_robust_list resumed>) = 0 [pid 5966] set_robust_list(0x7f19bd6049e0, 24 [pid 5964] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5966] <... set_robust_list resumed>) = 0 [pid 5964] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5967] memfd_create("syzkaller", 0 [pid 5966] memfd_create("syzkaller", 0 [pid 5964] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5967] <... memfd_create resumed>) = 3 [pid 5966] <... memfd_create resumed>) = 3 [pid 5964] <... mprotect resumed>) = 0 [pid 5967] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5964] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5967] <... mmap resumed>) = 0x7f19b51e4000 [pid 5966] <... mmap resumed>) = 0x7f19b51e4000 [pid 5955] <... write resumed>) = 1048576 [pid 5962] <... write resumed>) = 1048576 [pid 5962] munmap(0x7f19b51e4000, 1048576 [pid 5967] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5964] <... clone resumed>, parent_tid=[5968], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5968 [pid 5955] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5955] <... futex resumed>) = 1 [pid 5954] <... futex resumed>) = 0 [pid 5964] <... futex resumed>) = 0 [pid 5955] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5954] exit_group(0 [pid 5965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5955] <... futex resumed>) = ? [pid 5954] <... exit_group resumed>) = ? [pid 5962] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 5968 attached [pid 5968] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5962] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5968] memfd_create("syzkaller", 0 [pid 5962] <... openat resumed>) = 4 [pid 5968] <... memfd_create resumed>) = 3 [pid 5962] ioctl(4, LOOP_SET_FD, 3 [pid 5955] +++ exited with 0 +++ [pid 5954] +++ exited with 0 +++ [pid 5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5966] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5954, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 5968] <... mmap resumed>) = 0x7f19b51e4000 [pid 5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5967] <... write resumed>) = 1048576 [pid 5965] <... write resumed>) = 1048576 [pid 5962] <... ioctl resumed>) = 0 [pid 5962] close(3 [pid 308] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5962] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5962] mkdir("./bus", 0777 [pid 308] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5965] munmap(0x7f19b51e4000, 1048576 [pid 5962] <... mkdir resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 5962] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 308] fstat(3, [pid 5965] <... munmap resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5965] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 308] getdents64(3, [pid 5965] <... openat resumed>) = 4 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5967] munmap(0x7f19b51e4000, 1048576 [pid 5965] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5967] <... munmap resumed>) = 0 [pid 308] lstat("./186/binderfs", [pid 5967] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./186/binderfs") = 0 [pid 308] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5968] <... write resumed>) = 1048576 [pid 5967] <... openat resumed>) = 4 [pid 5966] <... write resumed>) = 1048576 [pid 5965] <... ioctl resumed>) = 0 [pid 5968] munmap(0x7f19b51e4000, 1048576 [pid 5967] ioctl(4, LOOP_SET_FD, 3 [pid 5966] munmap(0x7f19b51e4000, 1048576 [pid 5965] close(3 [pid 5968] <... munmap resumed>) = 0 [pid 5966] <... munmap resumed>) = 0 [pid 5965] <... close resumed>) = 0 [pid 5968] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5966] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5965] mkdir("./bus", 0777) = 0 [pid 5965] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5968] <... openat resumed>) = 4 [pid 5967] <... ioctl resumed>) = 0 [pid 5966] <... openat resumed>) = 4 [pid 5968] ioctl(4, LOOP_SET_FD, 3 [pid 5967] close(3 [pid 5966] ioctl(4, LOOP_SET_FD, 3 [pid 5967] <... close resumed>) = 0 [pid 5967] mkdir("./bus", 0777) = 0 [pid 5967] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5968] <... ioctl resumed>) = 0 [pid 5968] close(3) = 0 [pid 5968] mkdir("./bus", 0777) = 0 [pid 5968] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5962] <... mount resumed>) = 0 [pid 5962] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5966] <... ioctl resumed>) = 0 [pid 5962] <... openat resumed>) = 3 [pid 5962] chdir("./bus") = 0 [pid 5962] ioctl(4, LOOP_CLR_FD) = 0 [pid 5962] close(4) = 0 [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] <... futex resumed>) = 0 [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5966] close(3) = 0 [pid 5966] mkdir("./bus", 0777) = 0 [pid 5966] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5962] <... futex resumed>) = 1 [pid 5962] chdir("./file0") = 0 [ 139.903369][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 139.916942][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 139.939541][ T5962] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/186/bus supports timestamps until 2038 (0x7fffffff) [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... mount resumed>) = 0 [pid 5968] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5965] <... mount resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5960] <... futex resumed>) = 0 [pid 5962] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5960] <... futex resumed>) = 0 [pid 5962] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... open resumed>) = 4 [pid 5968] <... openat resumed>) = 3 [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] chdir("./bus" [pid 5962] <... futex resumed>) = 1 [pid 5960] <... futex resumed>) = 0 [pid 5968] <... chdir resumed>) = 0 [pid 5962] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] ioctl(4, LOOP_CLR_FD [pid 5962] <... mount resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5962] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5965] chdir("./bus") = 0 [pid 5965] ioctl(4, LOOP_CLR_FD [pid 5966] <... mount resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./186/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./186/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./186") = 0 [pid 308] mkdir("./187", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5984 [pid 5966] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5966] chdir("./bus") = 0 [pid 5966] ioctl(4, LOOP_CLR_FD) = 0 [pid 5966] close(4./strace-static-x86_64: Process 5984 attached [pid 5967] <... mount resumed>) = 0 [pid 5966] <... close resumed>) = 0 [pid 5962] <... open resumed>) = 5 [pid 5984] set_robust_list(0x55555748e5e0, 24 [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... set_robust_list resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5960] <... futex resumed>) = 0 [pid 5984] chdir("./187" [pid 5967] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... chdir resumed>) = 0 [pid 5968] <... ioctl resumed>) = 0 [pid 5967] <... openat resumed>) = 3 [pid 5966] <... futex resumed>) = 1 [pid 5965] <... ioctl resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5960] <... futex resumed>) = 0 [pid 5984] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5968] close(4 [pid 5967] chdir("./bus" [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] close(4 [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... prctl resumed>) = 0 [pid 5968] <... close resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... close resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5962] <... openat resumed>) = 6 [pid 5984] setpgid(0, 0 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] chdir("./file0" [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... setpgid resumed>) = 0 [pid 5968] <... futex resumed>) = 1 [pid 5966] <... chdir resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5964] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... openat resumed>) = 3 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 1 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] write(3, "1000", 4 [pid 5968] chdir("./file0" [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] chdir("./file0" [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... write resumed>) = 4 [pid 5968] <... chdir resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... chdir resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5962] <... write resumed>) = 262144 [pid 5984] close(3 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... close resumed>) = 0 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... chdir resumed>) = 0 [pid 5966] <... open resumed>) = 4 [pid 5965] <... futex resumed>) = 1 [pid 5964] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] symlink("/dev/binderfs", "./binderfs" [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5960] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... symlink resumed>) = 0 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] ioctl(4, LOOP_CLR_FD [pid 5966] <... futex resumed>) = 1 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... futex resumed>) = 0 [pid 5968] <... open resumed>) = 4 [pid 5967] <... ioctl resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... open resumed>) = 4 [pid 5963] <... futex resumed>) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5984] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5968] <... futex resumed>) = 1 [pid 5966] <... mount resumed>) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5964] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... mprotect resumed>) = 0 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] <... futex resumed>) = 1 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] <... futex resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5984] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5968] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [ 139.965771][ T5965] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/185/bus supports timestamps until 2038 (0x7fffffff) [ 139.965778][ T5968] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/182/bus supports timestamps until 2038 (0x7fffffff) [ 139.966608][ T5966] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/188/bus supports timestamps until 2038 (0x7fffffff) [ 139.985943][ T5967] ext4 filesystem being mounted at /root/syzkaller.URAKkl/190/bus supports timestamps until 2038 (0x7fffffff) [pid 5967] close(4 [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... mount resumed>) = 0 [pid 5967] <... close resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... mount resumed>) = 0 [pid 5963] <... futex resumed>) = 0 [pid 5984] <... clone resumed>, parent_tid=[5985], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5985 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 5985 attached [pid 5984] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 1 [pid 5966] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = 0 [pid 5985] set_robust_list(0x7f19bd6049e0, 24 [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] <... open resumed>) = 5 [pid 5965] <... futex resumed>) = 1 [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] <... futex resumed>) = 0 [pid 5985] <... set_robust_list resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] <... futex resumed>) = 0 [pid 5961] <... futex resumed>) = 0 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] memfd_create("syzkaller", 0 [pid 5968] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5967] chdir("./file0" [pid 5966] <... futex resumed>) = 1 [pid 5965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] <... futex resumed>) = 0 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] <... futex resumed>) = 0 [pid 5985] <... memfd_create resumed>) = 3 [pid 5968] <... open resumed>) = 5 [pid 5967] <... chdir resumed>) = 0 [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5965] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] <... open resumed>) = 5 [pid 5963] <... futex resumed>) = 0 [pid 5962] <... write resumed>) = 1048576 [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... mmap resumed>) = 0x7f19b51e4000 [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 1 [pid 5966] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5962] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5966] <... openat resumed>) = 6 [pid 5965] <... futex resumed>) = 0 [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5964] <... futex resumed>) = 0 [pid 5962] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5960] <... futex resumed>) = 0 [pid 5959] <... futex resumed>) = 0 [pid 5968] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5967] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5966] <... futex resumed>) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5965] <... openat resumed>) = 6 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5960] exit_group(0 [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] <... openat resumed>) = 6 [pid 5967] <... open resumed>) = 4 [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5962] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] <... futex resumed>) = 0 [pid 5962] +++ exited with 0 +++ [pid 5985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5960] <... exit_group resumed>) = ? [pid 5959] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5968] <... futex resumed>) = 1 [pid 5967] <... futex resumed>) = 1 [pid 5966] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5965] <... futex resumed>) = 0 [pid 5964] <... futex resumed>) = 0 [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] <... futex resumed>) = 0 [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5968] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5966] <... write resumed>) = 262144 [pid 5965] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5960] +++ exited with 0 +++ [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5968] <... write resumed>) = 262144 [pid 5967] <... futex resumed>) = 0 [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5964] <... futex resumed>) = 0 [pid 5961] <... futex resumed>) = 1 [pid 5959] <... futex resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5960, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5968] <... futex resumed>) = 0 [pid 5967] <... mount resumed>) = 0 [pid 5966] <... futex resumed>) = 1 [pid 5965] <... write resumed>) = 262144 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] <... futex resumed>) = 0 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5966] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5963] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5967] <... futex resumed>) = 0 [pid 5966] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5964] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5963] <... futex resumed>) = 0 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5967] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5964] <... futex resumed>) = 1 [pid 5968] <... futex resumed>) = 0 [pid 5967] <... open resumed>) = 5 [pid 5966] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5964] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5963] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5961] <... futex resumed>) = 0 [pid 5968] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... write resumed>) = 1048576 [pid 5967] <... futex resumed>) = 0 [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5965] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5959] <... futex resumed>) = 0 [pid 5985] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5985] ioctl(4, LOOP_SET_FD, 3 [pid 5967] <... futex resumed>) = 0 [pid 5961] <... futex resumed>) = 1 [pid 5959] <... futex resumed>) = 0 [pid 5967] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5959] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5967] <... openat resumed>) = 6 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5967] <... futex resumed>) = 1 [pid 5961] <... futex resumed>) = 0 [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5967] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5961] <... futex resumed>) = 0 [pid 5967] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... openat resumed>) = 3 [pid 5967] <... write resumed>) = 262144 [pid 307] fstat(3, [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5961] <... futex resumed>) = 0 [pid 307] getdents64(3, [pid 5961] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5961] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5967] <... futex resumed>) = 1 [pid 307] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5967] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 5985] <... ioctl resumed>) = 0 [pid 5985] close(3) = 0 [pid 5985] mkdir("./bus", 0777) = 0 [pid 307] unlink("./186/binderfs" [pid 5985] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... unlink resumed>) = 0 [pid 5966] <... write resumed>) = 1048576 [pid 307] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5964] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5966] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5963] <... futex resumed>) = 0 [pid 5963] exit_group(0 [pid 5968] <... write resumed>) = 1048576 [pid 5963] <... exit_group resumed>) = ? [pid 5968] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5968] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5964] exit_group(0) = ? [pid 5966] +++ exited with 0 +++ [pid 5965] <... write resumed>) = 1048576 [pid 5963] +++ exited with 0 +++ [pid 5961] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5959] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5968] <... futex resumed>) = ? [pid 5968] +++ exited with 0 +++ [pid 5964] +++ exited with 0 +++ [pid 5965] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5959] exit_group(0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5963, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5964, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 5985] <... mount resumed>) = 0 [pid 5985] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5985] chdir("./bus") = 0 [pid 5985] ioctl(4, LOOP_CLR_FD) = 0 [pid 5985] close(4) = 0 [pid 5985] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5965] <... futex resumed>) = 0 [pid 5959] <... exit_group resumed>) = ? [pid 310] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... futex resumed>) = 1 [pid 5985] chdir("./file0") = 0 [pid 5985] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5965] +++ exited with 0 +++ [pid 5959] +++ exited with 0 +++ [pid 309] umount2("./182", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] <... openat resumed>) = 3 [pid 309] openat(AT_FDCWD, "./182", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, [pid 305] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] fstat(3, [pid 305] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5967] <... write resumed>) = 1048576 [pid 5967] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5967] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] getdents64(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 5961] exit_group(0 [pid 5967] <... futex resumed>) = ? [pid 5961] <... exit_group resumed>) = ? [pid 5967] +++ exited with 0 +++ [pid 5961] +++ exited with 0 +++ [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] getdents64(3, [pid 305] fstat(3, [pid 310] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5961, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5985] <... futex resumed>) = 1 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] umount2("./182/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(3, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] lstat("./188/binderfs", [pid 309] lstat("./182/binderfs", [pid 306] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] unlink("./188/binderfs" [pid 309] unlink("./182/binderfs" [pid 306] fstat(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... unlink resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 309] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./185/binderfs", [pid 310] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(3, [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] unlink("./185/binderfs" [pid 306] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 306] lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] unlink("./190/binderfs") = 0 [ 140.120953][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 140.143568][ T5985] ext4 filesystem being mounted at /root/syzkaller.69675s/187/bus supports timestamps until 2038 (0x7fffffff) [ 140.151799][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 140.197402][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 140.203891][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 140.210332][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5985] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5984] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5984] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5984] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5984] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5989], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 5989 [pid 5984] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5989 attached [pid 5989] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 5989] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = -1 ENOENT (No such file or directory) [pid 5989] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = 1 [pid 5989] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = -1 ENOENT (No such file or directory) [pid 5989] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = 1 [pid 5989] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5985] <... open resumed>) = 4 [pid 5985] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5985] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5989] <... openat resumed>) = 5 [pid 5989] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5985] <... futex resumed>) = 0 [pid 5984] <... futex resumed>) = 1 [pid 5985] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5989] <... futex resumed>) = 1 [pid 5989] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5985] <... write resumed>) = 262144 [ 140.223914][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 140.236096][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 140.237111][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 140.272863][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 5985] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5984] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5985] <... futex resumed>) = 1 [pid 5985] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 5985] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5984] <... futex resumed>) = 0 [pid 5984] exit_group(0) = ? [pid 5989] <... futex resumed>) = ? [pid 5989] +++ exited with 0 +++ [pid 5985] <... futex resumed>) = ? [pid 5985] +++ exited with 0 +++ [pid 5984] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5984, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... umount2 resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./187/binderfs") = 0 [pid 308] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./186/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./186/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./186") = 0 [pid 307] mkdir("./187", 0777) = 0 [ 140.275569][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5990 ./strace-static-x86_64: Process 5990 attached [pid 5990] set_robust_list(0x55555748e5e0, 24) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 5990] chdir("./187") = 0 [pid 5990] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5990] setpgid(0, 0) = 0 [pid 5990] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5990] write(3, "1000", 4) = 4 [pid 5990] close(3) = 0 [pid 5990] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5990] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5990] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5991], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5991 [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5991 attached [pid 306] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5991] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5991] memfd_create("syzkaller", 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./190/bus", [pid 5991] <... memfd_create resumed>) = 3 [pid 5991] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5991] <... mmap resumed>) = 0x7f19b51e4000 [pid 306] <... openat resumed>) = 4 [pid 5991] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./190/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./190") = 0 [pid 306] mkdir("./191", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5991] <... write resumed>) = 1048576 [pid 5991] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5991] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 5992 ./strace-static-x86_64: Process 5992 attached [pid 5992] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5992] chdir("./191") = 0 [pid 5992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 5992] setpgid(0, 0) = 0 [pid 5992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5992] write(3, "1000", 4) = 4 [pid 5992] close(3) = 0 [pid 5992] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5992] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5992] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[5993], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5993 [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5991] <... openat resumed>) = 4 [pid 5991] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... umount2 resumed>) = 0 [pid 308] <... openat resumed>) = 4 ./strace-static-x86_64: Process 5993 attached [pid 308] fstat(4, [pid 305] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] set_robust_list(0x7f19bd6049e0, 24 [pid 305] lstat("./185/bus", [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 309] <... umount2 resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./187/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./187") = 0 [pid 308] mkdir("./188", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5995 ./strace-static-x86_64: Process 5995 attached [pid 5995] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5995] chdir("./188") = 0 [pid 5995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5995] setpgid(0, 0) = 0 [pid 5995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5995] write(3, "1000", 4 [pid 305] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5995] <... write resumed>) = 4 [pid 5995] close(3) = 0 [pid 5995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./185/bus" [pid 5995] <... futex resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5993] <... set_robust_list resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 309] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 310] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5993] memfd_create("syzkaller", 0 [pid 305] <... close resumed>) = 0 [pid 309] lstat("./182/bus", [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] rmdir("./185" [pid 5995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5993] <... memfd_create resumed>) = 3 [pid 310] lstat("./188/bus", [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 5995] <... mmap resumed>) = 0x7f19bd5e4000 [pid 5993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./182/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... rmdir resumed>) = 0 [pid 5993] <... mmap resumed>) = 0x7f19b51e4000 [pid 310] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] mkdir("./186", 0777 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5995] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./182/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... mkdir resumed>) = 0 [pid 5995] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 4 [pid 5995] <... clone resumed>, parent_tid=[5996], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 5996 [pid 305] <... openat resumed>) = 3 [pid 310] <... openat resumed>) = 4 [pid 309] fstat(4, [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] fstat(4, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, [pid 305] close(3 [pid 310] getdents64(4, [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5996 attached [pid 5996] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 5996] memfd_create("syzkaller", 0) = 3 [pid 5996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] <... close resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 5996] <... mmap resumed>) = 0x7f19b51e4000 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5997 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 309] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] rmdir("./182/bus" [pid 310] rmdir("./188/bus" [pid 309] <... rmdir resumed>) = 0 [pid 5991] <... ioctl resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] getdents64(3, [pid 5991] close(3 [pid 310] getdents64(3, [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 5991] <... close resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3 [pid 5991] mkdir("./bus", 0777 [pid 310] close(3 [pid 309] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] rmdir("./182"./strace-static-x86_64: Process 5997 attached [pid 310] rmdir("./188" [pid 309] <... rmdir resumed>) = 0 [pid 5991] <... mkdir resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] mkdir("./183", 0777 [pid 5991] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] mkdir("./189", 0777 [pid 5997] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5997] chdir("./186" [pid 310] <... mkdir resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] ioctl(3, LOOP_CLR_FD [pid 5997] <... chdir resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5997] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 310] close(3 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5997] <... prctl resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] close(3 [pid 5997] setpgid(0, 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... close resumed>) = 0 [pid 5997] <... setpgid resumed>) = 0 [pid 5997] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5997] <... openat resumed>) = 3 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5998 [pid 5997] write(3, "1000", 4) = 4 [pid 5997] close(3 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 5999 [pid 5997] <... close resumed>) = 0 [pid 5997] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5997] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5997] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6000], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6000 [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5998 attached [pid 5998] set_robust_list(0x55555748e5e0, 24) = 0 [pid 5998] chdir("./189" [pid 5996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5998] <... chdir resumed>) = 0 [pid 5998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 ./strace-static-x86_64: Process 5999 attached [pid 5998] setpgid(0, 0 [pid 5999] set_robust_list(0x55555748e5e0, 24 [pid 5998] <... setpgid resumed>) = 0 [pid 5999] <... set_robust_list resumed>) = 0 [pid 5998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5999] chdir("./183" [pid 5998] <... openat resumed>) = 3 [pid 5999] <... chdir resumed>) = 0 [pid 5998] write(3, "1000", 4./strace-static-x86_64: Process 6000 attached [pid 5999] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5998] <... write resumed>) = 4 [pid 5999] <... prctl resumed>) = 0 [pid 5998] close(3 [pid 6000] set_robust_list(0x7f19bd6049e0, 24 [pid 5999] setpgid(0, 0 [pid 5998] <... close resumed>) = 0 [pid 6000] <... set_robust_list resumed>) = 0 [pid 5999] <... setpgid resumed>) = 0 [pid 5998] symlink("/dev/binderfs", "./binderfs" [pid 6000] memfd_create("syzkaller", 0 [pid 5999] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5998] <... symlink resumed>) = 0 [pid 6000] <... memfd_create resumed>) = 3 [pid 5999] <... openat resumed>) = 3 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5998] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 5993] <... write resumed>) = 1048576 [pid 5998] <... mprotect resumed>) = 0 [pid 5998] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6003], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6003 [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5993] munmap(0x7f19b51e4000, 1048576) = 0 [pid 5993] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5993] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6003 attached [pid 6003] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6003] memfd_create("syzkaller", 0) = 3 [pid 6003] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 5999] write(3, "1000", 4 [pid 6000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5999] <... write resumed>) = 4 [pid 6000] <... mmap resumed>) = 0x7f19b51e4000 [pid 5999] close(3) = 0 [pid 5999] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 5999] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5999] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 5996] <... write resumed>) = 1048576 [pid 5999] <... clone resumed>, parent_tid=[6005], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6005 [pid 5996] munmap(0x7f19b51e4000, 1048576 [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5996] <... munmap resumed>) = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5996] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5993] <... ioctl resumed>) = 0 [pid 5993] close(3) = 0 [pid 5993] mkdir("./bus", 0777) = 0 [pid 5993] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6005 attached [pid 6000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5996] <... openat resumed>) = 4 [pid 6005] set_robust_list(0x7f19bd6049e0, 24 [pid 5996] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... mount resumed>) = 0 [pid 6005] <... set_robust_list resumed>) = 0 [pid 6005] memfd_create("syzkaller", 0) = 3 [pid 6005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6003] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 5991] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5991] chdir("./bus") = 0 [pid 6000] <... write resumed>) = 1048576 [pid 5991] ioctl(4, LOOP_CLR_FD [pid 6000] munmap(0x7f19b51e4000, 1048576 [pid 5996] <... ioctl resumed>) = 0 [pid 6003] <... write resumed>) = 1048576 [pid 5996] close(3 [pid 6000] <... munmap resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5991] <... ioctl resumed>) = 0 [ 140.748089][ T5991] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/187/bus supports timestamps until 2038 (0x7fffffff) [pid 6000] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6003] munmap(0x7f19b51e4000, 1048576 [pid 6000] <... openat resumed>) = 4 [pid 5996] mkdir("./bus", 0777 [pid 5991] close(4 [pid 5996] <... mkdir resumed>) = 0 [pid 5991] <... close resumed>) = 0 [pid 5996] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] ioctl(4, LOOP_SET_FD, 3 [pid 5991] <... futex resumed>) = 1 [pid 5990] <... futex resumed>) = 0 [pid 5991] chdir("./file0" [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... chdir resumed>) = 0 [pid 5990] <... futex resumed>) = 0 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6003] <... munmap resumed>) = 0 [pid 5991] <... futex resumed>) = 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 5991] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5990] <... futex resumed>) = 0 [pid 5991] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] <... open resumed>) = 4 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5990] <... futex resumed>) = 0 [pid 5991] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... mount resumed>) = 0 [pid 5990] <... futex resumed>) = 0 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] <... futex resumed>) = 0 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5991] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5990] <... futex resumed>) = 0 [pid 5991] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... mount resumed>) = 0 [pid 5993] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5993] chdir("./bus") = 0 [pid 5993] ioctl(4, LOOP_CLR_FD [pid 6005] <... write resumed>) = 1048576 [pid 6000] <... ioctl resumed>) = 0 [pid 6005] munmap(0x7f19b51e4000, 1048576 [pid 6003] <... openat resumed>) = 4 [pid 5991] <... open resumed>) = 5 [pid 6005] <... munmap resumed>) = 0 [pid 6003] ioctl(4, LOOP_SET_FD, 3 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] close(3 [pid 5991] <... futex resumed>) = 1 [pid 5990] <... futex resumed>) = 0 [pid 6000] <... close resumed>) = 0 [pid 5991] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] mkdir("./bus", 0777 [pid 5991] <... openat resumed>) = 6 [pid 5990] <... futex resumed>) = 0 [pid 6000] <... mkdir resumed>) = 0 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5990] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5991] <... futex resumed>) = 0 [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5991] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5990] <... futex resumed>) = 0 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6003] <... ioctl resumed>) = 0 [pid 6003] close(3) = 0 [pid 5993] <... ioctl resumed>) = 0 [pid 5991] <... write resumed>) = 262144 [pid 6003] mkdir("./bus", 0777 [pid 5993] close(4 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... mkdir resumed>) = 0 [pid 5991] <... futex resumed>) = 1 [pid 5990] <... futex resumed>) = 0 [pid 5990] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... openat resumed>) = 4 [pid 6003] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5993] <... close resumed>) = 0 [pid 5991] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6005] ioctl(4, LOOP_SET_FD, 3 [pid 5996] <... mount resumed>) = 0 [pid 5996] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5996] chdir("./bus") = 0 [pid 5996] ioctl(4, LOOP_CLR_FD [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5992] <... futex resumed>) = 0 [pid 5993] chdir("./file0" [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... chdir resumed>) = 0 [pid 5992] <... futex resumed>) = 0 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... open resumed>) = 4 [pid 5992] <... futex resumed>) = 0 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... mount resumed>) = 0 [pid 5992] <... futex resumed>) = 0 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... futex resumed>) = 0 [pid 5992] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5993] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... ioctl resumed>) = 0 [pid 6005] close(3) = 0 [pid 6005] mkdir("./bus", 0777) = 0 [pid 6005] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 5996] <... ioctl resumed>) = 0 [pid 5996] close(4 [pid 5993] <... open resumed>) = 5 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5992] <... futex resumed>) = 0 [pid 5993] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5992] <... futex resumed>) = 0 [pid 5993] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5993] <... openat resumed>) = 6 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5992] <... futex resumed>) = 0 [pid 5993] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5992] <... futex resumed>) = 0 [pid 5993] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5991] <... write resumed>) = 1048576 [ 140.791614][ T5993] ext4 filesystem being mounted at /root/syzkaller.URAKkl/191/bus supports timestamps until 2038 (0x7fffffff) [ 140.821985][ T5996] ext4 filesystem being mounted at /root/syzkaller.69675s/188/bus supports timestamps until 2038 (0x7fffffff) [pid 6000] <... mount resumed>) = 0 [pid 5996] <... close resumed>) = 0 [pid 5993] <... write resumed>) = 262144 [pid 5991] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5991] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] chdir("./file0") = 0 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [pid 5996] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5992] <... futex resumed>) = 0 [pid 5993] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5992] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5990] <... futex resumed>) = 0 [pid 5992] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5990] exit_group(0 [pid 6000] <... openat resumed>) = 3 [pid 5991] <... futex resumed>) = ? [pid 5990] <... exit_group resumed>) = ? [pid 6000] chdir("./bus" [pid 5991] +++ exited with 0 +++ [pid 6000] <... chdir resumed>) = 0 [pid 6000] ioctl(4, LOOP_CLR_FD) = 0 [pid 6000] close(4) = 0 [pid 5990] +++ exited with 0 +++ [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5990, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6000] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 6000] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] <... futex resumed>) = 0 [pid 6000] chdir("./file0" [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] <... chdir resumed>) = 0 [pid 307] <... restart_syscall resumed>) = 0 [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6000] <... futex resumed>) = 1 [pid 6000] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5997] <... futex resumed>) = 0 [pid 6000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... openat resumed>) = 3 [pid 6000] <... open resumed>) = 4 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] lstat("./187/binderfs", [pid 6000] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] unlink("./187/binderfs" [pid 6000] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... unlink resumed>) = 0 [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5997] <... futex resumed>) = 0 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5997] <... futex resumed>) = 0 [pid 6000] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6000] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 5997] <... futex resumed>) = 0 [pid 6000] <... openat resumed>) = 6 [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6000] <... futex resumed>) = 0 [pid 6000] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5995] <... futex resumed>) = 0 [pid 6000] <... futex resumed>) = 0 [pid 5997] <... futex resumed>) = 1 [pid 5995] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6000] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] <... futex resumed>) = 0 [pid 5995] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5996] <... futex resumed>) = 1 [ 140.870948][ T6000] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/186/bus supports timestamps until 2038 (0x7fffffff) [ 140.883697][ T6003] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/189/bus supports timestamps until 2038 (0x7fffffff) [pid 5996] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6003] <... mount resumed>) = 0 [pid 6000] <... write resumed>) = 262144 [pid 5993] <... write resumed>) = 1048576 [pid 6005] <... mount resumed>) = 0 [pid 6003] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5993] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6003] <... openat resumed>) = 3 [pid 6000] <... futex resumed>) = 1 [pid 5997] <... futex resumed>) = 0 [pid 5993] <... futex resumed>) = 0 [pid 5992] exit_group(0 [pid 6003] chdir("./bus" [pid 6000] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5997] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5992] <... exit_group resumed>) = ? [pid 6003] <... chdir resumed>) = 0 [pid 5997] <... futex resumed>) = 0 [pid 5996] <... write resumed>) = 1048576 [pid 5995] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5993] +++ exited with 0 +++ [pid 5992] +++ exited with 0 +++ [pid 5996] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] ioctl(4, LOOP_CLR_FD [pid 5997] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5995] exit_group(0 [pid 5996] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5992, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 5995] <... exit_group resumed>) = ? [pid 5996] +++ exited with 0 +++ [pid 6003] <... ioctl resumed>) = 0 [pid 6003] close(4) = 0 [pid 5995] +++ exited with 0 +++ [pid 306] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6003] <... futex resumed>) = 1 [pid 5998] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5995, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 306] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6003] chdir("./file0" [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 306] <... openat resumed>) = 3 [pid 6003] <... chdir resumed>) = 0 [pid 5998] <... futex resumed>) = 0 [pid 308] <... restart_syscall resumed>) = 0 [pid 306] fstat(3, [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6003] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] getdents64(3, [pid 6003] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6003] <... open resumed>) = 4 [pid 5998] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6003] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... openat resumed>) = 3 [pid 306] lstat("./191/binderfs", [pid 6003] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] fstat(3, [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6003] <... mount resumed>) = 0 [pid 5998] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] unlink("./191/binderfs" [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(3, [pid 306] <... unlink resumed>) = 0 [pid 6003] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6003] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6003] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5998] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6003] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] lstat("./188/binderfs", [pid 6005] <... openat resumed>) = 3 [ 140.915789][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 140.937377][ T6005] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/183/bus supports timestamps until 2038 (0x7fffffff) [ 140.939310][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6005] chdir("./bus") = 0 [pid 6005] ioctl(4, LOOP_CLR_FD [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./188/binderfs") = 0 [ 140.987714][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.002154][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 141.002472][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 5998] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5997] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5998] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 5998] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5998] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6020], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6020 [pid 5998] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6020 attached [pid 6020] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 6020] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6020] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5998] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6020] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6000] <... write resumed>) = 1048576 [pid 6000] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6000] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5997] exit_group(0 [pid 6000] <... futex resumed>) = ? [pid 5997] <... exit_group resumed>) = ? [pid 6003] <... open resumed>) = 5 [pid 6000] +++ exited with 0 +++ [pid 5997] +++ exited with 0 +++ [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5997, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 6003] <... futex resumed>) = 0 [pid 6003] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./186/binderfs") = 0 [pid 305] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6005] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 6005] close(4 [pid 307] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./187/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./187") = 0 [pid 307] mkdir("./188", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6020] <... write resumed>) = 262144 [pid 6020] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5998] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6003] <... futex resumed>) = 0 [pid 5998] <... futex resumed>) = 1 [pid 6003] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5998] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6020] <... futex resumed>) = 1 [pid 6020] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] <... umount2 resumed>) = 0 [pid 6005] <... close resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./191/bus", [pid 307] ioctl(3, LOOP_CLR_FD [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6005] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6005] chdir("./file0" [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] close(3 [pid 6005] <... chdir resumed>) = 0 [pid 5999] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6005] <... futex resumed>) = 0 [pid 5999] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 5999] <... futex resumed>) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6021 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./191/bus" [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... rmdir resumed>) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 6005] <... open resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./191" [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... rmdir resumed>) = 0 [pid 6005] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 6005] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] mkdir("./192", 0777 [pid 5999] <... futex resumed>) = 0 [pid 6005] <... mount resumed>) = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5999] <... futex resumed>) = 0 [pid 6005] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... open resumed>) = 5 [pid 5999] <... futex resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5999] <... futex resumed>) = 0 [pid 6005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6005] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6022 [pid 6005] <... openat resumed>) = 6 [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5999] <... futex resumed>) = 0 [pid 6005] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5999] <... futex resumed>) = 0 [pid 6005] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6003] <... write resumed>) = 1048576 [pid 6003] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5998] <... futex resumed>) = 0 [pid 5998] exit_group(0 [pid 6020] <... futex resumed>) = ? [pid 5998] <... exit_group resumed>) = ? [pid 6020] +++ exited with 0 +++ [pid 6003] <... futex resumed>) = ? [pid 6003] +++ exited with 0 +++ [pid 5998] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5998, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./189/binderfs") = 0 [pid 310] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6021 attached [pid 6021] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6021] chdir("./188") = 0 [pid 6021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6021] setpgid(0, 0) = 0 [pid 6021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6021] write(3, "1000", 4) = 4 [pid 6021] close(3) = 0 [pid 6021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [ 141.015803][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 141.045842][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.069146][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6021] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6021] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6023], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6023 [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6023 attached [pid 6023] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6023] memfd_create("syzkaller", 0) = 3 [pid 6023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6005] <... write resumed>) = 262144 [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... futex resumed>) = 0 [pid 6005] <... futex resumed>) = 1 [pid 5999] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5999] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6005] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6023] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 6022 attached [pid 6022] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6022] chdir("./192" [pid 6023] munmap(0x7f19b51e4000, 1048576 [pid 6022] <... chdir resumed>) = 0 [pid 6023] <... munmap resumed>) = 0 [pid 6022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6023] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6022] <... prctl resumed>) = 0 [pid 6022] setpgid(0, 0) = 0 [pid 6022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6022] write(3, "1000", 4) = 4 [pid 6022] close(3) = 0 [pid 6022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] <... umount2 resumed>) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6022] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6005] <... write resumed>) = 1048576 [pid 308] lstat("./188/bus", [pid 6022] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6005] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6022] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6005] <... futex resumed>) = 1 [pid 5999] <... futex resumed>) = 0 [pid 308] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6022] <... clone resumed>, parent_tid=[6024], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6024 [pid 5999] exit_group(0 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5999] <... exit_group resumed>) = ? [pid 6022] <... futex resumed>) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./188/bus") = 0 ./strace-static-x86_64: Process 6024 attached [pid 6024] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./188" [pid 6024] memfd_create("syzkaller", 0 [pid 308] <... rmdir resumed>) = 0 [pid 308] mkdir("./189", 0777 [pid 6024] <... memfd_create resumed>) = 3 [pid 6024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6024] munmap(0x7f19b51e4000, 1048576) = 0 [ 141.119868][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 141.146736][ T381] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6024] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6023] <... openat resumed>) = 4 [pid 310] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 6023] ioctl(4, LOOP_SET_FD, 3 [pid 310] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./189/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] lstat("./186/bus", [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(4) = 0 [pid 305] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] rmdir("./189/bus") = 0 [pid 305] <... openat resumed>) = 4 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] fstat(4, [pid 310] close(3) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] rmdir("./189") = 0 [pid 305] getdents64(4, [pid 310] mkdir("./190", 0777) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./186/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./186") = 0 [pid 305] mkdir("./187", 0777) = 0 [pid 6024] ioctl(4, LOOP_SET_FD, 3 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6023] <... ioctl resumed>) = 0 [pid 6023] close(3) = 0 [pid 6023] mkdir("./bus", 0777) = 0 [pid 6023] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6005] +++ exited with 0 +++ [pid 5999] +++ exited with 0 +++ [pid 308] <... openat resumed>) = 3 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5999, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 308] ioctl(3, LOOP_CLR_FD [pid 309] umount2("./183", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./183", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./183/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./183/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./183/binderfs") = 0 [pid 309] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6024] <... ioctl resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... openat resumed>) = 3 [pid 308] close(3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 6024] close(3 [pid 308] <... close resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6024] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] close(3 [pid 6024] mkdir("./bus", 0777 [pid 305] <... close resumed>) = 0 [pid 6024] <... mkdir resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6028 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6029 [pid 6024] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6031 ./strace-static-x86_64: Process 6028 attached ./strace-static-x86_64: Process 6029 attached [pid 6029] set_robust_list(0x55555748e5e0, 24) = 0 [ 141.220569][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 141.238513][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6028] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 6031 attached [pid 6029] chdir("./187" [pid 6028] <... set_robust_list resumed>) = 0 [pid 6031] set_robust_list(0x55555748e5e0, 24 [pid 6029] <... chdir resumed>) = 0 [pid 6028] chdir("./189" [pid 6023] <... mount resumed>) = 0 [pid 6031] <... set_robust_list resumed>) = 0 [pid 6029] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6028] <... chdir resumed>) = 0 [pid 6031] chdir("./190" [pid 6029] <... prctl resumed>) = 0 [pid 6028] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6031] <... chdir resumed>) = 0 [pid 6029] setpgid(0, 0 [pid 6028] <... prctl resumed>) = 0 [pid 6031] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6029] <... setpgid resumed>) = 0 [pid 6028] setpgid(0, 0 [pid 6031] <... prctl resumed>) = 0 [pid 6029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6028] <... setpgid resumed>) = 0 [pid 6031] setpgid(0, 0 [pid 6029] <... openat resumed>) = 3 [pid 6028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6031] <... setpgid resumed>) = 0 [pid 6029] write(3, "1000", 4 [pid 6028] <... openat resumed>) = 3 [pid 6031] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6029] <... write resumed>) = 4 [pid 6028] write(3, "1000", 4 [pid 6031] <... openat resumed>) = 3 [pid 6029] close(3 [pid 6028] <... write resumed>) = 4 [pid 6031] write(3, "1000", 4 [pid 6029] <... close resumed>) = 0 [pid 6028] close(3 [pid 6031] <... write resumed>) = 4 [pid 6029] symlink("/dev/binderfs", "./binderfs" [pid 6028] <... close resumed>) = 0 [pid 6031] close(3 [pid 6029] <... symlink resumed>) = 0 [pid 6028] symlink("/dev/binderfs", "./binderfs" [pid 6031] <... close resumed>) = 0 [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... symlink resumed>) = 0 [pid 6031] symlink("/dev/binderfs", "./binderfs" [pid 6029] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... symlink resumed>) = 0 [pid 6029] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6028] <... futex resumed>) = 0 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6028] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6031] <... futex resumed>) = 0 [pid 6029] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6028] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6031] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6029] <... mprotect resumed>) = 0 [pid 6028] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6031] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6029] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6028] <... mprotect resumed>) = 0 [pid 6031] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6028] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6031] <... mprotect resumed>) = 0 [pid 6029] <... clone resumed>, parent_tid=[6034], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6034 [pid 6031] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... clone resumed>, parent_tid=[6035], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6035 [pid 6029] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... clone resumed>, parent_tid=[6036], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6036 [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6028] <... futex resumed>) = 0 [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6031] <... futex resumed>) = 0 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6023] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6023] chdir("./bus") = 0 [pid 6023] ioctl(4, LOOP_CLR_FD) = 0 [pid 6023] close(4./strace-static-x86_64: Process 6036 attached ./strace-static-x86_64: Process 6035 attached ./strace-static-x86_64: Process 6034 attached [pid 6024] <... mount resumed>) = 0 [pid 6023] <... close resumed>) = 0 [pid 6035] set_robust_list(0x7f19bd6049e0, 24 [pid 6034] set_robust_list(0x7f19bd6049e0, 24 [pid 6035] <... set_robust_list resumed>) = 0 [pid 6034] <... set_robust_list resumed>) = 0 [pid 6024] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6035] memfd_create("syzkaller", 0 [pid 6034] memfd_create("syzkaller", 0 [pid 6035] <... memfd_create resumed>) = 3 [pid 6034] <... memfd_create resumed>) = 3 [pid 6024] <... openat resumed>) = 3 [pid 6035] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6035] <... mmap resumed>) = 0x7f19b51e4000 [pid 6034] <... mmap resumed>) = 0x7f19b51e4000 [pid 6024] chdir("./bus" [pid 6036] set_robust_list(0x7f19bd6049e0, 24 [pid 6035] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... set_robust_list resumed>) = 0 [pid 6023] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 6024] <... chdir resumed>) = 0 [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] ioctl(4, LOOP_CLR_FD [pid 6023] chdir("./file0" [pid 6021] <... futex resumed>) = 0 [pid 6036] memfd_create("syzkaller", 0 [pid 6035] <... write resumed>) = 1048576 [pid 6034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6024] <... ioctl resumed>) = 0 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] <... memfd_create resumed>) = 3 [pid 6024] close(4 [pid 6023] <... chdir resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 6036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6024] <... close resumed>) = 0 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... mmap resumed>) = 0x7f19b51e4000 [pid 6023] <... futex resumed>) = 1 [pid 6021] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6035] munmap(0x7f19b51e4000, 1048576 [pid 6034] <... write resumed>) = 1048576 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] <... munmap resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6035] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6034] munmap(0x7f19b51e4000, 1048576 [pid 6024] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] <... openat resumed>) = 4 [pid 6034] <... munmap resumed>) = 0 [pid 6035] ioctl(4, LOOP_SET_FD, 3 [pid 6034] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6023] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6022] <... futex resumed>) = 0 [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] lstat("./183/bus", [pid 6036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6035] <... ioctl resumed>) = 0 [pid 6034] <... openat resumed>) = 4 [pid 6023] <... open resumed>) = 4 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... futex resumed>) = 0 [pid 6035] close(3 [pid 6034] ioctl(4, LOOP_SET_FD, 3 [pid 6024] <... futex resumed>) = 0 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = 1 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6036] <... write resumed>) = 1048576 [pid 6035] <... close resumed>) = 0 [pid 6024] chdir("./file0" [pid 6023] <... futex resumed>) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] umount2("./183/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6035] mkdir("./bus", 0777 [pid 6024] <... chdir resumed>) = 0 [pid 6023] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 141.261523][ T6023] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/188/bus supports timestamps until 2038 (0x7fffffff) [ 141.275276][ T6024] ext4 filesystem being mounted at /root/syzkaller.URAKkl/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./183/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6023] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... openat resumed>) = 4 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... mount resumed>) = 0 [pid 309] fstat(4, [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6035] <... mkdir resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6023] <... futex resumed>) = 1 [pid 6022] <... futex resumed>) = 0 [pid 6021] <... futex resumed>) = 0 [pid 309] getdents64(4, [pid 6023] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 309] getdents64(4, [pid 6023] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 309] close(4 [pid 6035] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6022] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./183/bus" [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... rmdir resumed>) = 0 [pid 6024] <... open resumed>) = 4 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./183" [pid 6036] munmap(0x7f19b51e4000, 1048576 [pid 6024] <... futex resumed>) = 1 [pid 6022] <... futex resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 309] mkdir("./184", 0777 [pid 6036] <... munmap resumed>) = 0 [pid 6034] <... ioctl resumed>) = 0 [pid 6024] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6023] <... open resumed>) = 5 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6034] close(3 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6022] <... futex resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 6036] <... openat resumed>) = 4 [pid 6034] <... close resumed>) = 0 [pid 6024] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6023] <... futex resumed>) = 1 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6021] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6034] mkdir("./bus", 0777 [pid 6024] <... mount resumed>) = 0 [pid 6023] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] ioctl(4, LOOP_SET_FD, 3 [pid 6034] <... mkdir resumed>) = 0 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 6034] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6024] <... futex resumed>) = 1 [pid 6022] <... futex resumed>) = 0 [pid 6024] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6022] <... futex resumed>) = 0 [pid 6024] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6023] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] <... futex resumed>) = 0 [pid 6021] <... futex resumed>) = 1 [pid 6023] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] <... write resumed>) = 262144 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] <... futex resumed>) = 0 [pid 6021] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6021] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6023] <... futex resumed>) = 1 [pid 6023] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6036] <... ioctl resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 6024] <... open resumed>) = 5 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6036] close(3 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 6036] <... close resumed>) = 0 [pid 6035] <... mount resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6022] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6036] mkdir("./bus", 0777 [pid 6024] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6036] <... mkdir resumed>) = 0 [pid 6024] <... openat resumed>) = 6 ./strace-static-x86_64: Process 6042 attached [pid 6036] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6035] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6042 [pid 6024] <... futex resumed>) = 1 [pid 6022] <... futex resumed>) = 0 [pid 6024] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6024] <... write resumed>) = 262144 [pid 6042] set_robust_list(0x55555748e5e0, 24 [pid 6035] <... openat resumed>) = 3 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] chdir("./bus") = 0 [pid 6035] ioctl(4, LOOP_CLR_FD) = 0 [pid 6035] close(4) = 0 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... futex resumed>) = 1 [pid 6035] chdir("./file0") = 0 [pid 6042] <... set_robust_list resumed>) = 0 [pid 6034] <... mount resumed>) = 0 [pid 6024] <... futex resumed>) = 1 [pid 6023] <... write resumed>) = 1048576 [pid 6022] <... futex resumed>) = 0 [pid 6022] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6022] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [ 141.345385][ T6035] ext4 filesystem being mounted at /root/syzkaller.69675s/189/bus supports timestamps until 2038 (0x7fffffff) [ 141.379908][ T6034] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/187/bus supports timestamps until 2038 (0x7fffffff) [pid 6024] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... futex resumed>) = 1 [pid 6035] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] chdir("./184" [pid 6035] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6042] <... chdir resumed>) = 0 [pid 6036] <... mount resumed>) = 0 [pid 6035] <... mount resumed>) = 0 [pid 6034] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6021] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6042] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... openat resumed>) = 3 [pid 6042] <... prctl resumed>) = 0 [pid 6035] <... futex resumed>) = 1 [pid 6034] chdir("./bus" [pid 6028] <... futex resumed>) = 0 [pid 6042] setpgid(0, 0 [pid 6035] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6034] <... chdir resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... setpgid resumed>) = 0 [pid 6036] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6035] <... open resumed>) = 5 [pid 6034] ioctl(4, LOOP_CLR_FD [pid 6028] <... futex resumed>) = 0 [pid 6023] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6036] <... openat resumed>) = 3 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... ioctl resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... openat resumed>) = 3 [pid 6036] chdir("./bus" [pid 6035] <... futex resumed>) = 0 [pid 6034] close(4 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6023] <... futex resumed>) = 0 [pid 6042] write(3, "1000", 4 [pid 6036] <... chdir resumed>) = 0 [pid 6035] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6034] <... close resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6021] exit_group(0 [pid 6042] <... write resumed>) = 4 [pid 6036] ioctl(4, LOOP_CLR_FD [pid 6035] <... openat resumed>) = 6 [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6021] <... exit_group resumed>) = ? [pid 6042] close(3 [pid 6036] <... ioctl resumed>) = 0 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... close resumed>) = 0 [pid 6036] close(4 [pid 6035] <... futex resumed>) = 0 [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6042] symlink("/dev/binderfs", "./binderfs" [pid 6036] <... close resumed>) = 0 [pid 6035] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6023] +++ exited with 0 +++ [pid 6021] +++ exited with 0 +++ [pid 6042] <... symlink resumed>) = 0 [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6035] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6034] chdir("./file0" [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6028] <... futex resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6021, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 1 [pid 6035] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6034] <... chdir resumed>) = 0 [pid 6031] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... futex resumed>) = 0 [pid 6036] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6035] <... write resumed>) = 262144 [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6034] <... futex resumed>) = 1 [pid 6031] <... futex resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 6042] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6036] chdir("./file0" [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6042] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6036] <... chdir resumed>) = 0 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6036] <... futex resumed>) = 1 [pid 307] <... openat resumed>) = 3 [pid 6031] <... futex resumed>) = 0 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6028] <... futex resumed>) = 0 [pid 6036] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6035] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] fstat(3, [pid 6034] <... open resumed>) = 4 [pid 6031] <... futex resumed>) = 0 [pid 6028] <... futex resumed>) = 0 [pid 6028] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6036] <... open resumed>) = 4 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = 1 [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6036] <... futex resumed>) = 0 [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6042] <... clone resumed>, parent_tid=[6047], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6047 [pid 6036] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] <... futex resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 307] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] <... mount resumed>) = 0 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] lstat("./188/binderfs", [pid 6042] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 0 [pid 6034] <... mount resumed>) = 0 [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6036] <... open resumed>) = 5 [pid 6034] <... futex resumed>) = 1 [pid 6031] <... futex resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 307] unlink("./188/binderfs" [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... unlink resumed>) = 0 [pid 6029] <... futex resumed>) = 0 [pid 6036] <... futex resumed>) = 0 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6036] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6034] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6034] <... open resumed>) = 5 [pid 6036] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6036] <... openat resumed>) = 6 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... futex resumed>) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] <... futex resumed>) = 0 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6047 attached [pid 6036] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6034] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6031] <... futex resumed>) = 0 [ 141.394926][ T6036] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/190/bus supports timestamps until 2038 (0x7fffffff) [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] <... openat resumed>) = 6 [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6029] <... futex resumed>) = 0 [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6029] <... futex resumed>) = 0 [pid 6034] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6035] <... write resumed>) = 1048576 [pid 6035] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6028] <... futex resumed>) = 0 [pid 6028] exit_group(0) = ? [pid 6035] <... futex resumed>) = ? [pid 6047] set_robust_list(0x7f19bd6049e0, 24 [pid 6036] <... write resumed>) = 262144 [pid 6035] +++ exited with 0 +++ [pid 6034] <... write resumed>) = 262144 [pid 6028] +++ exited with 0 +++ [pid 6024] <... write resumed>) = 1048576 [pid 6047] <... set_robust_list resumed>) = 0 [pid 6047] memfd_create("syzkaller", 0) = 3 [pid 6047] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6047] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6036] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6024] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6031] <... futex resumed>) = 0 [pid 6022] exit_group(0) = ? [pid 6034] <... futex resumed>) = 1 [pid 6031] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = 0 [pid 6024] <... futex resumed>) = ? [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6028, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6034] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6036] <... futex resumed>) = 0 [pid 6031] <... futex resumed>) = 1 [pid 6029] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6036] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6034] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6031] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6029] <... futex resumed>) = 0 [pid 6024] +++ exited with 0 +++ [pid 6022] +++ exited with 0 +++ [pid 308] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] <... write resumed>) = 1048576 [pid 6034] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6029] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6022, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./192/binderfs") = 0 [pid 306] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [ 141.453636][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 141.478060][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6047] munmap(0x7f19b51e4000, 1048576 [pid 308] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] <... munmap resumed>) = 0 [pid 6047] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6036] <... write resumed>) = 1048576 [pid 308] lstat("./189/binderfs", [pid 6036] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6036] <... futex resumed>) = 1 [pid 6031] <... futex resumed>) = 0 [pid 308] unlink("./189/binderfs" [pid 6031] exit_group(0 [pid 6036] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6031] <... exit_group resumed>) = ? [pid 308] <... unlink resumed>) = 0 [pid 6036] <... futex resumed>) = ? [pid 308] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6034] <... write resumed>) = 1048576 [pid 6034] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6029] <... futex resumed>) = 0 [pid 6029] exit_group(0) = ? [pid 6034] <... futex resumed>) = ? [pid 6047] <... openat resumed>) = 4 [pid 6036] +++ exited with 0 +++ [pid 6031] +++ exited with 0 +++ [pid 6047] ioctl(4, LOOP_SET_FD, 3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6031, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 307] <... umount2 resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 307] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... restart_syscall resumed>) = 0 [pid 310] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./190/binderfs") = 0 [ 141.520362][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 141.537091][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 141.550127][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./188/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./188/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./188") = 0 [pid 307] mkdir("./189", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6034] +++ exited with 0 +++ [pid 6029] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6029, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./187/binderfs") = 0 [ 141.568463][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.581788][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 141.595448][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] <... ioctl resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 6047] close(3) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 6047] mkdir("./bus", 0777 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6047] <... mkdir resumed>) = 0 [pid 307] close(3 [pid 306] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6047] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./192/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./192") = 0 [pid 306] mkdir("./193", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 308] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./189/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./189/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6049 [pid 308] close(3) = 0 [pid 308] rmdir("./189") = 0 [pid 308] mkdir("./190", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6050 ./strace-static-x86_64: Process 6049 attached [pid 6049] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6049] chdir("./189") = 0 [pid 6049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6049] setpgid(0, 0) = 0 [pid 6049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] write(3, "1000", 4) = 4 [pid 6049] close(3) = 0 [pid 6049] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6049] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6049] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6051], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6051 [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6050 attached [pid 6050] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6050] chdir("./190") = 0 [pid 6050] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6050] setpgid(0, 0) = 0 [pid 6050] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6050] write(3, "1000", 4) = 4 [pid 6050] close(3) = 0 [ 141.613149][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.630841][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6050] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6050] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6050] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6050] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6052], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6052 [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6051 attached [pid 6051] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6051] memfd_create("syzkaller", 0) = 3 [pid 6051] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6051] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6052 attached [pid 6052] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6052] memfd_create("syzkaller", 0 [pid 6051] <... write resumed>) = 1048576 [pid 6051] munmap(0x7f19b51e4000, 1048576 [pid 6052] <... memfd_create resumed>) = 3 [pid 6052] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6051] <... munmap resumed>) = 0 [pid 6051] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6052] <... mmap resumed>) = 0x7f19b51e4000 [pid 6052] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6047] <... mount resumed>) = 0 [pid 6047] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6047] chdir("./bus") = 0 [pid 6047] ioctl(4, LOOP_CLR_FD [pid 6052] <... write resumed>) = 1048576 [pid 6052] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6052] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6051] <... openat resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 6051] ioctl(4, LOOP_SET_FD, 3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6051] <... ioctl resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 6051] close(3) = 0 [pid 6051] mkdir("./bus", 0777) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 6051] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./190/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./190/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./190") = 0 [pid 310] mkdir("./191", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6056 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6057 [pid 305] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6056 attached [pid 6056] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6056] chdir("./193") = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./187/bus", [pid 6056] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6056] setpgid(0, 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6056] <... setpgid resumed>) = 0 [pid 305] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6056] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6056] <... openat resumed>) = 3 [pid 305] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6056] write(3, "1000", 4) = 4 [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, [pid 6056] close(3) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6056] symlink("/dev/binderfs", "./binderfs" [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 6056] <... symlink resumed>) = 0 [pid 305] getdents64(4, [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./187/bus" [pid 6056] <... futex resumed>) = 0 [pid 6056] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6056] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6056] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6057 attached [pid 6057] set_robust_list(0x55555748e5e0, 24 [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3 [pid 6056] <... clone resumed>, parent_tid=[6058], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6058 ./strace-static-x86_64: Process 6058 attached [pid 6057] <... set_robust_list resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] rmdir("./187" [pid 6057] chdir("./191" [pid 305] <... rmdir resumed>) = 0 [pid 305] mkdir("./188", 0777 [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6057] <... chdir resumed>) = 0 [pid 6057] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 305] <... mkdir resumed>) = 0 [pid 6057] <... prctl resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6057] setpgid(0, 0) = 0 [pid 6057] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6047] <... ioctl resumed>) = 0 [pid 6058] set_robust_list(0x7f19bd6049e0, 24 [pid 6047] close(4 [pid 6057] <... openat resumed>) = 3 [pid 6058] <... set_robust_list resumed>) = 0 [pid 6057] write(3, "1000", 4) = 4 [pid 6057] close(3) = 0 [pid 6057] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6057] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6057] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6060], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6060 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6060 attached [pid 6058] memfd_create("syzkaller", 0 [pid 6060] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6060] memfd_create("syzkaller", 0) = 3 [pid 6058] <... memfd_create resumed>) = 3 [pid 6060] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 141.690102][ T6047] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/184/bus supports timestamps until 2038 (0x7fffffff) [pid 6058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6060] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6060] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6060] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6052] <... openat resumed>) = 4 [pid 305] <... openat resumed>) = 3 [pid 6058] <... write resumed>) = 1048576 [pid 6058] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6058] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6058] ioctl(4, LOOP_SET_FD, 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 6052] ioctl(4, LOOP_SET_FD, 3 [pid 6058] <... ioctl resumed>) = 0 [pid 6058] close(3) = 0 [pid 6058] mkdir("./bus", 0777) = 0 [pid 6058] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6047] <... close resumed>) = 0 [pid 6060] <... openat resumed>) = 4 [pid 6051] <... mount resumed>) = 0 [pid 6051] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6060] ioctl(4, LOOP_SET_FD, 3 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] chdir("./bus") = 0 [pid 6051] ioctl(4, LOOP_CLR_FD [pid 6047] <... futex resumed>) = 1 [pid 6042] <... futex resumed>) = 0 [pid 6060] <... ioctl resumed>) = 0 [pid 6047] chdir("./file0" [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6060] close(3 [pid 6052] <... ioctl resumed>) = 0 [pid 6047] <... chdir resumed>) = 0 [pid 6042] <... futex resumed>) = 0 [pid 6051] <... ioctl resumed>) = 0 [pid 305] close(3 [pid 6052] close(3 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... close resumed>) = 0 [pid 6047] <... futex resumed>) = 0 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6052] mkdir("./bus", 0777 [pid 6047] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... close resumed>) = 0 [pid 6052] <... mkdir resumed>) = 0 [pid 6051] close(4 [pid 6042] <... futex resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 6052] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6047] <... open resumed>) = 4 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6042] <... futex resumed>) = 0 [pid 6047] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... mount resumed>) = 0 [pid 6042] <... futex resumed>) = 0 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 0 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... open resumed>) = 5 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6042] <... futex resumed>) = 0 [pid 6047] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6047] <... openat resumed>) = 6 [pid 6042] <... futex resumed>) = 0 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 0 [pid 6042] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6047] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] mkdir("./bus", 0777 [pid 6051] <... close resumed>) = 0 [pid 6047] <... write resumed>) = 262144 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] <... mkdir resumed>) = 0 [pid 6051] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6051] chdir("./file0" [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6066 attached [pid 6066] set_robust_list(0x55555748e5e0, 24 [pid 6051] <... chdir resumed>) = 0 [pid 6066] <... set_robust_list resumed>) = 0 [pid 6066] chdir("./188") = 0 [pid 6060] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6066 [pid 6066] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6051] <... futex resumed>) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6066] <... prctl resumed>) = 0 [pid 6066] setpgid(0, 0) = 0 [pid 6066] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6042] <... futex resumed>) = 0 [pid 6042] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6042] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6049] <... futex resumed>) = 0 [pid 6051] <... open resumed>) = 4 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] <... futex resumed>) = 0 [pid 6051] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... mount resumed>) = 0 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... futex resumed>) = 0 [pid 6049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6051] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... open resumed>) = 5 [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6051] <... openat resumed>) = 6 [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6049] <... futex resumed>) = 0 [pid 6051] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 141.753799][ T6051] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/189/bus supports timestamps until 2038 (0x7fffffff) [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6047] <... futex resumed>) = 1 [pid 6066] write(3, "1000", 4 [pid 6047] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6066] <... write resumed>) = 4 [pid 6066] close(3) = 0 [pid 6051] <... write resumed>) = 262144 [pid 6066] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6066] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6066] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6066] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6070], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6070 [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6049] <... futex resumed>) = 0 [pid 6051] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6049] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6049] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6070 attached [pid 6070] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6070] memfd_create("syzkaller", 0) = 3 [pid 6070] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6070] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6042] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6052] <... mount resumed>) = 0 [pid 6058] <... mount resumed>) = 0 [pid 6052] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6058] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6052] <... openat resumed>) = 3 [pid 6058] <... openat resumed>) = 3 [pid 6058] chdir("./bus" [pid 6052] chdir("./bus" [pid 6058] <... chdir resumed>) = 0 [pid 6052] <... chdir resumed>) = 0 [pid 6058] ioctl(4, LOOP_CLR_FD [pid 6052] ioctl(4, LOOP_CLR_FD [pid 6058] <... ioctl resumed>) = 0 [pid 6052] <... ioctl resumed>) = 0 [ 141.819869][ T6052] ext4 filesystem being mounted at /root/syzkaller.69675s/190/bus supports timestamps until 2038 (0x7fffffff) [ 141.833635][ T6058] ext4 filesystem being mounted at /root/syzkaller.URAKkl/193/bus supports timestamps until 2038 (0x7fffffff) [pid 6070] <... write resumed>) = 1048576 [pid 6058] close(4 [pid 6052] close(4 [pid 6070] munmap(0x7f19b51e4000, 1048576 [pid 6060] <... mount resumed>) = 0 [pid 6058] <... close resumed>) = 0 [pid 6052] <... close resumed>) = 0 [pid 6051] <... write resumed>) = 1048576 [pid 6049] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6047] <... write resumed>) = 1048576 [pid 6060] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6051] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6049] exit_group(0 [pid 6070] <... munmap resumed>) = 0 [pid 6060] <... openat resumed>) = 3 [pid 6058] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = 1 [pid 6051] <... futex resumed>) = ? [pid 6050] <... futex resumed>) = 0 [pid 6049] <... exit_group resumed>) = ? [pid 6047] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6051] +++ exited with 0 +++ [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6060] chdir("./bus" [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6056] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 6049] +++ exited with 0 +++ [pid 6047] <... futex resumed>) = 0 [pid 6042] exit_group(0 [pid 6070] <... openat resumed>) = 4 [pid 6060] <... chdir resumed>) = 0 [pid 6058] chdir("./file0" [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] chdir("./file0" [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6042] <... exit_group resumed>) = ? [pid 6070] ioctl(4, LOOP_SET_FD, 3 [pid 6060] ioctl(4, LOOP_CLR_FD [pid 6058] <... chdir resumed>) = 0 [pid 6052] <... chdir resumed>) = 0 [pid 6047] +++ exited with 0 +++ [pid 6042] +++ exited with 0 +++ [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6049, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6058] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6042, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 307] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6056] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6070] <... ioctl resumed>) = 0 [pid 6060] <... ioctl resumed>) = 0 [pid 6070] close(3 [pid 6060] close(4 [pid 6070] <... close resumed>) = 0 [pid 6060] <... close resumed>) = 0 [pid 6070] mkdir("./bus", 0777 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6070] <... mkdir resumed>) = 0 [pid 6060] <... futex resumed>) = 1 [pid 309] <... restart_syscall resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6070] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... open resumed>) = 4 [pid 6057] <... futex resumed>) = 0 [pid 6052] <... open resumed>) = 4 [pid 307] fstat(3, [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6060] <... futex resumed>) = 0 [pid 6058] <... futex resumed>) = 1 [pid 6057] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 309] umount2("./184", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(3, [pid 6060] chdir("./file0" [pid 6058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6060] <... chdir resumed>) = 0 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6056] <... futex resumed>) = 0 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "./184", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6060] <... futex resumed>) = 1 [pid 6058] <... mount resumed>) = 0 [pid 6057] <... futex resumed>) = 0 [pid 6052] <... mount resumed>) = 0 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] <... futex resumed>) = 1 [pid 6060] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6057] <... futex resumed>) = 0 [pid 6056] <... futex resumed>) = 0 [pid 309] fstat(3, [pid 307] lstat("./189/binderfs", [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6060] <... open resumed>) = 4 [pid 6058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6056] <... futex resumed>) = 0 [pid 6060] <... futex resumed>) = 0 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6058] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6052] <... open resumed>) = 5 [pid 6050] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 307] unlink("./189/binderfs" [pid 6060] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6058] <... open resumed>) = 5 [pid 6057] <... futex resumed>) = 0 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... mount resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [ 141.871429][ T6060] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/191/bus supports timestamps until 2038 (0x7fffffff) [ 141.906353][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./184/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... unlink resumed>) = 0 [pid 6060] <... futex resumed>) = 0 [pid 6057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6052] <... futex resumed>) = 1 [pid 307] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6050] <... futex resumed>) = 0 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... futex resumed>) = 1 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = 0 [pid 6052] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] lstat("./184/binderfs", [pid 6060] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6060] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6050] <... futex resumed>) = 0 [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6052] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 309] unlink("./184/binderfs" [pid 6060] <... futex resumed>) = 0 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... openat resumed>) = 6 [pid 6057] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... unlink resumed>) = 0 [pid 6052] <... openat resumed>) = 6 [pid 6057] <... futex resumed>) = 1 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... futex resumed>) = 1 [pid 6050] <... futex resumed>) = 0 [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6058] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = 0 [pid 6050] <... futex resumed>) = 0 [pid 6060] <... futex resumed>) = 0 [pid 6058] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6052] <... write resumed>) = 262144 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6058] <... write resumed>) = 262144 [pid 6057] <... futex resumed>) = 0 [pid 6056] <... futex resumed>) = 0 [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6052] <... futex resumed>) = 0 [pid 6050] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6058] <... futex resumed>) = 0 [pid 6057] <... futex resumed>) = 1 [pid 6056] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6052] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6050] <... futex resumed>) = 0 [pid 6060] <... futex resumed>) = 0 [pid 6058] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6056] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6056] <... futex resumed>) = 0 [pid 6058] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6056] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... write resumed>) = 262144 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6057] <... futex resumed>) = 0 [pid 6057] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6057] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6060] <... futex resumed>) = 1 [ 141.921239][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 141.935051][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 141.936160][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6060] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6058] <... write resumed>) = 1048576 [pid 6058] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6056] <... futex resumed>) = 0 [pid 6056] exit_group(0) = ? [pid 6058] <... futex resumed>) = ? [pid 6070] <... mount resumed>) = 0 [pid 6052] <... write resumed>) = 1048576 [pid 6050] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6052] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6050] exit_group(0 [pid 6070] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6052] <... futex resumed>) = -1 (errno 18446744073709551359) [pid 6050] <... exit_group resumed>) = ? [pid 6070] <... openat resumed>) = 3 [pid 6070] chdir("./bus") = 0 [pid 6070] ioctl(4, LOOP_CLR_FD [pid 6060] <... write resumed>) = 1048576 [pid 6060] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6057] <... futex resumed>) = 0 [pid 6060] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6057] exit_group(0 [pid 6060] <... futex resumed>) = ? [pid 6057] <... exit_group resumed>) = ? [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./189/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./189/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./189" [pid 6052] +++ exited with 0 +++ [pid 6050] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6050, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./190", 0777 [pid 308] <... restart_syscall resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 308] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./190/binderfs") = 0 [ 141.994095][ T6070] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/188/bus supports timestamps until 2038 (0x7fffffff) [pid 308] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] <... ioctl resumed>) = 0 [pid 6060] +++ exited with 0 +++ [pid 6058] +++ exited with 0 +++ [pid 6057] +++ exited with 0 +++ [pid 6056] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6057, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6056, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 6070] close(4 [pid 310] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 310] fstat(3, [pid 306] fstat(3, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 306] getdents64(3, [pid 6070] <... close resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] lstat("./184/bus", [pid 307] close(3 [pid 306] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] lstat("./191/binderfs", [pid 306] lstat("./193/binderfs", [pid 6066] <... futex resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] unlink("./191/binderfs" [pid 306] unlink("./193/binderfs" [pid 6070] chdir("./file0" [pid 310] <... unlink resumed>) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... unlink resumed>) = 0 [pid 310] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 142.044088][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 142.057440][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] <... chdir resumed>) = 0 [pid 309] umount2("./184/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [pid 6070] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "./184/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 6070] <... open resumed>) = 4 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./184/bus" [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [pid 309] getdents64(3, [pid 6070] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6070] <... mount resumed>) = 0 [pid 6066] <... futex resumed>) = 0 [pid 309] close(3 [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... close resumed>) = 0 [pid 6070] <... futex resumed>) = 0 [pid 6066] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 309] rmdir("./184" [pid 6070] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... rmdir resumed>) = 0 [pid 6066] <... futex resumed>) = 0 [pid 309] mkdir("./185", 0777 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6070] <... open resumed>) = 5 [pid 309] <... openat resumed>) = 3 [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] ioctl(3, LOOP_CLR_FD [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [pid 6070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6066] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 6070] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] close(3 [pid 308] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6070] <... openat resumed>) = 6 [pid 309] <... close resumed>) = 0 ./strace-static-x86_64: Process 6076 attached [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6076] set_robust_list(0x55555748e5e0, 24 [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [pid 6070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6077 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6066] <... futex resumed>) = 0 [pid 6070] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6070] <... write resumed>) = 262144 ./strace-static-x86_64: Process 6077 attached [pid 6076] <... set_robust_list resumed>) = 0 [pid 308] lstat("./190/bus", [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6076 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6076] chdir("./190" [pid 308] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6076] <... chdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6077] set_robust_list(0x55555748e5e0, 24 [pid 6076] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... set_robust_list resumed>) = 0 [pid 308] <... openat resumed>) = 4 [pid 6076] <... prctl resumed>) = 0 [pid 6070] <... futex resumed>) = 1 [pid 6066] <... futex resumed>) = 0 [ 142.086906][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 142.086915][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 142.088029][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 142.100673][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 308] fstat(4, [pid 6077] chdir("./185" [pid 6076] setpgid(0, 0 [pid 6070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6066] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] <... chdir resumed>) = 0 [pid 6076] <... setpgid resumed>) = 0 [pid 6070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6066] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6077] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6076] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6070] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6066] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... prctl resumed>) = 0 [pid 6076] <... openat resumed>) = 3 [pid 308] getdents64(4, [pid 6076] write(3, "1000", 4 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6076] <... write resumed>) = 4 [pid 308] getdents64(4, [pid 6077] setpgid(0, 0 [pid 6076] close(3 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6077] <... setpgid resumed>) = 0 [pid 6076] <... close resumed>) = 0 [pid 308] close(4 [pid 6076] symlink("/dev/binderfs", "./binderfs" [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./190/bus" [pid 6076] <... symlink resumed>) = 0 [pid 6077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... rmdir resumed>) = 0 [pid 6076] <... futex resumed>) = 0 [pid 308] getdents64(3, [pid 6077] <... openat resumed>) = 3 [pid 6076] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3 [pid 6077] write(3, "1000", 4 [pid 6076] <... mmap resumed>) = 0x7f19bd5e4000 [pid 308] <... close resumed>) = 0 [pid 6076] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 308] rmdir("./190" [pid 6077] <... write resumed>) = 4 [pid 6076] <... mprotect resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 6076] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] mkdir("./191", 0777 [pid 6077] close(3 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6077] <... close resumed>) = 0 [pid 6076] <... clone resumed>, parent_tid=[6078], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6078 [pid 6077] symlink("/dev/binderfs", "./binderfs" [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] <... symlink resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6078 attached [pid 6078] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6077] <... futex resumed>) = 0 [pid 6077] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6078] memfd_create("syzkaller", 0) = 3 [pid 6077] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6077] <... mprotect resumed>) = 0 [pid 6077] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6079], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6079 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6078] <... mmap resumed>) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6079 attached [pid 6079] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6079] memfd_create("syzkaller", 0) = 3 [pid 6079] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6079] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6078] <... write resumed>) = 1048576 [pid 6078] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6070] <... write resumed>) = 1048576 [pid 6070] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6070] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6066] <... futex resumed>) = 0 [pid 6066] exit_group(0) = ? [pid 6070] <... futex resumed>) = ? [pid 6070] +++ exited with 0 +++ [pid 6079] <... write resumed>) = 1048576 [pid 6079] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6079] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... openat resumed>) = 3 [pid 6079] <... openat resumed>) = 4 [pid 6079] ioctl(4, LOOP_SET_FD, 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 6066] +++ exited with 0 +++ [pid 306] <... umount2 resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6066, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./188/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] unlink("./188/binderfs" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... unlink resumed>) = 0 [pid 306] lstat("./193/bus", [pid 305] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6079] <... ioctl resumed>) = 0 [pid 6078] <... openat resumed>) = 4 [pid 310] <... umount2 resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... close resumed>) = 0 [pid 310] lstat("./191/bus", [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6081 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./191/bus"./strace-static-x86_64: Process 6081 attached ) = 0 [pid 306] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] getdents64(3, [pid 6081] set_robust_list(0x55555748e5e0, 24 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] close(3) = 0 [pid 310] rmdir("./191") = 0 [pid 310] mkdir("./192", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6082 [pid 6078] ioctl(4, LOOP_SET_FD, 3 [pid 6079] close(3) = 0 [pid 6079] mkdir("./bus", 0777) = 0 [pid 6079] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6082 attached [pid 6082] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6082] chdir("./192") = 0 [pid 6082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6082] setpgid(0, 0) = 0 [pid 6082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6082] write(3, "1000", 4) = 4 [pid 6082] close(3) = 0 [pid 6082] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6082] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6082] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6083], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6083 [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6083 attached [pid 6081] <... set_robust_list resumed>) = 0 [pid 6078] <... ioctl resumed>) = 0 [pid 306] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6083] set_robust_list(0x7f19bd6049e0, 24 [pid 6082] <... futex resumed>) = 0 [pid 6081] chdir("./191" [pid 6078] close(3 [pid 306] <... openat resumed>) = 4 [pid 6083] <... set_robust_list resumed>) = 0 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6081] <... chdir resumed>) = 0 [pid 6078] <... close resumed>) = 0 [pid 306] fstat(4, [pid 6083] memfd_create("syzkaller", 0 [pid 6081] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6078] mkdir("./bus", 0777 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6083] <... memfd_create resumed>) = 3 [pid 6081] <... prctl resumed>) = 0 [pid 6078] <... mkdir resumed>) = 0 [pid 306] getdents64(4, [pid 6083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6081] setpgid(0, 0 [pid 6078] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6083] <... mmap resumed>) = 0x7f19b51e4000 [pid 6081] <... setpgid resumed>) = 0 [pid 306] getdents64(4, [pid 6083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6081] <... openat resumed>) = 3 [pid 306] close(4 [pid 6081] write(3, "1000", 4 [pid 306] <... close resumed>) = 0 [ 142.231890][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 142.249667][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 6081] <... write resumed>) = 4 [pid 306] rmdir("./193/bus" [pid 6083] <... write resumed>) = 1048576 [pid 6081] close(3 [pid 306] <... rmdir resumed>) = 0 [pid 6083] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6083] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6081] <... close resumed>) = 0 [pid 6081] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6081] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6081] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6087], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6087 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6087 attached [pid 6087] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6087] memfd_create("syzkaller", 0) = 3 [pid 6087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6079] <... mount resumed>) = 0 [pid 306] close(3 [pid 6079] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./193" [pid 6087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6087] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6087] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6079] <... openat resumed>) = 3 [pid 6079] chdir("./bus") = 0 [pid 6079] ioctl(4, LOOP_CLR_FD [pid 306] <... rmdir resumed>) = 0 [pid 306] mkdir("./194", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6083] <... openat resumed>) = 4 [pid 6078] <... mount resumed>) = 0 [pid 6083] ioctl(4, LOOP_SET_FD, 3 [pid 6078] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6078] chdir("./bus") = 0 [pid 6078] ioctl(4, LOOP_CLR_FD [pid 6083] <... ioctl resumed>) = 0 [pid 6083] close(3) = 0 [pid 6083] mkdir("./bus", 0777) = 0 [pid 6083] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6079] <... ioctl resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6092 [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./188/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./188/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./188") = 0 [pid 305] mkdir("./189", 0777) = 0 ./strace-static-x86_64: Process 6092 attached [pid 6092] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6092] chdir("./194") = 0 [pid 6092] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6092] setpgid(0, 0) = 0 [pid 6092] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6092] <... openat resumed>) = 3 [pid 6092] write(3, "1000", 4) = 4 [pid 6092] close(3) = 0 [pid 6092] symlink("/dev/binderfs", "./binderfs" [pid 6078] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6092] <... symlink resumed>) = 0 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6092] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6093 [pid 6092] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6094], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6094 [pid 6078] close(4 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6078] <... close resumed>) = 0 [pid 6079] close(4./strace-static-x86_64: Process 6093 attached [pid 6093] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6093] chdir("./189") = 0 [pid 6093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6093] setpgid(0, 0) = 0 [pid 6093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6094 attached ) = 3 [pid 6094] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] memfd_create("syzkaller", 0 [pid 6093] write(3, "1000", 4) = 4 [pid 6093] close(3) = 0 [pid 6094] <... memfd_create resumed>) = 3 [pid 6093] symlink("/dev/binderfs", "./binderfs" [pid 6094] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6078] chdir("./file0") = 0 [pid 6079] <... close resumed>) = 0 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] <... symlink resumed>) = 0 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6093] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6093] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6096], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6096 [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6079] <... futex resumed>) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... open resumed>) = 4 [pid 6079] chdir("./file0" [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... chdir resumed>) = 0 [pid 6078] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... mount resumed>) = 0 [pid 6079] <... futex resumed>) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6078] <... futex resumed>) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6076] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6078] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... open resumed>) = 5 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6076] <... futex resumed>) = 0 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6078] <... openat resumed>) = 6 [pid 6079] <... open resumed>) = 4 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6079] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6078] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... mount resumed>) = 0 [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6079] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6079] <... open resumed>) = 5 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6079] <... openat resumed>) = 6 [pid 6094] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6077] <... futex resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6096 attached [pid 6096] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6096] memfd_create("syzkaller", 0) = 3 [pid 6096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6087] <... openat resumed>) = 4 [pid 6087] ioctl(4, LOOP_SET_FD, 3 [pid 6094] <... write resumed>) = 1048576 [ 142.281603][ T6079] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/185/bus supports timestamps until 2038 (0x7fffffff) [ 142.296601][ T6078] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/190/bus supports timestamps until 2038 (0x7fffffff) [pid 6094] munmap(0x7f19b51e4000, 1048576 [pid 6087] <... ioctl resumed>) = 0 [pid 6096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6094] <... munmap resumed>) = 0 [pid 6094] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6094] ioctl(4, LOOP_SET_FD, 3 [pid 6087] close(3) = 0 [pid 6087] mkdir("./bus", 0777) = 0 [pid 6087] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6096] <... write resumed>) = 1048576 [pid 6079] <... write resumed>) = 262144 [pid 6078] <... write resumed>) = 262144 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] <... futex resumed>) = 1 [pid 6076] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = 1 [pid 6078] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6076] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6079] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6076] <... futex resumed>) = 0 [pid 6078] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6076] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6077] <... futex resumed>) = 0 [pid 6096] munmap(0x7f19b51e4000, 1048576 [pid 6094] <... ioctl resumed>) = 0 [pid 6083] <... mount resumed>) = 0 [pid 6077] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... munmap resumed>) = 0 [pid 6094] close(3 [pid 6083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6077] <... futex resumed>) = 1 [pid 6096] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6094] <... close resumed>) = 0 [pid 6083] <... openat resumed>) = 3 [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... openat resumed>) = 4 [pid 6094] mkdir("./bus", 0777 [pid 6083] chdir("./bus" [pid 6096] ioctl(4, LOOP_SET_FD, 3 [pid 6094] <... mkdir resumed>) = 0 [pid 6079] <... futex resumed>) = 0 [pid 6094] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6083] <... chdir resumed>) = 0 [pid 6083] ioctl(4, LOOP_CLR_FD [pid 6079] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6096] <... ioctl resumed>) = 0 [pid 6083] <... ioctl resumed>) = 0 [pid 6096] close(3 [pid 6083] close(4 [pid 6096] <... close resumed>) = 0 [pid 6083] <... close resumed>) = 0 [pid 6096] mkdir("./bus", 0777 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... mkdir resumed>) = 0 [pid 6083] <... futex resumed>) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6096] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] chdir("./file0" [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... chdir resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... open resumed>) = 4 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... mount resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... open resumed>) = 5 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [pid 6083] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... openat resumed>) = 6 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] <... futex resumed>) = 0 [ 142.367921][ T6083] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6083] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... write resumed>) = 262144 [pid 6079] <... write resumed>) = 1048576 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6082] <... futex resumed>) = 0 [pid 6082] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6082] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6083] <... futex resumed>) = 1 [pid 6083] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6077] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6077] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6076] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6078] <... write resumed>) = 1048576 [pid 6078] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] <... mount resumed>) = 0 [pid 6079] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6096] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6079] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6078] <... futex resumed>) = 0 [pid 6077] exit_group(0 [pid 6096] chdir("./bus" [pid 6076] exit_group(0 [pid 6096] <... chdir resumed>) = 0 [pid 6076] <... exit_group resumed>) = ? [pid 6096] ioctl(4, LOOP_CLR_FD) = 0 [pid 6096] close(4) = 0 [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6079] <... futex resumed>) = ? [pid 6077] <... exit_group resumed>) = ? [pid 6096] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6094] <... mount resumed>) = 0 [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6083] <... write resumed>) = 1048576 [pid 6079] +++ exited with 0 +++ [pid 6077] +++ exited with 0 +++ [pid 6087] <... mount resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6078] +++ exited with 0 +++ [pid 6076] +++ exited with 0 +++ [pid 6083] <... futex resumed>) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6082] <... futex resumed>) = 0 [pid 6083] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6082] exit_group(0 [pid 6087] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6087] chdir("./bus") = 0 [pid 6087] ioctl(4, LOOP_CLR_FD) = 0 [pid 6087] close(4) = 0 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = 1 [pid 6087] chdir("./file0" [pid 6083] <... futex resumed>) = -1 (errno 18446744073709551536) [pid 6082] <... exit_group resumed>) = ? [pid 6083] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6076, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6087] <... chdir resumed>) = 0 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = 1 [pid 6087] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6082] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6082, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6077, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 6096] chdir("./file0" [pid 307] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 310] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6096] <... chdir resumed>) = 0 [pid 307] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] umount2("./185", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6094] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] chdir("./bus" [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] openat(AT_FDCWD, "./185", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 6096] <... futex resumed>) = 1 [pid 6093] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 309] fstat(3, [pid 6096] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... openat resumed>) = 3 [pid 6093] <... futex resumed>) = 0 [pid 310] getdents64(3, [pid 6096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(3, [pid 6094] <... chdir resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6094] ioctl(4, LOOP_CLR_FD [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 307] fstat(3, [pid 309] umount2("./185/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6094] <... ioctl resumed>) = 0 [pid 6094] close(4 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./192/binderfs", [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6094] <... close resumed>) = 0 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = 0 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] lstat("./185/binderfs", [pid 307] getdents64(3, [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 1 [pid 6096] <... open resumed>) = 4 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./192/binderfs" [pid 6094] chdir("./file0" [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] unlink("./185/binderfs" [pid 6094] <... chdir resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 310] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... unlink resumed>) = 0 [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6087] <... open resumed>) = 4 [ 142.425841][ T6096] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/189/bus supports timestamps until 2038 (0x7fffffff) [ 142.439668][ T6094] ext4 filesystem being mounted at /root/syzkaller.URAKkl/194/bus supports timestamps until 2038 (0x7fffffff) [ 142.457265][ T6087] ext4 filesystem being mounted at /root/syzkaller.69675s/191/bus supports timestamps until 2038 (0x7fffffff) [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6092] <... futex resumed>) = 0 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 1 [pid 6094] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = 1 [pid 6087] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = 1 [pid 6087] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6087] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... openat resumed>) = 6 [pid 6081] <... futex resumed>) = 0 [pid 6094] <... open resumed>) = 4 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6081] <... futex resumed>) = 0 [pid 6087] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6094] <... futex resumed>) = 1 [pid 6092] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... mount resumed>) = 0 [pid 6092] <... futex resumed>) = 0 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 0 [pid 6092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... open resumed>) = 5 [pid 6092] <... futex resumed>) = 0 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 0 [pid 6092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6094] <... openat resumed>) = 6 [pid 6092] <... futex resumed>) = 0 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 0 [pid 6092] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6094] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... write resumed>) = 262144 [pid 6087] <... write resumed>) = 262144 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6081] <... futex resumed>) = 0 [pid 6081] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6081] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6087] <... futex resumed>) = 1 [pid 6087] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6092] <... futex resumed>) = 0 [pid 6092] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6094] <... futex resumed>) = 1 [pid 6094] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6096] <... futex resumed>) = 1 [pid 6093] <... futex resumed>) = 0 [pid 307] lstat("./190/binderfs", [pid 6096] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6096] <... mount resumed>) = 0 [pid 6093] <... futex resumed>) = 0 [pid 307] unlink("./190/binderfs" [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... unlink resumed>) = 0 [pid 6096] <... futex resumed>) = 0 [pid 6093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6093] <... futex resumed>) = 0 [pid 6096] <... open resumed>) = 5 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6096] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6096] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6093] <... futex resumed>) = 0 [pid 6096] <... openat resumed>) = 6 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6096] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 142.476146][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 142.489914][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 142.504400][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... write resumed>) = 262144 [pid 6092] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6081] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6094] <... write resumed>) = 1048576 [pid 6094] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6092] exit_group(0) = ? [pid 6094] +++ exited with 0 +++ [pid 6092] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6092, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6087] <... write resumed>) = 1048576 [pid 6087] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6081] exit_group(0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6081] <... exit_group resumed>) = ? [pid 306] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./194/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./194/binderfs") = 0 [pid 306] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] <... futex resumed>) = 1 [pid 6096] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6087] +++ exited with 0 +++ [pid 6081] +++ exited with 0 +++ [pid 6093] <... futex resumed>) = 0 [pid 6093] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6081, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./191/binderfs") = 0 [ 142.532514][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 142.534255][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 142.560848][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6096] <... futex resumed>) = 0 [pid 6093] <... futex resumed>) = 1 [pid 6096] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6093] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6096] <... write resumed>) = 1048576 [pid 6096] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6093] <... futex resumed>) = 0 [pid 6096] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6093] exit_group(0) = ? [pid 6096] <... futex resumed>) = 230 [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./190/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./190/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./190") = 0 [pid 307] mkdir("./191", 0777) = 0 [ 142.586736][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 142.600628][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 142.622606][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./194/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./194") = 0 [pid 306] mkdir("./195", 0777) = 0 [ 142.635978][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6096] +++ exited with 0 +++ [pid 6093] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6093, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./185/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./185/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./185/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./185/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./185") = 0 [pid 305] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] mkdir("./186", 0777) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 305] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./189/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./189/binderfs") = 0 [pid 305] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 310] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./192/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./192") = 0 [pid 310] mkdir("./193", 0777) = 0 [ 142.755844][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 142.769191][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] <... openat resumed>) = 3 [pid 308] <... umount2 resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6106 attached [pid 308] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6106 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] set_robust_list(0x55555748e5e0, 24) = 0 [pid 308] lstat("./191/bus", [pid 6106] chdir("./191" [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6106] <... chdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6106] setpgid(0, 0 [pid 308] <... openat resumed>) = 4 [pid 6106] <... setpgid resumed>) = 0 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, [pid 6106] <... openat resumed>) = 3 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6106] write(3, "1000", 4 [pid 308] close(4 [pid 6106] <... write resumed>) = 4 [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./191/bus" [pid 6106] close(3 [pid 308] <... rmdir resumed>) = 0 [pid 6106] <... close resumed>) = 0 [pid 6106] symlink("/dev/binderfs", "./binderfs" [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6106] <... symlink resumed>) = 0 [pid 308] close(3 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 6106] <... futex resumed>) = 0 [pid 308] rmdir("./191") = 0 [pid 6106] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] mkdir("./192", 0777 [pid 6106] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6106] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6106] <... mprotect resumed>) = 0 [pid 6106] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6107 attached [pid 6107] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6107] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6106] <... clone resumed>, parent_tid=[6107], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6107 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6107] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6107] memfd_create("syzkaller", 0) = 3 [pid 6107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6107] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6107] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = 0 [pid 6107] <... openat resumed>) = 4 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6107] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 308] <... openat resumed>) = 3 [pid 306] close(3 [pid 6107] <... ioctl resumed>) = 0 [pid 310] close(3 [pid 309] <... close resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] <... close resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] lstat("./189/bus", [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] close(3 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... close resumed>) = 0 [pid 305] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6109 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6110 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6111 [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6112 [pid 305] getdents64(4, [pid 6107] close(3 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6107] <... close resumed>) = 0 [pid 305] close(4 [pid 6107] mkdir("./bus", 0777 [pid 305] <... close resumed>) = 0 [pid 6107] <... mkdir resumed>) = 0 [pid 305] rmdir("./189/bus" [pid 6107] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./189") = 0 [pid 305] mkdir("./190", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6111 attached ) = 3 [pid 6111] set_robust_list(0x55555748e5e0, 24 [pid 305] ioctl(3, LOOP_CLR_FD [pid 6111] <... set_robust_list resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6111] chdir("./192" [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6112 attached ./strace-static-x86_64: Process 6110 attached [pid 6111] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 6113 attached [pid 6112] set_robust_list(0x55555748e5e0, 24 [pid 6111] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6110] set_robust_list(0x55555748e5e0, 24 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6113 ./strace-static-x86_64: Process 6109 attached [pid 6113] set_robust_list(0x55555748e5e0, 24 [pid 6112] <... set_robust_list resumed>) = 0 [pid 6111] <... prctl resumed>) = 0 [pid 6110] <... set_robust_list resumed>) = 0 [pid 6113] <... set_robust_list resumed>) = 0 [pid 6112] chdir("./195" [pid 6111] setpgid(0, 0 [pid 6110] chdir("./186" [pid 6109] set_robust_list(0x55555748e5e0, 24 [pid 6113] chdir("./190" [pid 6112] <... chdir resumed>) = 0 [pid 6111] <... setpgid resumed>) = 0 [pid 6110] <... chdir resumed>) = 0 [pid 6109] <... set_robust_list resumed>) = 0 [pid 6111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6110] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6113] <... chdir resumed>) = 0 [pid 6112] <... prctl resumed>) = 0 [pid 6111] <... openat resumed>) = 3 [pid 6110] <... prctl resumed>) = 0 [pid 6109] chdir("./193" [pid 6113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6112] setpgid(0, 0 [pid 6111] write(3, "1000", 4 [pid 6110] setpgid(0, 0 [pid 6109] <... chdir resumed>) = 0 [pid 6113] <... prctl resumed>) = 0 [pid 6112] <... setpgid resumed>) = 0 [pid 6111] <... write resumed>) = 4 [pid 6110] <... setpgid resumed>) = 0 [pid 6109] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6113] setpgid(0, 0 [pid 6111] close(3 [pid 6112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6111] <... close resumed>) = 0 [pid 6111] symlink("/dev/binderfs", "./binderfs" [pid 6110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] <... openat resumed>) = 3 [pid 6109] <... prctl resumed>) = 0 [pid 6112] write(3, "1000", 4 [pid 6111] <... symlink resumed>) = 0 [pid 6113] <... setpgid resumed>) = 0 [pid 6112] <... write resumed>) = 4 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] <... openat resumed>) = 3 [pid 6109] setpgid(0, 0 [pid 6113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6112] close(3 [pid 6111] <... futex resumed>) = 0 [pid 6110] write(3, "1000", 4 [pid 6109] <... setpgid resumed>) = 0 [pid 6113] <... openat resumed>) = 3 [pid 6112] <... close resumed>) = 0 [pid 6111] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6110] <... write resumed>) = 4 [pid 6109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6113] write(3, "1000", 4 [pid 6112] symlink("/dev/binderfs", "./binderfs" [pid 6111] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6110] close(3 [pid 6109] <... openat resumed>) = 3 [pid 6113] <... write resumed>) = 4 [pid 6112] <... symlink resumed>) = 0 [pid 6111] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6110] <... close resumed>) = 0 [pid 6113] close(3 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6111] <... mprotect resumed>) = 0 [pid 6110] symlink("/dev/binderfs", "./binderfs" [pid 6109] write(3, "1000", 4 [pid 6112] <... futex resumed>) = 0 [pid 6111] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6110] <... symlink resumed>) = 0 [pid 6109] <... write resumed>) = 4 [pid 6112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] close(3 [pid 6112] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6111] <... clone resumed>, parent_tid=[6116], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6116 [pid 6110] <... futex resumed>) = 0 [pid 6109] <... close resumed>) = 0 [pid 6112] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6109] symlink("/dev/binderfs", "./binderfs" [pid 6112] <... mprotect resumed>) = 0 [pid 6111] <... futex resumed>) = 0 [pid 6110] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6109] <... symlink resumed>) = 0 [pid 6112] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... clone resumed>, parent_tid=[6117], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6117 [pid 6110] <... mprotect resumed>) = 0 [pid 6109] <... futex resumed>) = 0 [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6109] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6112] <... futex resumed>) = 0 [pid 6109] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6110] <... clone resumed>, parent_tid=[6118], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6118 [pid 6109] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... mprotect resumed>) = 0 [pid 6110] <... futex resumed>) = 0 [pid 6109] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6109] <... clone resumed>, parent_tid=[6119], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6119 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6118 attached [pid 6118] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6118] memfd_create("syzkaller", 0) = 3 [pid 6118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6119 attached [pid 6119] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6119] memfd_create("syzkaller", 0) = 3 [pid 6119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6116 attached [pid 6116] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6116] memfd_create("syzkaller", 0) = 3 [pid 6116] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6113] <... close resumed>) = 0 [pid 6113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6113] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6113] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6120], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6120 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6117 attached [pid 6117] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6107] <... mount resumed>) = 0 [pid 6117] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6120 attached [pid 6107] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6117] <... memfd_create resumed>) = 3 [pid 6117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6107] <... openat resumed>) = 3 [pid 6120] set_robust_list(0x7f19bd6049e0, 24 [pid 6118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6116] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6107] chdir("./bus") = 0 [pid 6107] ioctl(4, LOOP_CLR_FD) = 0 [pid 6120] <... set_robust_list resumed>) = 0 [pid 6107] close(4 [pid 6118] <... write resumed>) = 1048576 [pid 6118] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6118] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6118] ioctl(4, LOOP_SET_FD, 3 [pid 6116] <... write resumed>) = 1048576 [pid 6116] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6116] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6117] <... write resumed>) = 1048576 [pid 6117] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6117] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6118] <... ioctl resumed>) = 0 [pid 6118] close(3) = 0 [pid 6118] mkdir("./bus", 0777) = 0 [pid 6118] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6116] <... openat resumed>) = 4 [pid 6116] ioctl(4, LOOP_SET_FD, 3 [pid 6120] memfd_create("syzkaller", 0 [pid 6116] <... ioctl resumed>) = 0 [pid 6117] <... openat resumed>) = 4 [pid 6116] close(3 [pid 6117] ioctl(4, LOOP_SET_FD, 3 [pid 6116] <... close resumed>) = 0 [pid 6107] <... close resumed>) = 0 [pid 6116] mkdir("./bus", 0777 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... memfd_create resumed>) = 3 [pid 6120] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6116] <... mkdir resumed>) = 0 [pid 6107] <... futex resumed>) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... ioctl resumed>) = 0 [pid 6117] close(3) = 0 [pid 6117] mkdir("./bus", 0777) = 0 [pid 6116] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6107] chdir("./file0") = 0 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [ 142.913726][ T6107] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/191/bus supports timestamps until 2038 (0x7fffffff) [pid 6107] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6120] <... mmap resumed>) = 0x7f19b51e4000 [pid 6107] <... open resumed>) = 4 [pid 6118] <... mount resumed>) = 0 [pid 6118] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6118] chdir("./bus") = 0 [pid 6118] ioctl(4, LOOP_CLR_FD) = 0 [pid 6118] close(4 [pid 6119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6119] <... write resumed>) = 1048576 [pid 6118] <... close resumed>) = 0 [pid 6107] <... futex resumed>) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6107] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] <... openat resumed>) = 6 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6119] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6119] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6119] ioctl(4, LOOP_SET_FD, 3 [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = 0 [pid 6106] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6106] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] <... futex resumed>) = 1 [pid 6107] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6110] <... futex resumed>) = 0 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = 1 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] chdir("./file0") = 0 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] <... open resumed>) = 4 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6110] <... futex resumed>) = 0 [pid 6118] <... mount resumed>) = 0 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6118] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6110] <... futex resumed>) = 0 [pid 6118] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... write resumed>) = 1048576 [pid 6117] <... mount resumed>) = 0 [pid 6120] munmap(0x7f19b51e4000, 1048576 [pid 6119] <... ioctl resumed>) = 0 [pid 6118] <... open resumed>) = 5 [pid 6117] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6110] <... futex resumed>) = 0 [pid 6118] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... munmap resumed>) = 0 [pid 6119] close(3 [pid 6118] <... openat resumed>) = 6 [pid 6117] <... openat resumed>) = 3 [pid 6110] <... futex resumed>) = 0 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6119] <... close resumed>) = 0 [pid 6117] chdir("./bus" [pid 6118] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... openat resumed>) = 4 [pid 6119] mkdir("./bus", 0777 [pid 6118] <... write resumed>) = 262144 [pid 6117] <... chdir resumed>) = 0 [pid 6110] <... futex resumed>) = 0 [pid 6120] ioctl(4, LOOP_SET_FD, 3 [pid 6119] <... mkdir resumed>) = 0 [ 142.978385][ T6118] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/186/bus supports timestamps until 2038 (0x7fffffff) [ 143.008086][ T6117] ext4 filesystem being mounted at /root/syzkaller.URAKkl/195/bus supports timestamps until 2038 (0x7fffffff) [pid 6117] ioctl(4, LOOP_CLR_FD [pid 6119] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6120] <... ioctl resumed>) = 0 [pid 6117] <... ioctl resumed>) = 0 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] close(3 [pid 6117] close(4 [pid 6120] <... close resumed>) = 0 [pid 6117] <... close resumed>) = 0 [pid 6120] mkdir("./bus", 0777 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... mkdir resumed>) = 0 [pid 6117] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6120] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] chdir("./file0" [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... chdir resumed>) = 0 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... open resumed>) = 4 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6118] <... futex resumed>) = 1 [pid 6117] <... mount resumed>) = 0 [pid 6116] <... mount resumed>) = 0 [pid 6110] <... futex resumed>) = 0 [pid 6118] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6116] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6117] <... futex resumed>) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6110] <... futex resumed>) = 0 [pid 6118] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6116] <... openat resumed>) = 3 [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... open resumed>) = 5 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... openat resumed>) = 6 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6112] <... futex resumed>) = 0 [pid 6117] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6112] <... futex resumed>) = 0 [pid 6117] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] chdir("./bus") = 0 [pid 6117] <... write resumed>) = 262144 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = 0 [pid 6112] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6117] <... futex resumed>) = 1 [pid 6117] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 143.040816][ T6116] ext4 filesystem being mounted at /root/syzkaller.69675s/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6116] ioctl(4, LOOP_CLR_FD) = 0 [pid 6116] close(4 [pid 6107] <... write resumed>) = 1048576 [pid 6116] <... close resumed>) = 0 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6118] <... write resumed>) = 1048576 [pid 6118] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6118] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6120] <... mount resumed>) = 0 [pid 6120] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6120] chdir("./bus") = 0 [pid 6120] ioctl(4, LOOP_CLR_FD) = 0 [pid 6110] <... futex resumed>) = 0 [pid 6120] close(4 [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6110] exit_group(0 [pid 6116] chdir("./file0" [pid 6111] <... futex resumed>) = 0 [pid 6110] <... exit_group resumed>) = ? [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... chdir resumed>) = 0 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6116] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6116] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6111] <... futex resumed>) = 0 [pid 6118] <... futex resumed>) = ? [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... open resumed>) = 4 [pid 6118] +++ exited with 0 +++ [pid 6110] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6110, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] umount2("./186", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./186", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./186/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./186/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./186/binderfs") = 0 [pid 309] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6111] <... futex resumed>) = 0 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6111] <... futex resumed>) = 0 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6116] <... open resumed>) = 5 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6112] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 143.084397][ T6120] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/190/bus supports timestamps until 2038 (0x7fffffff) [ 143.100578][ T6119] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/193/bus supports timestamps until 2038 (0x7fffffff) [pid 6107] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] <... futex resumed>) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6107] <... futex resumed>) = 0 [pid 6106] exit_group(0 [pid 6116] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6106] <... exit_group resumed>) = ? [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6116] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... close resumed>) = 0 [pid 6116] <... openat resumed>) = 6 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 6116] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6116] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6111] <... futex resumed>) = 0 [pid 6116] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6107] +++ exited with 0 +++ [pid 6106] +++ exited with 0 +++ [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6106, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6120] <... futex resumed>) = 1 [pid 6120] chdir("./file0") = 0 [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6113] <... futex resumed>) = 0 [pid 6120] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] <... open resumed>) = 4 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6120] <... futex resumed>) = 1 [pid 6113] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6120] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... mount resumed>) = 0 [pid 6113] <... futex resumed>) = 0 [pid 307] fstat(3, [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6120] <... futex resumed>) = 0 [pid 6113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 6120] <... open resumed>) = 5 [pid 6113] <... futex resumed>) = 0 [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6120] <... futex resumed>) = 0 [pid 6113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6120] <... openat resumed>) = 6 [pid 6113] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] lstat("./191/binderfs", [pid 6120] <... futex resumed>) = 0 [pid 6113] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6120] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6120] <... write resumed>) = 262144 [pid 6116] <... write resumed>) = 262144 [pid 6113] <... futex resumed>) = 0 [pid 307] unlink("./191/binderfs" [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... unlink resumed>) = 0 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6111] <... futex resumed>) = 0 [pid 307] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6111] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6113] <... futex resumed>) = 0 [pid 6111] <... futex resumed>) = 0 [pid 6113] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6113] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6120] <... futex resumed>) = 1 [pid 6120] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6111] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... mount resumed>) = 0 [pid 6119] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6119] chdir("./bus") = 0 [pid 6119] ioctl(4, LOOP_CLR_FD) = 0 [pid 6119] close(4) = 0 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] chdir("./file0") = 0 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6119] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6109] <... futex resumed>) = 0 [pid 6119] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... openat resumed>) = 6 [ 143.122071][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 143.154541][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 143.157332][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6109] <... futex resumed>) = 0 [pid 6119] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6119] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6109] <... futex resumed>) = 0 [pid 6119] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... write resumed>) = 262144 [pid 6113] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6109] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6119] <... futex resumed>) = 1 [pid 6119] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6117] <... write resumed>) = 1048576 [pid 6117] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6112] exit_group(0) = ? [pid 6117] +++ exited with 0 +++ [pid 6112] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6112, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, [pid 6111] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./195/binderfs") = 0 [pid 306] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6120] <... write resumed>) = 1048576 [pid 6120] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6120] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6113] exit_group(0) = ? [pid 6120] <... futex resumed>) = ? [pid 6120] +++ exited with 0 +++ [pid 6113] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6113, si_uid=0, si_status=0, si_utime=1, si_stime=4} --- [pid 305] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./190/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./190/binderfs") = 0 [ 143.203832][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 143.234290][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6119] <... write resumed>) = 1048576 [pid 6119] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6109] <... futex resumed>) = 0 [pid 6109] exit_group(0) = ? [pid 6119] <... futex resumed>) = ? [pid 6119] +++ exited with 0 +++ [pid 6109] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6109, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./193/binderfs") = 0 [pid 310] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6116] <... write resumed>) = 1048576 [ 143.251245][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 143.279592][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6116] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6111] exit_group(0) = ? [pid 6116] <... futex resumed>) = ? [pid 6116] +++ exited with 0 +++ [pid 6111] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6111, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./192/binderfs") = 0 [pid 308] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./186/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./186/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 143.290502][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 143.293859][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 143.319822][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "./186/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./186/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./186") = 0 [pid 309] mkdir("./187", 0777) = 0 [ 143.347252][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 143.360679][ T381] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6136 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./191/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./191/bus" [pid 305] <... umount2 resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... rmdir resumed>) = 0 [pid 310] lstat("./193/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6136 attached [pid 310] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] lstat("./195/bus", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./190/bus", [pid 310] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... openat resumed>) = 4 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] fstat(4, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] getdents64(4, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... openat resumed>) = 4 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] fstat(4, [pid 310] getdents64(4, [pid 305] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4 [pid 306] getdents64(4, [pid 305] <... openat resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] rmdir("./193/bus" [pid 305] fstat(4, [pid 306] getdents64(4, [pid 307] close(3) = 0 [pid 307] rmdir("./191" [pid 310] <... rmdir resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 306] close(4 [pid 305] getdents64(4, [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... close resumed>) = 0 [pid 310] close(3 [pid 306] rmdir("./195/bus" [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] <... close resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./192", 0777 [pid 310] rmdir("./193" [pid 308] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... mkdir resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] getdents64(4, [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 310] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] mkdir("./194", 0777 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(4 [pid 6136] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6136] chdir("./187" [pid 310] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 305] <... close resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 306] <... close resumed>) = 0 [pid 305] rmdir("./190/bus" [pid 306] rmdir("./195" [pid 6136] <... chdir resumed>) = 0 [pid 6136] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6136] setpgid(0, 0) = 0 [pid 6136] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] <... rmdir resumed>) = 0 [pid 6136] <... openat resumed>) = 3 [pid 306] <... rmdir resumed>) = 0 [pid 305] getdents64(3, [pid 306] mkdir("./196", 0777 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6136] write(3, "1000", 4) = 4 [pid 6136] close(3) = 0 [pid 6136] symlink("/dev/binderfs", "./binderfs") = 0 [pid 306] <... mkdir resumed>) = 0 [pid 305] close(3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... close resumed>) = 0 [pid 6136] <... futex resumed>) = 0 [pid 305] rmdir("./190" [pid 6136] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6136] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 6136] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] mkdir("./191", 0777 [pid 6136] <... clone resumed>, parent_tid=[6137], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6137 [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6137 attached [pid 6137] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 6137] memfd_create("syzkaller", 0) = 3 [pid 6137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 308] lstat("./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./192/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./192") = 0 [pid 308] mkdir("./193", 0777 [pid 6137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6137] <... write resumed>) = 1048576 [pid 6137] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6137] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 306] close(3 [pid 305] close(3 [pid 6137] <... openat resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6138 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6139 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6140 [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6141 [pid 6137] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6140 attached [pid 6140] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 6138 attached ./strace-static-x86_64: Process 6139 attached ./strace-static-x86_64: Process 6141 attached [pid 6138] set_robust_list(0x55555748e5e0, 24 [pid 6139] set_robust_list(0x55555748e5e0, 24 [pid 6138] <... set_robust_list resumed>) = 0 [pid 6141] set_robust_list(0x55555748e5e0, 24 [pid 6139] <... set_robust_list resumed>) = 0 [pid 6138] chdir("./194" [pid 6141] <... set_robust_list resumed>) = 0 [pid 6139] chdir("./196" [pid 6138] <... chdir resumed>) = 0 [pid 6141] chdir("./193" [pid 6139] <... chdir resumed>) = 0 [pid 6141] <... chdir resumed>) = 0 [pid 6138] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6140] <... set_robust_list resumed>) = 0 [pid 6141] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6140] chdir("./191" [pid 6139] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6138] <... prctl resumed>) = 0 [pid 6139] <... prctl resumed>) = 0 [pid 6139] setpgid(0, 0 [pid 6138] setpgid(0, 0 [pid 6141] <... prctl resumed>) = 0 [pid 6140] <... chdir resumed>) = 0 [pid 6139] <... setpgid resumed>) = 0 [pid 6138] <... setpgid resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 6139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6138] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6141] setpgid(0, 0 [pid 6140] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6139] <... openat resumed>) = 3 [pid 6138] <... openat resumed>) = 3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6143 [pid 6137] <... ioctl resumed>) = 0 [pid 6137] close(3) = 0 [pid 6137] mkdir("./bus", 0777 [pid 6139] write(3, "1000", 4 [pid 6138] write(3, "1000", 4) = 4 [pid 6139] <... write resumed>) = 4 [pid 6138] close(3 [pid 6141] <... setpgid resumed>) = 0 [pid 6140] <... prctl resumed>) = 0 [pid 6139] close(3 [pid 6138] <... close resumed>) = 0 [pid 6141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6139] <... close resumed>) = 0 [pid 6140] setpgid(0, 0 [pid 6138] symlink("/dev/binderfs", "./binderfs" [pid 6139] symlink("/dev/binderfs", "./binderfs" [pid 6138] <... symlink resumed>) = 0 [pid 6137] <... mkdir resumed>) = 0 [pid 6139] <... symlink resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6140] <... setpgid resumed>) = 0 [pid 6141] <... openat resumed>) = 3 [pid 6141] write(3, "1000", 4 [pid 6140] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6141] <... write resumed>) = 4 [pid 6139] <... futex resumed>) = 0 [pid 6138] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] <... openat resumed>) = 3 [pid 6141] close(3) = 0 [pid 6139] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] write(3, "1000", 4 [pid 6138] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6141] symlink("/dev/binderfs", "./binderfs" [pid 6140] <... write resumed>) = 4 [pid 6139] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6138] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6139] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6141] <... symlink resumed>) = 0 [pid 6140] close(3 [pid 6139] <... mprotect resumed>) = 0 [pid 6138] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6143 attached [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... close resumed>) = 0 [pid 6139] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6138] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6141] <... futex resumed>) = 0 [pid 6143] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6141] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6140] symlink("/dev/binderfs", "./binderfs" [pid 6139] <... clone resumed>, parent_tid=[6144], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6144 [pid 6143] chdir("./192") = 0 [pid 6143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6143] setpgid(0, 0) = 0 [pid 6143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6143] write(3, "1000", 4) = 4 [pid 6143] close(3) = 0 [pid 6143] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... clone resumed>, parent_tid=[6145], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6145 [pid 6143] <... futex resumed>) = 0 [pid 6141] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6140] <... symlink resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6141] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6138] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6144 attached [pid 6143] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6141] <... mprotect resumed>) = 0 [pid 6140] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6145 attached [pid 6144] set_robust_list(0x7f19bd6049e0, 24 [pid 6143] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6141] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6140] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6145] set_robust_list(0x7f19bd6049e0, 24 [pid 6144] <... set_robust_list resumed>) = 0 [pid 6143] <... mprotect resumed>) = 0 [pid 6140] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6140] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6141] <... clone resumed>, parent_tid=[6146], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6146 [pid 6140] <... mprotect resumed>) = 0 [pid 6145] <... set_robust_list resumed>) = 0 [pid 6144] memfd_create("syzkaller", 0 [pid 6143] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6145] memfd_create("syzkaller", 0 [pid 6144] <... memfd_create resumed>) = 3 [pid 6141] <... futex resumed>) = 0 [pid 6145] <... memfd_create resumed>) = 3 [pid 6144] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6143] <... clone resumed>, parent_tid=[6148], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6148 [pid 6145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6144] <... mmap resumed>) = 0x7f19b51e4000 [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... mmap resumed>) = 0x7f19b51e4000 [pid 6143] <... futex resumed>) = 0 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6140] <... clone resumed>, parent_tid=[6147], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6147 [pid 6145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6146 attached [pid 6146] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6146] memfd_create("syzkaller", 0) = 3 [pid 6146] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6148 attached ./strace-static-x86_64: Process 6147 attached [pid 6148] set_robust_list(0x7f19bd6049e0, 24 [pid 6147] set_robust_list(0x7f19bd6049e0, 24 [pid 6146] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6148] <... set_robust_list resumed>) = 0 [pid 6147] <... set_robust_list resumed>) = 0 [pid 6148] memfd_create("syzkaller", 0 [pid 6147] memfd_create("syzkaller", 0 [pid 6148] <... memfd_create resumed>) = 3 [pid 6147] <... memfd_create resumed>) = 3 [pid 6148] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6148] <... mmap resumed>) = 0x7f19b51e4000 [pid 6147] <... mmap resumed>) = 0x7f19b51e4000 [pid 6144] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6148] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6146] <... write resumed>) = 1048576 [pid 6145] <... write resumed>) = 1048576 [pid 6144] munmap(0x7f19b51e4000, 1048576 [pid 6148] <... write resumed>) = 1048576 [pid 6137] <... mount resumed>) = 0 [pid 6137] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6137] chdir("./bus") = 0 [pid 6137] ioctl(4, LOOP_CLR_FD) = 0 [pid 6137] close(4) = 0 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6136] <... futex resumed>) = 0 [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... futex resumed>) = 1 [pid 6137] chdir("./file0") = 0 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6137] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... write resumed>) = 1048576 [pid 6147] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6147] ioctl(4, LOOP_SET_FD, 3 [pid 6146] munmap(0x7f19b51e4000, 1048576 [pid 6148] munmap(0x7f19b51e4000, 1048576 [pid 6145] munmap(0x7f19b51e4000, 1048576 [pid 6144] <... munmap resumed>) = 0 [pid 6137] <... open resumed>) = 4 [pid 6146] <... munmap resumed>) = 0 [pid 6144] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6144] <... openat resumed>) = 4 [pid 6137] <... futex resumed>) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6148] <... munmap resumed>) = 0 [pid 6147] <... ioctl resumed>) = 0 [pid 6146] <... openat resumed>) = 4 [pid 6145] <... munmap resumed>) = 0 [pid 6144] ioctl(4, LOOP_SET_FD, 3 [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6147] close(3 [pid 6146] ioctl(4, LOOP_SET_FD, 3 [pid 6145] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 6148] <... openat resumed>) = 4 [pid 6147] <... close resumed>) = 0 [pid 6146] <... ioctl resumed>) = 0 [pid 6145] <... openat resumed>) = 4 [pid 6144] <... ioctl resumed>) = 0 [pid 6137] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] ioctl(4, LOOP_SET_FD, 3 [pid 6146] close(3 [pid 6144] close(3 [pid 6137] <... mount resumed>) = 0 [pid 6147] mkdir("./bus", 0777 [pid 6146] <... close resumed>) = 0 [pid 6144] <... close resumed>) = 0 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... ioctl resumed>) = 0 [pid 6146] mkdir("./bus", 0777 [pid 6144] mkdir("./bus", 0777 [pid 6137] <... futex resumed>) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6148] close(3 [pid 6147] <... mkdir resumed>) = 0 [pid 6146] <... mkdir resumed>) = 0 [pid 6145] ioctl(4, LOOP_SET_FD, 3 [pid 6144] <... mkdir resumed>) = 0 [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... close resumed>) = 0 [pid 6147] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6146] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6144] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 6148] mkdir("./bus", 0777 [pid 6145] <... ioctl resumed>) = 0 [pid 6137] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... mkdir resumed>) = 0 [pid 6145] close(3 [pid 6137] <... open resumed>) = 5 [pid 6148] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6145] <... close resumed>) = 0 [pid 6145] mkdir("./bus", 0777 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... mkdir resumed>) = 0 [pid 6145] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6137] <... futex resumed>) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 6137] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... openat resumed>) = 6 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 6137] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [ 143.655849][ T6137] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/187/bus supports timestamps until 2038 (0x7fffffff) [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... mount resumed>) = 0 [pid 6147] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6147] chdir("./bus") = 0 [pid 6147] ioctl(4, LOOP_CLR_FD) = 0 [pid 6147] close(4) = 0 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] chdir("./file0") = 0 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6140] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... futex resumed>) = 1 [pid 6147] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6137] <... write resumed>) = 262144 [ 143.709661][ T6147] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/191/bus supports timestamps until 2038 (0x7fffffff) [ 143.709758][ T6144] ext4 filesystem being mounted at /root/syzkaller.URAKkl/196/bus supports timestamps until 2038 (0x7fffffff) [ 143.734699][ T6148] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... mount resumed>) = 0 [pid 6147] <... write resumed>) = 262144 [pid 6144] <... mount resumed>) = 0 [pid 6137] <... futex resumed>) = 0 [pid 6136] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6148] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6144] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... openat resumed>) = 3 [pid 6144] <... openat resumed>) = 3 [pid 6137] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6136] <... futex resumed>) = 0 [pid 6148] chdir("./bus" [pid 6144] chdir("./bus" [pid 6137] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6136] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... chdir resumed>) = 0 [pid 6144] <... chdir resumed>) = 0 [pid 6148] ioctl(4, LOOP_CLR_FD [pid 6144] ioctl(4, LOOP_CLR_FD [pid 6148] <... ioctl resumed>) = 0 [pid 6144] <... ioctl resumed>) = 0 [pid 6148] close(4 [pid 6144] close(4 [pid 6148] <... close resumed>) = 0 [pid 6144] <... close resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6144] <... futex resumed>) = 1 [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6144] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] <... futex resumed>) = 0 [pid 6148] chdir("./file0" [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... chdir resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6148] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... open resumed>) = 4 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6148] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... mount resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6148] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... open resumed>) = 5 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6148] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... openat resumed>) = 6 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6147] <... futex resumed>) = 1 [pid 6143] <... futex resumed>) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6147] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6148] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6143] <... futex resumed>) = 0 [pid 6148] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... write resumed>) = 262144 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6143] <... futex resumed>) = 0 [pid 6143] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6143] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6148] <... futex resumed>) = 1 [pid 6148] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6140] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 0 [pid 6140] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = 0 [pid 6140] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 1 [pid 6147] <... futex resumed>) = 0 [pid 6144] chdir("./file0" [pid 6140] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6144] <... chdir resumed>) = 0 [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6144] <... futex resumed>) = 0 [pid 6144] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6144] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... open resumed>) = 4 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6144] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6139] <... futex resumed>) = 0 [pid 6144] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... mount resumed>) = 0 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6144] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = 1 [pid 6144] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... open resumed>) = 5 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6139] <... futex resumed>) = 0 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6144] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6139] <... futex resumed>) = 0 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... futex resumed>) = 0 [pid 6139] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6144] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6137] <... write resumed>) = 1048576 [pid 6137] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6136] <... futex resumed>) = 0 [pid 6137] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6136] exit_group(0 [pid 6137] <... futex resumed>) = ? [pid 6136] <... exit_group resumed>) = ? [pid 6137] +++ exited with 0 +++ [pid 6136] +++ exited with 0 +++ [ 143.755969][ T6146] ext4 filesystem being mounted at /root/syzkaller.69675s/193/bus supports timestamps until 2038 (0x7fffffff) [ 143.768921][ T6145] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/194/bus supports timestamps until 2038 (0x7fffffff) [pid 6146] <... mount resumed>) = 0 [pid 6145] <... mount resumed>) = 0 [pid 6144] <... write resumed>) = 262144 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6136, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 309] umount2("./187", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6146] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6145] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./187", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6146] <... openat resumed>) = 3 [pid 6145] <... openat resumed>) = 3 [pid 6144] <... futex resumed>) = 1 [pid 6139] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 6139] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] fstat(3, [pid 6139] <... futex resumed>) = 0 [pid 6144] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6146] chdir("./bus" [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6145] chdir("./bus" [pid 6139] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(3, [pid 6143] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./187/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./187/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6146] <... chdir resumed>) = 0 [pid 6145] <... chdir resumed>) = 0 [pid 309] unlink("./187/binderfs") = 0 [pid 6146] ioctl(4, LOOP_CLR_FD [pid 6145] ioctl(4, LOOP_CLR_FD [pid 309] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6148] <... write resumed>) = 1048576 [pid 6148] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6148] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6140] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6146] <... ioctl resumed>) = 0 [pid 6145] <... ioctl resumed>) = 0 [pid 6143] exit_group(0 [pid 6148] <... futex resumed>) = ? [pid 6143] <... exit_group resumed>) = ? [pid 6148] +++ exited with 0 +++ [pid 6146] close(4 [pid 6145] close(4 [pid 6143] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6143, si_uid=0, si_status=0, si_utime=1, si_stime=5} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] <... close resumed>) = 0 [pid 6145] <... close resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] lstat("./192/binderfs", [pid 6141] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6146] chdir("./file0" [pid 6145] <... futex resumed>) = 1 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 307] unlink("./192/binderfs" [pid 6141] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... unlink resumed>) = 0 [pid 6146] <... chdir resumed>) = 0 [pid 6145] chdir("./file0" [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... futex resumed>) = 0 [pid 307] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6147] <... write resumed>) = 1048576 [pid 6147] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6147] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... chdir resumed>) = 0 [pid 6140] exit_group(0 [pid 6139] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6146] <... futex resumed>) = 1 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6140] <... exit_group resumed>) = ? [pid 6147] <... futex resumed>) = ? [pid 6147] +++ exited with 0 +++ [pid 6145] <... futex resumed>) = 1 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6146] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6145] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6141] <... futex resumed>) = 0 [pid 6140] +++ exited with 0 +++ [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6140, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... restart_syscall resumed>) = 0 [pid 305] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 6146] <... open resumed>) = 4 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6145] <... open resumed>) = 4 [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./191/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] unlink("./191/binderfs" [pid 6146] <... futex resumed>) = 1 [pid 6141] <... futex resumed>) = 0 [pid 6146] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6145] <... futex resumed>) = 1 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6141] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... unlink resumed>) = 0 [pid 6146] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 305] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] <... mount resumed>) = 0 [pid 6145] <... mount resumed>) = 0 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... futex resumed>) = 0 [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] <... futex resumed>) = 0 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6145] <... futex resumed>) = 0 [pid 6141] <... futex resumed>) = 0 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6146] <... open resumed>) = 5 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 6145] <... open resumed>) = 5 [pid 6141] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6145] <... futex resumed>) = 0 [pid 6141] <... futex resumed>) = 0 [pid 6146] <... openat resumed>) = 6 [pid 6145] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... openat resumed>) = 6 [pid 6138] <... futex resumed>) = 0 [pid 6146] <... futex resumed>) = 1 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [ 143.832948][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 143.854238][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 143.868316][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6146] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6145] <... futex resumed>) = 0 [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6141] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] <... futex resumed>) = 0 [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6144] <... write resumed>) = 1048576 [pid 6144] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6144] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6146] <... write resumed>) = 262144 [pid 6145] <... write resumed>) = 262144 [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] exit_group(0 [pid 6146] <... futex resumed>) = 1 [pid 6145] <... futex resumed>) = 1 [pid 6144] <... futex resumed>) = ? [pid 6141] <... futex resumed>) = 0 [pid 6139] <... exit_group resumed>) = ? [pid 6138] <... futex resumed>) = 0 [pid 6146] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6145] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6144] +++ exited with 0 +++ [pid 6141] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6139] +++ exited with 0 +++ [pid 6138] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6141] <... futex resumed>) = 0 [pid 6138] <... futex resumed>) = 0 [pid 6141] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6138] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6139, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./196/binderfs") = 0 [ 143.898639][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 143.903775][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 143.919255][ T172] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6146] <... write resumed>) = 1048576 [pid 6146] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6145] <... write resumed>) = 1048576 [pid 6146] <... futex resumed>) = 1 [pid 6145] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6146] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] <... futex resumed>) = 0 [pid 6145] <... futex resumed>) = 1 [pid 6141] exit_group(0 [pid 6138] <... futex resumed>) = 0 [pid 6145] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6141] <... exit_group resumed>) = ? [pid 6146] <... futex resumed>) = ? [pid 6138] exit_group(0 [pid 6146] +++ exited with 0 +++ [pid 6145] <... futex resumed>) = ? [pid 6138] <... exit_group resumed>) = ? [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./187/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./187/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./187/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./187/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./187") = 0 [pid 309] mkdir("./188", 0777) = 0 [ 143.973154][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 143.987531][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6145] +++ exited with 0 +++ [pid 6141] +++ exited with 0 +++ [pid 6138] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6138, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6141, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 310] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] <... openat resumed>) = 3 [pid 308] fstat(3, [pid 310] fstat(3, [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, [pid 310] getdents64(3, [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./193/binderfs", [pid 310] lstat("./194/binderfs", [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./193/binderfs" [pid 310] unlink("./194/binderfs" [pid 308] <... unlink resumed>) = 0 [pid 310] <... unlink resumed>) = 0 [pid 308] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 144.090739][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.090755][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 144.091385][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6166 [pid 306] <... umount2 resumed>) = 0 [pid 307] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] lstat("./192/bus", [pid 306] lstat("./196/bus", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] lstat("./191/bus", [pid 310] lstat("./194/bus", [pid 307] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 4 [pid 306] <... openat resumed>) = 4 [pid 307] fstat(4, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, [pid 305] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 4 [pid 307] getdents64(4, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 310] getdents64(4, [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] close(4 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, [pid 307] <... close resumed>) = 0 [pid 306] close(4 [pid 305] getdents64(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] rmdir("./192/bus" [pid 306] <... close resumed>) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] rmdir("./196/bus" [pid 305] close(4./strace-static-x86_64: Process 6166 attached [pid 6166] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6166] chdir("./188") = 0 [pid 6166] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6166] setpgid(0, 0) = 0 [pid 6166] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6166] write(3, "1000", 4) = 4 [pid 6166] close(3) = 0 [pid 6166] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6166] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6166] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6166] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] rmdir("./194/bus" [pid 305] <... close resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] rmdir("./191/bus" [pid 6166] <... clone resumed>, parent_tid=[6167], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6167 [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] <... rmdir resumed>) = 0 [pid 310] getdents64(3, [pid 307] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] getdents64(3, [pid 305] getdents64(3, ./strace-static-x86_64: Process 6167 attached [pid 6167] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6167] memfd_create("syzkaller", 0) = 3 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3 [pid 307] close(3 [pid 310] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 6167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3 [pid 310] rmdir("./194" [pid 307] rmdir("./192" [pid 306] close(3 [pid 305] <... close resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 310] mkdir("./195", 0777 [pid 306] rmdir("./196" [pid 305] rmdir("./191" [pid 307] mkdir("./193", 0777 [pid 6167] <... mmap resumed>) = 0x7f19b51e4000 [pid 305] <... rmdir resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] mkdir("./192", 0777 [pid 310] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 306] mkdir("./197", 0777 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [ 144.114000][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6167] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6167] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 308] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./193/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./193/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./193") = 0 [pid 308] mkdir("./194", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] <... openat resumed>) = 3 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 307] close(3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 307] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6168 ./strace-static-x86_64: Process 6168 attached [pid 6168] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6168] chdir("./192") = 0 [pid 6168] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6168] setpgid(0, 0) = 0 [pid 6168] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6168] write(3, "1000", 4) = 4 [pid 6168] close(3) = 0 [pid 6168] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6168] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6168] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6169], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6169 [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6169 attached [pid 6169] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6169] memfd_create("syzkaller", 0) = 3 [pid 6169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6167] <... openat resumed>) = 4 [pid 310] <... openat resumed>) = 3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6170 [pid 6169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6171 [pid 306] close(3) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6172 ./strace-static-x86_64: Process 6170 attached [pid 6170] set_robust_list(0x55555748e5e0, 24 [pid 6167] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... openat resumed>) = 3 [pid 6170] <... set_robust_list resumed>) = 0 [pid 6170] chdir("./195" [pid 308] ioctl(3, LOOP_CLR_FD [pid 6170] <... chdir resumed>) = 0 [pid 6170] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6170] setpgid(0, 0) = 0 [pid 6167] <... ioctl resumed>) = 0 [pid 6170] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6170] write(3, "1000", 4) = 4 [pid 6170] close(3) = 0 [pid 6170] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] close(3) = 0 [pid 6167] mkdir("./bus", 0777 [pid 6170] <... futex resumed>) = 0 [pid 6170] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6170] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6170] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6167] <... mkdir resumed>) = 0 [pid 6167] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6170] <... clone resumed>, parent_tid=[6174], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6174 [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6171 attached [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 6171] set_robust_list(0x55555748e5e0, 24 [pid 308] <... close resumed>) = 0 [pid 6171] <... set_robust_list resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6171] chdir("./193" [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6175 [pid 6171] <... chdir resumed>) = 0 [pid 6171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6171] setpgid(0, 0) = 0 [pid 6171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6175 attached [pid 6175] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6175] chdir("./194"./strace-static-x86_64: Process 6172 attached ) = 0 [pid 6175] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6172] set_robust_list(0x55555748e5e0, 24 [pid 6175] <... prctl resumed>) = 0 [pid 6171] <... openat resumed>) = 3 [pid 6175] setpgid(0, 0 [pid 6171] write(3, "1000", 4 [pid 6175] <... setpgid resumed>) = 0 [pid 6171] <... write resumed>) = 4 [pid 6175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6171] close(3 [pid 6172] <... set_robust_list resumed>) = 0 [pid 6171] <... close resumed>) = 0 [pid 6172] chdir("./197" [pid 6171] symlink("/dev/binderfs", "./binderfs" [pid 6172] <... chdir resumed>) = 0 [pid 6171] <... symlink resumed>) = 0 [pid 6172] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6172] setpgid(0, 0) = 0 [pid 6175] <... openat resumed>) = 3 [pid 6172] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6175] write(3, "1000", 4) = 4 [pid 6172] <... openat resumed>) = 3 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] close(3 [pid 6172] write(3, "1000", 4 [pid 6171] <... futex resumed>) = 0 [pid 6175] <... close resumed>) = 0 [pid 6172] <... write resumed>) = 4 [pid 6171] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6175] symlink("/dev/binderfs", "./binderfs" [pid 6171] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6175] <... symlink resumed>) = 0 [pid 6171] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] <... mprotect resumed>) = 0 [pid 6169] <... write resumed>) = 1048576 [pid 6175] <... futex resumed>) = 0 [pid 6171] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6175] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6171] <... clone resumed>, parent_tid=[6176], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6176 [pid 6175] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] munmap(0x7f19b51e4000, 1048576 [pid 6175] <... mprotect resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6169] <... munmap resumed>) = 0 [pid 6175] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6169] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6175] <... clone resumed>, parent_tid=[6177], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6177 [pid 6172] close(3 [pid 6169] <... openat resumed>) = 4 [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... close resumed>) = 0 [pid 6169] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6174 attached [pid 6175] <... futex resumed>) = 0 [pid 6172] symlink("/dev/binderfs", "./binderfs" [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6174] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6174] memfd_create("syzkaller", 0) = 3 [pid 6172] <... symlink resumed>) = 0 [pid 6174] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6172] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6172] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 6176 attached [pid 6176] set_robust_list(0x7f19bd6049e0, 24 [pid 6172] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6176] <... set_robust_list resumed>) = 0 [pid 6176] memfd_create("syzkaller", 0) = 3 [pid 6172] <... clone resumed>, parent_tid=[6179], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6179 [pid 6176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] <... mmap resumed>) = 0x7f19b51e4000 [pid 6172] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6177 attached [pid 6176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6174] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6169] <... ioctl resumed>) = 0 [pid 6169] close(3) = 0 [pid 6169] mkdir("./bus", 0777) = 0 [pid 6169] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6179 attached [pid 6179] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6179] memfd_create("syzkaller", 0) = 3 [pid 6179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6177] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6177] memfd_create("syzkaller", 0) = 3 [pid 6177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6174] <... write resumed>) = 1048576 [pid 6174] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6174] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6174] ioctl(4, LOOP_SET_FD, 3 [pid 6176] <... write resumed>) = 1048576 [pid 6179] <... write resumed>) = 1048576 [pid 6177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6176] munmap(0x7f19b51e4000, 1048576 [pid 6167] <... mount resumed>) = 0 [pid 6179] munmap(0x7f19b51e4000, 1048576 [pid 6177] <... write resumed>) = 1048576 [pid 6174] <... ioctl resumed>) = 0 [pid 6169] <... mount resumed>) = 0 [pid 6174] close(3) = 0 [pid 6174] mkdir("./bus", 0777) = 0 [pid 6174] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6179] <... munmap resumed>) = 0 [pid 6177] munmap(0x7f19b51e4000, 1048576 [pid 6176] <... munmap resumed>) = 0 [pid 6169] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6167] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6179] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6177] <... munmap resumed>) = 0 [pid 6176] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6169] <... openat resumed>) = 3 [pid 6167] <... openat resumed>) = 3 [pid 6177] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6176] <... openat resumed>) = 4 [pid 6169] chdir("./bus" [pid 6167] chdir("./bus" [pid 6177] <... openat resumed>) = 4 [pid 6176] ioctl(4, LOOP_SET_FD, 3 [pid 6169] <... chdir resumed>) = 0 [pid 6167] <... chdir resumed>) = 0 [pid 6177] ioctl(4, LOOP_SET_FD, 3 [pid 6169] ioctl(4, LOOP_CLR_FD [pid 6167] ioctl(4, LOOP_CLR_FD [pid 6176] <... ioctl resumed>) = 0 [pid 6179] <... openat resumed>) = 4 [pid 6177] <... ioctl resumed>) = 0 [pid 6167] <... ioctl resumed>) = 0 [pid 6169] <... ioctl resumed>) = 0 [pid 6179] ioctl(4, LOOP_SET_FD, 3 [pid 6177] close(3 [pid 6169] close(4 [pid 6167] close(4 [pid 6179] <... ioctl resumed>) = 0 [pid 6177] <... close resumed>) = 0 [pid 6176] close(3 [pid 6169] <... close resumed>) = 0 [pid 6167] <... close resumed>) = 0 [pid 6179] close(3 [pid 6177] mkdir("./bus", 0777 [pid 6176] <... close resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... close resumed>) = 0 [pid 6177] <... mkdir resumed>) = 0 [pid 6176] mkdir("./bus", 0777 [pid 6167] <... futex resumed>) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6179] mkdir("./bus", 0777 [pid 6177] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6176] <... mkdir resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... mkdir resumed>) = 0 [pid 6176] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [ 144.279036][ T6167] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/188/bus supports timestamps until 2038 (0x7fffffff) [ 144.305341][ T6169] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6179] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6167] chdir("./file0" [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... chdir resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... open resumed>) = 4 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... mount resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... open resumed>) = 5 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... openat resumed>) = 6 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6166] <... futex resumed>) = 0 [pid 6167] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... write resumed>) = 262144 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6167] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6166] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... mount resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6166] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... openat resumed>) = 3 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6174] chdir("./bus" [pid 6169] chdir("./file0" [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... chdir resumed>) = 0 [pid 6169] <... chdir resumed>) = 0 [pid 6174] ioctl(4, LOOP_CLR_FD [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... ioctl resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6174] close(4 [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... close resumed>) = 0 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6166] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... open resumed>) = 4 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6174] chdir("./file0" [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... chdir resumed>) = 0 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... mount resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6174] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [ 144.350975][ T6174] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/195/bus supports timestamps until 2038 (0x7fffffff) [ 144.364790][ T6179] ext4 filesystem being mounted at /root/syzkaller.URAKkl/197/bus supports timestamps until 2038 (0x7fffffff) [ 144.388558][ T6176] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/193/bus supports timestamps until 2038 (0x7fffffff) [pid 6169] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... mount resumed>) = 0 [pid 6174] <... open resumed>) = 4 [pid 6169] <... open resumed>) = 5 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6179] <... openat resumed>) = 3 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] chdir("./bus" [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6179] <... chdir resumed>) = 0 [pid 6177] <... mount resumed>) = 0 [pid 6176] <... mount resumed>) = 0 [pid 6174] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6167] <... write resumed>) = 1048576 [pid 6179] ioctl(4, LOOP_CLR_FD [pid 6177] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6176] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6174] <... mount resumed>) = 0 [pid 6169] <... openat resumed>) = 6 [pid 6167] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... ioctl resumed>) = 0 [pid 6176] <... openat resumed>) = 3 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = 1 [pid 6166] <... futex resumed>) = 0 [pid 6177] <... openat resumed>) = 3 [pid 6179] close(4 [pid 6176] chdir("./bus" [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6177] chdir("./bus" [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6167] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6166] exit_group(0 [pid 6179] <... close resumed>) = 0 [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 6169] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... chdir resumed>) = 0 [pid 6176] <... chdir resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6167] <... futex resumed>) = ? [pid 6166] <... exit_group resumed>) = ? [pid 6179] <... futex resumed>) = 1 [pid 6177] ioctl(4, LOOP_CLR_FD [pid 6176] ioctl(4, LOOP_CLR_FD [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] <... futex resumed>) = 0 [pid 6170] <... futex resumed>) = 0 [pid 6167] +++ exited with 0 +++ [pid 6166] +++ exited with 0 +++ [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] <... ioctl resumed>) = 0 [pid 6176] <... ioctl resumed>) = 0 [pid 6174] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6166, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] close(4 [pid 6176] close(4 [pid 6174] <... open resumed>) = 5 [pid 6172] <... futex resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 6179] chdir("./file0" [pid 6177] <... close resumed>) = 0 [pid 6176] <... close resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... restart_syscall resumed>) = 0 [pid 6179] <... chdir resumed>) = 0 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] <... futex resumed>) = 0 [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 1 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] <... futex resumed>) = 0 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 309] umount2("./188", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6174] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] <... futex resumed>) = 0 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] chdir("./file0" [pid 6176] chdir("./file0" [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... openat resumed>) = 6 [pid 6172] <... futex resumed>) = 0 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "./188", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6179] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6177] <... chdir resumed>) = 0 [pid 6176] <... chdir resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... openat resumed>) = 3 [pid 6179] <... open resumed>) = 4 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 1 [pid 6170] <... futex resumed>) = 0 [pid 309] fstat(3, [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] <... futex resumed>) = 0 [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] <... futex resumed>) = 0 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... write resumed>) = 262144 [pid 309] getdents64(3, [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6174] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6174] <... write resumed>) = 262144 [pid 6172] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./188/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6177] <... open resumed>) = 4 [pid 6176] <... open resumed>) = 4 [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6179] <... mount resumed>) = 0 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 309] lstat("./188/binderfs", [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 0 [pid 6175] <... futex resumed>) = 0 [pid 6174] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6168] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] <... futex resumed>) = 0 [pid 6170] <... futex resumed>) = 0 [pid 309] unlink("./188/binderfs" [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... mount resumed>) = 0 [pid 6175] <... futex resumed>) = 0 [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] <... futex resumed>) = 0 [pid 6170] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6168] <... futex resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6172] <... futex resumed>) = 0 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6169] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6168] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6179] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6177] <... mount resumed>) = 0 [pid 6176] <... futex resumed>) = 0 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6171] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6179] <... open resumed>) = 5 [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6172] <... futex resumed>) = 0 [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6172] <... futex resumed>) = 0 [pid 6179] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... openat resumed>) = 6 [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... futex resumed>) = 1 [pid 6177] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = 0 [pid 6175] <... futex resumed>) = 0 [pid 6172] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = 1 [pid 6179] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6176] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6179] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6176] <... open resumed>) = 5 [pid 6175] <... futex resumed>) = 0 [pid 6172] <... futex resumed>) = 0 [ 144.396561][ T6177] ext4 filesystem being mounted at /root/syzkaller.69675s/194/bus supports timestamps until 2038 (0x7fffffff) [pid 6179] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6177] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6177] <... open resumed>) = 5 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6177] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6177] <... openat resumed>) = 6 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6175] <... futex resumed>) = 0 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6177] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6177] <... write resumed>) = 262144 [pid 6176] <... futex resumed>) = 1 [pid 6174] <... write resumed>) = 1048576 [pid 6171] <... futex resumed>) = 0 [pid 6169] <... write resumed>) = 1048576 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6174] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6169] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... write resumed>) = 262144 [pid 6177] <... futex resumed>) = 1 [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6175] <... futex resumed>) = 0 [pid 6174] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 6170] <... futex resumed>) = 0 [pid 6169] <... futex resumed>) = 1 [pid 6168] <... futex resumed>) = 0 [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6177] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6176] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6175] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6168] exit_group(0 [pid 6175] <... futex resumed>) = 0 [pid 6168] <... exit_group resumed>) = ? [pid 6175] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] exit_group(0 [pid 6179] <... futex resumed>) = 1 [pid 6176] <... openat resumed>) = 6 [pid 6172] <... futex resumed>) = 0 [pid 6179] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6174] <... futex resumed>) = ? [pid 6172] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6170] <... exit_group resumed>) = ? [pid 6169] +++ exited with 0 +++ [pid 6168] +++ exited with 0 +++ [pid 6174] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6168, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./192/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./192/binderfs") = 0 [pid 305] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] <... futex resumed>) = 1 [pid 6172] <... futex resumed>) = 0 [pid 6171] <... futex resumed>) = 0 [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6176] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6172] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6170] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6170, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./195/binderfs") = 0 [pid 6176] <... write resumed>) = 262144 [pid 310] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 144.467623][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.487991][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6179] <... write resumed>) = 1048576 [pid 6176] <... futex resumed>) = 1 [pid 6175] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6171] <... futex resumed>) = 0 [pid 6177] <... write resumed>) = 1048576 [pid 6177] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6177] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6179] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] exit_group(0 [pid 6177] <... futex resumed>) = ? [pid 6175] <... exit_group resumed>) = ? [pid 6177] +++ exited with 0 +++ [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6175] +++ exited with 0 +++ [pid 6176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6171] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 6179] <... futex resumed>) = 1 [pid 6172] <... futex resumed>) = 0 [pid 6172] exit_group(0 [pid 6176] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6171] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6175, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6172] <... exit_group resumed>) = ? [pid 6179] +++ exited with 0 +++ [pid 6172] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] restart_syscall(<... resuming interrupted clone ...> [pid 309] lstat("./188/bus", [pid 308] <... restart_syscall resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6172, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./188/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./188/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 144.526898][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 144.527831][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.551175][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 4 [pid 308] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] fstat(4, [pid 308] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 6176] <... write resumed>) = 1048576 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] fstat(3, [pid 306] fstat(3, [pid 6176] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(4, [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6176] <... futex resumed>) = 1 [pid 6171] <... futex resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6176] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6171] exit_group(0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(3, [pid 306] getdents64(3, [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6176] <... futex resumed>) = ? [pid 6171] <... exit_group resumed>) = ? [pid 309] getdents64(4, [pid 308] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6176] +++ exited with 0 +++ [pid 6171] +++ exited with 0 +++ [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] close(4 [pid 308] lstat("./194/binderfs", [pid 306] lstat("./197/binderfs", [pid 309] <... close resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] rmdir("./188/bus" [pid 308] unlink("./194/binderfs" [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6171, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 306] unlink("./197/binderfs" [pid 308] <... unlink resumed>) = 0 [pid 309] getdents64(3, [pid 308] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... unlink resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3 [pid 307] <... restart_syscall resumed>) = 0 [pid 306] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./188") = 0 [pid 309] mkdir("./189", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 307] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./193/binderfs") = 0 [ 144.586250][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.609166][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.622159][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 310] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./195/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./195/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [ 144.622647][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 144.636831][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 144.663361][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 310] close(3) = 0 [pid 310] rmdir("./195" [pid 305] <... umount2 resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 305] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, [pid 310] <... rmdir resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./192/bus" [pid 310] mkdir("./196", 0777 [pid 305] <... rmdir resumed>) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./192" [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 305] <... rmdir resumed>) = 0 [pid 305] mkdir("./193", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6196 ./strace-static-x86_64: Process 6196 attached [pid 6196] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6196] chdir("./189") = 0 [pid 6196] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6196] setpgid(0, 0) = 0 [pid 6196] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6196] write(3, "1000", 4) = 4 [pid 6196] close(3) = 0 [pid 6196] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6196] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6196] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6197], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6197 [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6197 attached [pid 6197] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 6197] memfd_create("syzkaller", 0) = 3 [pid 6197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 144.676944][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6197] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6197] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./194/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./194") = 0 [pid 308] mkdir("./195", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 6197] <... openat resumed>) = 4 [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 307] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] close(3 [pid 6197] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./197/bus", [pid 305] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] lstat("./193/bus", [pid 306] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6198 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6199 [pid 306] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... openat resumed>) = 4 [pid 306] fstat(4, [pid 307] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./197/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 307] <... openat resumed>) = 4 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./197" [pid 307] fstat(4, [pid 306] <... rmdir resumed>) = 0 [pid 306] mkdir("./198", 0777 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6198 attached ) = -1 ENXIO (No such device or address) [pid 6198] set_robust_list(0x55555748e5e0, 24 [pid 306] close(3 [pid 6198] <... set_robust_list resumed>) = 0 [pid 307] getdents64(4, [pid 306] <... close resumed>) = 0 [pid 6198] chdir("./196" [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6198] <... chdir resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6198] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6200 [pid 6198] <... prctl resumed>) = 0 [pid 6198] setpgid(0, 0) = 0 [pid 6198] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6198] write(3, "1000", 4) = 4 [pid 6198] close(3) = 0 [pid 6198] symlink("/dev/binderfs", "./binderfs") = 0 [pid 307] getdents64(4, [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 6198] <... futex resumed>) = 0 [pid 6198] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6198] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6198] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6201], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6201 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6199 attached [pid 6199] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6199] chdir("./193" [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 307] <... close resumed>) = 0 [pid 6199] <... chdir resumed>) = 0 [pid 307] rmdir("./193/bus" [pid 6199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6199] setpgid(0, 0) = 0 [pid 6199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... close resumed>) = 0 [pid 6199] <... openat resumed>) = 3 [pid 6199] write(3, "1000", 4 [pid 307] <... rmdir resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6199] <... write resumed>) = 4 [pid 6199] close(3) = 0 [pid 6199] symlink("/dev/binderfs", "./binderfs" [pid 307] getdents64(3, [pid 6199] <... symlink resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6199] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6199] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6202], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6202 [pid 307] close(3 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6203 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./193" [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6203 attached [pid 307] <... rmdir resumed>) = 0 [pid 6203] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 6201 attached [pid 6201] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6201] memfd_create("syzkaller", 0 [pid 6203] <... set_robust_list resumed>) = 0 [pid 6203] chdir("./195") = 0 [pid 6203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6203] setpgid(0, 0 [pid 307] mkdir("./194", 0777 [pid 6203] <... setpgid resumed>) = 0 [pid 6201] <... memfd_create resumed>) = 3 [pid 6203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6203] <... openat resumed>) = 3 [pid 307] <... mkdir resumed>) = 0 [pid 6201] <... mmap resumed>) = 0x7f19b51e4000 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6203] write(3, "1000", 4) = 4 [pid 6203] close(3) = 0 [pid 6203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6203] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6203] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6205], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6205 [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6197] <... ioctl resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6197] close(3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 6197] <... close resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 6197] mkdir("./bus", 0777 [pid 307] <... close resumed>) = 0 [pid 6197] <... mkdir resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6200 attached ./strace-static-x86_64: Process 6202 attached [pid 6202] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6202] memfd_create("syzkaller", 0 [pid 6197] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6202] <... memfd_create resumed>) = 3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6206 [pid 6202] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6200] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6200] chdir("./198") = 0 [pid 6200] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6200] setpgid(0, 0) = 0 [pid 6200] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 ./strace-static-x86_64: Process 6205 attached [pid 6200] write(3, "1000", 4 [pid 6205] set_robust_list(0x7f19bd6049e0, 24 [pid 6200] <... write resumed>) = 4 ./strace-static-x86_64: Process 6206 attached [pid 6205] <... set_robust_list resumed>) = 0 [pid 6206] set_robust_list(0x55555748e5e0, 24 [pid 6205] memfd_create("syzkaller", 0 [pid 6200] close(3 [pid 6206] <... set_robust_list resumed>) = 0 [pid 6205] <... memfd_create resumed>) = 3 [pid 6200] <... close resumed>) = 0 [pid 6206] chdir("./194" [pid 6205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6200] symlink("/dev/binderfs", "./binderfs" [pid 6206] <... chdir resumed>) = 0 [pid 6205] <... mmap resumed>) = 0x7f19b51e4000 [pid 6201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6200] <... symlink resumed>) = 0 [pid 6206] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6202] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... prctl resumed>) = 0 [pid 6206] setpgid(0, 0 [pid 6200] <... futex resumed>) = 0 [pid 6206] <... setpgid resumed>) = 0 [pid 6206] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6206] write(3, "1000", 4) = 4 [pid 6206] close(3) = 0 [pid 6206] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6206] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6209], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6209 [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6206] <... futex resumed>) = 0 [pid 6200] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6200] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6200] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6210], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6210 ./strace-static-x86_64: Process 6209 attached [pid 6209] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6209] memfd_create("syzkaller", 0) = 3 [pid 6209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6201] <... write resumed>) = 1048576 [pid 6205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6201] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6201] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6201] ioctl(4, LOOP_SET_FD, 3 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6202] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 6210 attached [pid 6197] <... mount resumed>) = 0 [pid 6210] set_robust_list(0x7f19bd6049e0, 24 [pid 6197] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6210] <... set_robust_list resumed>) = 0 [pid 6197] <... openat resumed>) = 3 [pid 6202] munmap(0x7f19b51e4000, 1048576 [pid 6210] memfd_create("syzkaller", 0 [pid 6202] <... munmap resumed>) = 0 [pid 6197] chdir("./bus" [pid 6201] <... ioctl resumed>) = 0 [pid 6210] <... memfd_create resumed>) = 3 [pid 6201] close(3) = 0 [pid 6201] mkdir("./bus", 0777) = 0 [pid 6201] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6210] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6202] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6210] <... mmap resumed>) = 0x7f19b51e4000 [pid 6202] <... openat resumed>) = 4 [pid 6197] <... chdir resumed>) = 0 [pid 6202] ioctl(4, LOOP_SET_FD, 3 [pid 6209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6205] <... write resumed>) = 1048576 [pid 6205] munmap(0x7f19b51e4000, 1048576 [pid 6210] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6205] <... munmap resumed>) = 0 [pid 6205] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6202] <... ioctl resumed>) = 0 [pid 6202] close(3) = 0 [pid 6202] mkdir("./bus", 0777) = 0 [pid 6202] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6205] <... openat resumed>) = 4 [pid 6205] ioctl(4, LOOP_SET_FD, 3 [pid 6197] ioctl(4, LOOP_CLR_FD [pid 6210] <... write resumed>) = 1048576 [pid 6205] <... ioctl resumed>) = 0 [ 144.841495][ T6197] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/189/bus supports timestamps until 2038 (0x7fffffff) [ 144.873285][ T6201] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/196/bus supports timestamps until 2038 (0x7fffffff) [pid 6201] <... mount resumed>) = 0 [pid 6197] <... ioctl resumed>) = 0 [pid 6210] munmap(0x7f19b51e4000, 1048576 [pid 6209] <... write resumed>) = 1048576 [pid 6205] close(3 [pid 6197] close(4 [pid 6210] <... munmap resumed>) = 0 [pid 6205] <... close resumed>) = 0 [pid 6202] <... mount resumed>) = 0 [pid 6201] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6197] <... close resumed>) = 0 [pid 6210] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6209] munmap(0x7f19b51e4000, 1048576 [pid 6205] mkdir("./bus", 0777 [pid 6202] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6201] <... openat resumed>) = 3 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... openat resumed>) = 4 [pid 6209] <... munmap resumed>) = 0 [pid 6205] <... mkdir resumed>) = 0 [pid 6202] <... openat resumed>) = 3 [pid 6201] chdir("./bus" [pid 6197] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6210] ioctl(4, LOOP_SET_FD, 3 [pid 6209] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6205] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6202] chdir("./bus" [pid 6201] <... chdir resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... ioctl resumed>) = 0 [pid 6209] <... openat resumed>) = 4 [pid 6202] <... chdir resumed>) = 0 [pid 6201] ioctl(4, LOOP_CLR_FD [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6210] close(3 [pid 6209] ioctl(4, LOOP_SET_FD, 3 [pid 6202] ioctl(4, LOOP_CLR_FD [pid 6201] <... ioctl resumed>) = 0 [pid 6197] chdir("./file0" [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... close resumed>) = 0 [pid 6201] close(4 [pid 6197] <... chdir resumed>) = 0 [pid 6210] mkdir("./bus", 0777 [pid 6209] <... ioctl resumed>) = 0 [pid 6202] <... ioctl resumed>) = 0 [pid 6201] <... close resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... mkdir resumed>) = 0 [pid 6209] close(3 [pid 6202] close(4 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6210] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6209] <... close resumed>) = 0 [pid 6202] <... close resumed>) = 0 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] mkdir("./bus", 0777 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6197] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... mkdir resumed>) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6197] <... open resumed>) = 4 [pid 6209] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] chdir("./file0" [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6197] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] <... mount resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6202] chdir("./file0" [pid 6201] <... chdir resumed>) = 0 [pid 6199] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6202] <... chdir resumed>) = 0 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6197] <... open resumed>) = 5 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6197] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6202] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6201] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6197] <... openat resumed>) = 6 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6196] <... futex resumed>) = 0 [pid 6201] <... open resumed>) = 4 [pid 6197] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... open resumed>) = 4 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... write resumed>) = 262144 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = 1 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6197] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... futex resumed>) = 0 [pid 6197] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6196] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6196] <... futex resumed>) = 0 [pid 6202] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [ 144.886959][ T6202] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/193/bus supports timestamps until 2038 (0x7fffffff) [pid 6201] <... mount resumed>) = 0 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... mount resumed>) = 0 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6201] <... open resumed>) = 5 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... open resumed>) = 5 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6201] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6201] <... openat resumed>) = 6 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... openat resumed>) = 6 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] <... futex resumed>) = 1 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = 1 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6201] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] <... futex resumed>) = 0 [pid 6202] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 144.950313][ T6205] ext4 filesystem being mounted at /root/syzkaller.69675s/195/bus supports timestamps until 2038 (0x7fffffff) [ 144.963964][ T6209] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/194/bus supports timestamps until 2038 (0x7fffffff) [ 144.963971][ T6210] ext4 filesystem being mounted at /root/syzkaller.URAKkl/198/bus supports timestamps until 2038 (0x7fffffff) [pid 6201] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... mount resumed>) = 0 [pid 6205] <... mount resumed>) = 0 [pid 6202] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6197] <... write resumed>) = 1048576 [pid 6196] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6205] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6197] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... openat resumed>) = 3 [pid 6205] <... openat resumed>) = 3 [pid 6197] <... futex resumed>) = 1 [pid 6196] <... futex resumed>) = 0 [pid 6210] chdir("./bus" [pid 6205] chdir("./bus" [pid 6197] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6196] exit_group(0 [pid 6210] <... chdir resumed>) = 0 [pid 6205] <... chdir resumed>) = 0 [pid 6197] <... futex resumed>) = ? [pid 6196] <... exit_group resumed>) = ? [pid 6210] ioctl(4, LOOP_CLR_FD [pid 6205] ioctl(4, LOOP_CLR_FD [pid 6197] +++ exited with 0 +++ [pid 6196] +++ exited with 0 +++ [pid 6210] <... ioctl resumed>) = 0 [pid 6205] <... ioctl resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6196, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6210] close(4 [pid 6205] close(4 [pid 6210] <... close resumed>) = 0 [pid 6205] <... close resumed>) = 0 [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./189", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... futex resumed>) = 1 [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6210] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./189", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 6210] chdir("./file0" [pid 6205] chdir("./file0" [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] fstat(3, [pid 6205] <... chdir resumed>) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] getdents64(3, [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./189/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6205] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] lstat("./189/binderfs", [pid 6205] <... open resumed>) = 4 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] unlink("./189/binderfs" [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6205] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6205] <... mount resumed>) = 0 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6205] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6205] <... open resumed>) = 5 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6205] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6205] <... openat resumed>) = 6 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6205] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... chdir resumed>) = 0 [pid 6205] <... write resumed>) = 262144 [pid 6202] <... write resumed>) = 262144 [pid 6201] <... write resumed>) = 262144 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = 1 [pid 6205] <... futex resumed>) = 1 [pid 6203] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = 0 [pid 6210] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6203] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6203] <... futex resumed>) = 0 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6210] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6203] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6210] <... open resumed>) = 4 [pid 6199] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6202] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6201] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6198] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6199] <... futex resumed>) = 0 [pid 6198] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6200] <... futex resumed>) = 0 [pid 6210] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... mount resumed>) = 0 [pid 6200] <... futex resumed>) = 0 [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... open resumed>) = 5 [pid 6200] <... futex resumed>) = 0 [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... openat resumed>) = 6 [pid 6200] <... futex resumed>) = 0 [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6210] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6210] <... write resumed>) = 262144 [pid 6200] <... futex resumed>) = 0 [pid 6199] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] <... futex resumed>) = 0 [pid 6200] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6200] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6210] <... futex resumed>) = 1 [pid 6210] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6202] <... write resumed>) = 1048576 [pid 6201] <... write resumed>) = 1048576 [pid 6203] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6209] <... mount resumed>) = 0 [pid 6202] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6201] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6202] <... futex resumed>) = 1 [pid 6201] <... futex resumed>) = 1 [pid 6199] <... futex resumed>) = 0 [pid 6198] <... futex resumed>) = 0 [pid 6209] <... openat resumed>) = 3 [pid 6201] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6199] exit_group(0 [pid 6198] exit_group(0 [pid 6202] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] chdir("./bus" [pid 6202] <... futex resumed>) = ? [pid 6201] <... futex resumed>) = ? [pid 6199] <... exit_group resumed>) = ? [pid 6198] <... exit_group resumed>) = ? [pid 6205] <... write resumed>) = 1048576 [pid 6205] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6205] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6209] <... chdir resumed>) = 0 [pid 6209] ioctl(4, LOOP_CLR_FD) = 0 [pid 6209] close(4 [pid 6203] exit_group(0 [pid 6202] +++ exited with 0 +++ [pid 6201] +++ exited with 0 +++ [pid 6209] <... close resumed>) = 0 [pid 6203] <... exit_group resumed>) = ? [pid 6199] +++ exited with 0 +++ [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6198] +++ exited with 0 +++ [pid 6209] <... futex resumed>) = 1 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6198, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 6209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6205] <... futex resumed>) = ? [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 6205] +++ exited with 0 +++ [pid 6203] +++ exited with 0 +++ [pid 310] <... restart_syscall resumed>) = 0 [pid 6206] <... futex resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6199, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6203, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6209] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 1 [pid 310] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] chdir("./file0" [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... chdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 6209] <... futex resumed>) = 1 [pid 6206] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 308] fstat(3, [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] <... futex resumed>) = 0 [pid 6200] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 144.993094][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.030382][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 310] getdents64(3, [pid 308] getdents64(3, [pid 6209] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... openat resumed>) = 3 [pid 6209] <... open resumed>) = 4 [pid 310] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(3, [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6209] <... futex resumed>) = 1 [pid 6206] <... futex resumed>) = 0 [pid 310] lstat("./196/binderfs", [pid 308] lstat("./195/binderfs", [pid 305] getdents64(3, [pid 6209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] <... futex resumed>) = 0 [pid 310] unlink("./196/binderfs" [pid 308] unlink("./195/binderfs" [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6209] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... unlink resumed>) = 0 [pid 308] <... unlink resumed>) = 0 [pid 305] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] <... mount resumed>) = 0 [pid 310] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6209] <... futex resumed>) = 1 [pid 6206] <... futex resumed>) = 0 [pid 6209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6209] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6206] <... futex resumed>) = 0 [pid 6209] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] lstat("./193/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./193/binderfs") = 0 [pid 305] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6210] <... write resumed>) = 1048576 [ 145.088232][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.101689][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.103098][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6210] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6206] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] exit_group(0 [pid 6206] <... futex resumed>) = 0 [pid 6200] <... exit_group resumed>) = ? [pid 6206] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6206] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6206] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6226], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6226 [pid 6206] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6210] <... futex resumed>) = ? [pid 6206] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6226 attached [pid 6209] <... open resumed>) = 5 [pid 309] <... umount2 resumed>) = 0 [pid 6226] set_robust_list(0x7f19b52e39e0, 24 [pid 6210] +++ exited with 0 +++ [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6200] +++ exited with 0 +++ [pid 309] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6200, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./198/binderfs") = 0 [ 145.128495][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.130224][ T92] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.158808][ T92] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] <... set_robust_list resumed>) = 0 [pid 6209] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6209] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] lstat("./189/bus", [pid 6226] <... openat resumed>) = 6 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6226] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] umount2("./189/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6226] <... futex resumed>) = 1 [pid 6206] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6226] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] openat(AT_FDCWD, "./189/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6209] <... futex resumed>) = 0 [pid 6206] <... futex resumed>) = 1 [pid 309] <... openat resumed>) = 4 [pid 6209] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] fstat(4, [pid 6209] <... write resumed>) = 262144 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./189/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./189") = 0 [pid 309] mkdir("./190", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6206] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6206] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6209] <... futex resumed>) = 1 [pid 6209] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./196/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./196/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./196") = 0 [pid 310] mkdir("./197", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./193/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./193/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./193") = 0 [pid 305] mkdir("./194", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6209] <... write resumed>) = 1048576 [pid 6209] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6206] <... futex resumed>) = 0 [pid 6206] exit_group(0 [pid 6226] <... futex resumed>) = ? [pid 6206] <... exit_group resumed>) = ? [pid 6226] +++ exited with 0 +++ [pid 6209] <... futex resumed>) = ? [ 145.176044][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.199051][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6209] +++ exited with 0 +++ [pid 6206] +++ exited with 0 +++ [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6206, si_uid=0, si_status=0, si_utime=1, si_stime=2} --- [pid 306] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./198/bus", [pid 307] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... openat resumed>) = 3 [pid 307] fstat(3, [pid 306] <... openat resumed>) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, [pid 307] getdents64(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] rmdir("./198/bus" [pid 307] lstat("./194/binderfs", [pid 306] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] unlink("./194/binderfs" [pid 306] close(3) = 0 [pid 306] rmdir("./198") = 0 [pid 307] <... unlink resumed>) = 0 [pid 306] mkdir("./199", 0777 [pid 307] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... openat resumed>) = 3 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] close(3 [pid 309] close(3 [pid 308] <... umount2 resumed>) = 0 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] close(3 [pid 310] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6227 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6228 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6229 [pid 306] close(3./strace-static-x86_64: Process 6228 attached [pid 6228] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6228] chdir("./190") = 0 [pid 6228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6228] setpgid(0, 0) = 0 [pid 6228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6228] write(3, "1000", 4) = 4 [pid 6228] close(3) = 0 [pid 6228] symlink("/dev/binderfs", "./binderfs" [pid 308] lstat("./195/bus", [pid 6228] <... symlink resumed>) = 0 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6228] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6228] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 308] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6228] <... clone resumed>, parent_tid=[6230], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6230 [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6230 attached [pid 6230] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6230] memfd_create("syzkaller", 0) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6229 attached [pid 308] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6230] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, [pid 6229] set_robust_list(0x55555748e5e0, 24 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6229] <... set_robust_list resumed>) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 6229] chdir("./194" [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 6229] <... chdir resumed>) = 0 [pid 308] close(4 [pid 6229] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... close resumed>) = 0 [pid 6229] <... prctl resumed>) = 0 [pid 308] rmdir("./195/bus" [pid 6229] setpgid(0, 0 [pid 308] <... rmdir resumed>) = 0 [pid 6229] <... setpgid resumed>) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./195") = 0 [pid 6229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] mkdir("./196", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6230] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6227 attached [pid 6227] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6227] chdir("./197" [pid 6229] <... openat resumed>) = 3 [pid 6229] write(3, "1000", 4 [pid 6227] <... chdir resumed>) = 0 [pid 6229] <... write resumed>) = 4 [pid 6227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6229] close(3) = 0 [pid 6227] setpgid(0, 0 [pid 6229] symlink("/dev/binderfs", "./binderfs" [pid 6227] <... setpgid resumed>) = 0 [pid 6227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6229] <... symlink resumed>) = 0 [pid 6227] <... openat resumed>) = 3 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] write(3, "1000", 4 [pid 6229] <... futex resumed>) = 0 [pid 6227] <... write resumed>) = 4 [pid 6229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6227] close(3 [pid 6229] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6229] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6227] <... close resumed>) = 0 [pid 6227] symlink("/dev/binderfs", "./binderfs" [pid 6229] <... mprotect resumed>) = 0 [ 145.336915][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.350266][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6230] <... write resumed>) = 1048576 [pid 6227] <... symlink resumed>) = 0 [pid 6229] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6227] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6227] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6231], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6231 [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6230] munmap(0x7f19b51e4000, 1048576./strace-static-x86_64: Process 6231 attached ./strace-static-x86_64: Process 6232 attached [pid 6229] <... clone resumed>, parent_tid=[6232], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6232 [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] set_robust_list(0x7f19bd6049e0, 24 [pid 6231] set_robust_list(0x7f19bd6049e0, 24 [pid 6230] <... munmap resumed>) = 0 [pid 6230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6232] <... set_robust_list resumed>) = 0 [pid 6231] <... set_robust_list resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6232] memfd_create("syzkaller", 0 [pid 6231] memfd_create("syzkaller", 0) = 3 [pid 6231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 307] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6233 attached [pid 6232] <... memfd_create resumed>) = 3 [pid 6231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] lstat("./194/bus", [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6233 [pid 6232] <... mmap resumed>) = 0x7f19b51e4000 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6230] <... openat resumed>) = 4 [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6230] ioctl(4, LOOP_SET_FD, 3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] close(3 [pid 307] <... openat resumed>) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 6230] <... ioctl resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./194/bus") = 0 [pid 307] getdents64(3, [pid 6232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6230] close(3 [pid 308] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6233] set_robust_list(0x55555748e5e0, 24 [pid 307] close(3 [pid 6233] <... set_robust_list resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 6233] chdir("./199" [pid 6230] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] rmdir("./194" [pid 6233] <... chdir resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 6233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] mkdir("./195", 0777 [pid 6233] <... prctl resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 6233] setpgid(0, 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6233] <... setpgid resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] ioctl(3, LOOP_CLR_FD [pid 6233] <... openat resumed>) = 3 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6233] write(3, "1000", 4 [pid 307] close(3 [pid 6233] <... write resumed>) = 4 [pid 307] <... close resumed>) = 0 [pid 6233] close(3 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6233] <... close resumed>) = 0 [pid 6230] mkdir("./bus", 0777 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6235 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6236 [pid 6233] symlink("/dev/binderfs", "./binderfs" [pid 6230] <... mkdir resumed>) = 0 [pid 6233] <... symlink resumed>) = 0 [pid 6230] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6235 attached ) = 0 [pid 6235] set_robust_list(0x55555748e5e0, 24 [pid 6233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6235] <... set_robust_list resumed>) = 0 [pid 6233] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6235] chdir("./196" [pid 6233] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6235] <... chdir resumed>) = 0 [pid 6233] <... mprotect resumed>) = 0 [pid 6232] <... write resumed>) = 1048576 [pid 6235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6233] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6235] <... prctl resumed>) = 0 [pid 6235] setpgid(0, 0 [pid 6233] <... clone resumed>, parent_tid=[6237], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6237 ./strace-static-x86_64: Process 6236 attached [pid 6235] <... setpgid resumed>) = 0 [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] set_robust_list(0x55555748e5e0, 24 [pid 6235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6233] <... futex resumed>) = 0 [pid 6236] <... set_robust_list resumed>) = 0 [pid 6235] <... openat resumed>) = 3 [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6236] chdir("./195" [pid 6235] write(3, "1000", 4 [pid 6236] <... chdir resumed>) = 0 [pid 6235] <... write resumed>) = 4 [pid 6236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6235] close(3 [pid 6236] <... prctl resumed>) = 0 [pid 6235] <... close resumed>) = 0 [pid 6236] setpgid(0, 0 [pid 6235] symlink("/dev/binderfs", "./binderfs" [pid 6236] <... setpgid resumed>) = 0 [pid 6235] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 6237 attached [pid 6236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] set_robust_list(0x7f19bd6049e0, 24 [pid 6236] <... openat resumed>) = 3 [pid 6235] <... futex resumed>) = 0 [pid 6236] write(3, "1000", 4 [pid 6235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6231] <... write resumed>) = 1048576 [pid 6236] <... write resumed>) = 4 [pid 6235] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6236] close(3 [pid 6235] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6236] <... close resumed>) = 0 [pid 6235] <... mprotect resumed>) = 0 [pid 6236] symlink("/dev/binderfs", "./binderfs" [pid 6235] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6236] <... symlink resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... clone resumed>, parent_tid=[6240], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6240 [pid 6236] <... futex resumed>) = 0 [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] munmap(0x7f19b51e4000, 1048576 [pid 6236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6235] <... futex resumed>) = 0 [pid 6231] <... munmap resumed>) = 0 [pid 6236] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6231] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6236] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6231] <... openat resumed>) = 4 [pid 6236] <... mprotect resumed>) = 0 [pid 6231] ioctl(4, LOOP_SET_FD, 3 [pid 6236] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6242], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6242 [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6240 attached [pid 6240] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6240] memfd_create("syzkaller", 0) = 3 [pid 6240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6242 attached [pid 6242] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6242] memfd_create("syzkaller", 0) = 3 [pid 6242] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6237] <... set_robust_list resumed>) = 0 [pid 6232] munmap(0x7f19b51e4000, 1048576 [pid 6231] <... ioctl resumed>) = 0 [pid 6230] <... mount resumed>) = 0 [pid 6242] <... mmap resumed>) = 0x7f19b51e4000 [pid 6231] close(3) = 0 [pid 6237] memfd_create("syzkaller", 0 [pid 6231] mkdir("./bus", 0777 [pid 6237] <... memfd_create resumed>) = 3 [pid 6232] <... munmap resumed>) = 0 [pid 6231] <... mkdir resumed>) = 0 [pid 6230] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6242] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6232] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6231] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6237] <... mmap resumed>) = 0x7f19b51e4000 [pid 6232] <... openat resumed>) = 4 [pid 6230] <... openat resumed>) = 3 [pid 6232] ioctl(4, LOOP_SET_FD, 3 [pid 6230] chdir("./bus") = 0 [pid 6230] ioctl(4, LOOP_CLR_FD [pid 6237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6232] <... ioctl resumed>) = 0 [pid 6230] <... ioctl resumed>) = 0 [pid 6230] close(4 [pid 6232] close(3 [pid 6240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6230] <... close resumed>) = 0 [pid 6232] <... close resumed>) = 0 [pid 6242] <... write resumed>) = 1048576 [ 145.468365][ T6230] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/190/bus supports timestamps until 2038 (0x7fffffff) [pid 6242] munmap(0x7f19b51e4000, 1048576 [pid 6240] <... write resumed>) = 1048576 [pid 6237] <... write resumed>) = 1048576 [pid 6232] mkdir("./bus", 0777 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] munmap(0x7f19b51e4000, 1048576 [pid 6232] <... mkdir resumed>) = 0 [pid 6230] <... futex resumed>) = 1 [pid 6237] <... munmap resumed>) = 0 [pid 6232] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6228] <... futex resumed>) = 0 [pid 6237] <... openat resumed>) = 4 [pid 6231] <... mount resumed>) = 0 [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] ioctl(4, LOOP_SET_FD, 3 [pid 6230] <... futex resumed>) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6230] chdir("./file0") = 0 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... munmap resumed>) = 0 [pid 6231] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6240] munmap(0x7f19b51e4000, 1048576 [pid 6237] <... ioctl resumed>) = 0 [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] close(3) = 0 [pid 6237] mkdir("./bus", 0777 [pid 6242] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6240] <... munmap resumed>) = 0 [pid 6237] <... mkdir resumed>) = 0 [pid 6231] <... openat resumed>) = 3 [pid 6230] <... futex resumed>) = 0 [pid 6228] <... futex resumed>) = 1 [pid 6242] <... openat resumed>) = 4 [pid 6237] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6231] chdir("./bus" [pid 6230] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] ioctl(4, LOOP_SET_FD, 3 [pid 6231] <... chdir resumed>) = 0 [pid 6231] ioctl(4, LOOP_CLR_FD [pid 6230] <... open resumed>) = 4 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... ioctl resumed>) = 0 [pid 6231] <... ioctl resumed>) = 0 [pid 6230] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6231] close(4) = 0 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6230] <... mount resumed>) = 0 [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6231] chdir("./file0" [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... chdir resumed>) = 0 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6231] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] close(3 [pid 6240] <... openat resumed>) = 4 [pid 6231] <... open resumed>) = 4 [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6242] <... close resumed>) = 0 [pid 6240] ioctl(4, LOOP_SET_FD, 3 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] mkdir("./bus", 0777 [pid 6231] <... futex resumed>) = 1 [pid 6230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... mkdir resumed>) = 0 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6227] <... futex resumed>) = 0 [pid 6231] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6231] <... mount resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6227] <... futex resumed>) = 0 [pid 6231] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... ioctl resumed>) = 0 [pid 6231] <... open resumed>) = 5 [pid 6240] close(3 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... close resumed>) = 0 [pid 6231] <... futex resumed>) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6240] mkdir("./bus", 0777 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... mkdir resumed>) = 0 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6230] <... open resumed>) = 5 [pid 6227] <... futex resumed>) = 0 [pid 6240] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6231] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... openat resumed>) = 6 [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = 1 [pid 6230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] <... futex resumed>) = 0 [pid 6227] <... futex resumed>) = 0 [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 145.511298][ T6231] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/197/bus supports timestamps until 2038 (0x7fffffff) [pid 6230] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6227] <... futex resumed>) = 0 [pid 6231] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6231] <... write resumed>) = 262144 [pid 6230] <... openat resumed>) = 6 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6227] <... futex resumed>) = 0 [pid 6231] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6227] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... mount resumed>) = 0 [pid 6232] <... mount resumed>) = 0 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... futex resumed>) = 0 [pid 6237] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6232] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6227] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... openat resumed>) = 3 [pid 6232] <... openat resumed>) = 3 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] chdir("./bus" [pid 6232] chdir("./bus" [pid 6230] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6228] <... futex resumed>) = 0 [pid 6237] <... chdir resumed>) = 0 [pid 6232] <... chdir resumed>) = 0 [pid 6230] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] ioctl(4, LOOP_CLR_FD [pid 6232] ioctl(4, LOOP_CLR_FD [pid 6230] <... write resumed>) = 262144 [pid 6237] <... ioctl resumed>) = 0 [pid 6232] <... ioctl resumed>) = 0 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] close(4 [pid 6232] close(4 [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 6237] <... close resumed>) = 0 [pid 6232] <... close resumed>) = 0 [pid 6230] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6228] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... mount resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6231] <... write resumed>) = 1048576 [pid 6228] <... futex resumed>) = 0 [pid 6237] <... futex resumed>) = 1 [pid 6232] <... futex resumed>) = 1 [pid 6231] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = 0 [pid 6228] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6231] <... futex resumed>) = 1 [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6227] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6231] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] <... futex resumed>) = 0 [pid 6227] exit_group(0 [pid 6232] chdir("./file0" [pid 6231] <... futex resumed>) = ? [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6227] <... exit_group resumed>) = ? [pid 6232] <... chdir resumed>) = 0 [pid 6231] +++ exited with 0 +++ [pid 6227] +++ exited with 0 +++ [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6232] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6233] <... futex resumed>) = 0 [pid 6232] <... open resumed>) = 4 [pid 6229] <... futex resumed>) = 0 [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... mount resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6227, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... openat resumed>) = 3 [pid 6237] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = 1 [pid 310] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6237] chdir("./file0" [pid 6232] <... open resumed>) = 5 [pid 6229] <... futex resumed>) = 0 [pid 6237] <... chdir resumed>) = 0 [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 145.559279][ T6237] ext4 filesystem being mounted at /root/syzkaller.URAKkl/199/bus supports timestamps until 2038 (0x7fffffff) [ 145.576514][ T6232] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/194/bus supports timestamps until 2038 (0x7fffffff) [ 145.590846][ T6240] ext4 filesystem being mounted at /root/syzkaller.69675s/196/bus supports timestamps until 2038 (0x7fffffff) [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6240] chdir("./bus" [pid 6237] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6232] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6229] <... futex resumed>) = 0 [pid 6232] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] <... openat resumed>) = 6 [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6232] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6229] <... futex resumed>) = 0 [pid 6232] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... mount resumed>) = 0 [pid 6240] <... chdir resumed>) = 0 [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6230] <... write resumed>) = 1048576 [pid 310] <... openat resumed>) = 3 [pid 6242] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6240] ioctl(4, LOOP_CLR_FD [pid 6237] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = 1 [pid 6230] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] fstat(3, [pid 6242] <... openat resumed>) = 3 [pid 6240] <... ioctl resumed>) = 0 [pid 6237] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6230] <... futex resumed>) = 1 [pid 6228] <... futex resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6242] chdir("./bus" [pid 6240] close(4 [pid 6230] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] getdents64(3, [pid 6242] <... chdir resumed>) = 0 [pid 6240] <... close resumed>) = 0 [pid 6237] <... open resumed>) = 4 [pid 6232] <... write resumed>) = 262144 [pid 6228] exit_group(0 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6228] <... exit_group resumed>) = ? [pid 6237] <... futex resumed>) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6232] <... futex resumed>) = 1 [pid 6229] <... futex resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6232] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6229] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6229] <... futex resumed>) = 0 [pid 6237] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6229] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... mount resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6237] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... open resumed>) = 5 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6237] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6237] <... openat resumed>) = 6 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6233] <... futex resumed>) = 0 [pid 6237] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] ioctl(4, LOOP_CLR_FD [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6237] <... write resumed>) = 262144 [pid 6230] <... futex resumed>) = ? [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... futex resumed>) = 1 [pid 6237] <... futex resumed>) = 1 [pid 6233] <... futex resumed>) = 0 [pid 6237] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6233] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... ioctl resumed>) = 0 [pid 6240] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = 0 [pid 6230] +++ exited with 0 +++ [pid 6228] +++ exited with 0 +++ [pid 310] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6233] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] close(4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] <... close resumed>) = 0 [pid 6240] chdir("./file0" [pid 6235] <... futex resumed>) = 0 [pid 310] lstat("./197/binderfs", [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6228, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] <... chdir resumed>) = 0 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 310] unlink("./197/binderfs") = 0 [pid 6240] <... futex resumed>) = 1 [pid 6235] <... futex resumed>) = 0 [pid 309] umount2("./190", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [ 145.616371][ T6242] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/195/bus supports timestamps until 2038 (0x7fffffff) [pid 310] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6235] <... futex resumed>) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] openat(AT_FDCWD, "./190", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6240] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 309] <... openat resumed>) = 3 [pid 309] fstat(3, [pid 6242] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6242] chdir("./file0" [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] getdents64(3, [pid 6242] <... chdir resumed>) = 0 [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6242] <... futex resumed>) = 1 [pid 6242] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6240] <... open resumed>) = 4 [pid 6236] <... futex resumed>) = 0 [pid 309] umount2("./190/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] <... futex resumed>) = 0 [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = 1 [pid 6242] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6240] <... futex resumed>) = 1 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6235] <... futex resumed>) = 0 [pid 309] lstat("./190/binderfs", [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6242] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6240] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = 0 [pid 309] unlink("./190/binderfs" [pid 6240] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6236] <... futex resumed>) = 1 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... unlink resumed>) = 0 [pid 6240] <... mount resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] <... futex resumed>) = 0 [pid 6242] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6229] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6232] <... write resumed>) = 1048576 [pid 6232] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6232] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6229] exit_group(0) = ? [pid 6232] <... futex resumed>) = ? [pid 6240] <... futex resumed>) = 1 [pid 6235] <... futex resumed>) = 0 [pid 6240] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6242] <... mount resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6242] <... futex resumed>) = 1 [pid 6240] <... open resumed>) = 5 [pid 6236] <... futex resumed>) = 0 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6232] +++ exited with 0 +++ [pid 6229] +++ exited with 0 +++ [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6229, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 6242] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6240] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6240] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] <... open resumed>) = 5 [pid 6235] <... futex resumed>) = 0 [pid 6240] <... openat resumed>) = 6 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6240] <... futex resumed>) = 0 [pid 305] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6242] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6242] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6240] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... openat resumed>) = 3 [pid 6236] <... futex resumed>) = 0 [pid 305] fstat(3, [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6242] <... openat resumed>) = 6 [pid 305] getdents64(3, [ 145.661583][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.686783][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6240] <... write resumed>) = 262144 [pid 6236] <... futex resumed>) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6242] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6242] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6240] <... futex resumed>) = 1 [pid 6236] <... futex resumed>) = 0 [pid 6235] <... futex resumed>) = 0 [pid 6233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6242] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6240] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6237] <... write resumed>) = 1048576 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6235] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./194/binderfs", [pid 6242] <... write resumed>) = 262144 [pid 6240] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6235] <... futex resumed>) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6240] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6235] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] unlink("./194/binderfs" [pid 6237] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6237] <... futex resumed>) = 0 [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6236] <... futex resumed>) = 0 [pid 6236] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6242] <... futex resumed>) = 1 [pid 6242] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6237] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6233] exit_group(0 [pid 6237] <... futex resumed>) = ? [pid 6233] <... exit_group resumed>) = ? [pid 6237] +++ exited with 0 +++ [pid 6233] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6233, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./199/binderfs") = 0 [ 145.708677][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.722465][ T172] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 145.737423][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6240] <... write resumed>) = 1048576 [pid 6240] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6235] <... futex resumed>) = 0 [pid 6235] exit_group(0) = ? [pid 6240] <... futex resumed>) = ? [pid 6242] <... write resumed>) = 1048576 [pid 6236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6242] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6236] exit_group(0) = ? [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./190/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./190/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./190/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./190/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./190") = 0 [pid 309] mkdir("./191", 0777) = 0 [ 145.763281][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.786984][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.797236][ T92] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6240] +++ exited with 0 +++ [pid 6235] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6235, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6242] +++ exited with 0 +++ [pid 6236] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6236, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] lstat("./197/bus", [pid 308] <... openat resumed>) = 3 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] fstat(3, [pid 310] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] getdents64(3, [pid 307] <... restart_syscall resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] lstat("./196/binderfs", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] getdents64(4, [pid 308] unlink("./196/binderfs" [pid 307] <... openat resumed>) = 3 [pid 307] fstat(3, [pid 308] <... unlink resumed>) = 0 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] getdents64(4, [pid 307] lstat("./195/binderfs", [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./197/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./197") = 0 [pid 310] mkdir("./198", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./195/binderfs") = 0 [ 145.867522][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 145.880767][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 145.881228][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] close(3 [pid 305] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./194/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./194") = 0 [pid 305] mkdir("./195", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 307] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./195/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] getdents64(4, [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6257 ./strace-static-x86_64: Process 6257 attached [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(4, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] lstat("./199/bus", [pid 307] close(4 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... close resumed>) = 0 [pid 306] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] rmdir("./195/bus" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] <... rmdir resumed>) = 0 [pid 306] fstat(4, [pid 307] getdents64(3, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6257] set_robust_list(0x55555748e5e0, 24 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] getdents64(4, [pid 6257] <... set_robust_list resumed>) = 0 [pid 307] close(3 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6257] chdir("./191" [pid 307] <... close resumed>) = 0 [pid 306] getdents64(4, [pid 6257] <... chdir resumed>) = 0 [pid 307] rmdir("./195" [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] rmdir("./199/bus" [pid 6257] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] mkdir("./196", 0777 [pid 306] <... rmdir resumed>) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./199") = 0 [pid 306] mkdir("./200", 0777 [pid 6257] <... prctl resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6257] setpgid(0, 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6257] <... setpgid resumed>) = 0 [pid 6257] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6257] write(3, "1000", 4) = 4 [pid 6257] close(3) = 0 [pid 6257] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6257] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6257] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6258 attached , parent_tid=[6258], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6258 [pid 6258] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6258] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6258] <... futex resumed>) = 0 [pid 6258] memfd_create("syzkaller", 0) = 3 [pid 6258] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [ 145.894701][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6258] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6258] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6258] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 310] close(3 [pid 308] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... close resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] lstat("./196/bus", [pid 306] close(3 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6259 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./196/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./196") = 0 [pid 308] mkdir("./197", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR./strace-static-x86_64: Process 6259 attached [pid 6259] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6259] chdir("./198") = 0 [pid 6259] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6259] setpgid(0, 0) = 0 [pid 6259] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6259] write(3, "1000", 4) = 4 [pid 6259] close(3) = 0 [pid 6259] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6259] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6259] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6260 attached [pid 6260] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6259] <... clone resumed>, parent_tid=[6260], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6260 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6260] <... futex resumed>) = 0 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6260] memfd_create("syzkaller", 0) = 3 [pid 6260] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6260] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6260] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6260] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6258] <... openat resumed>) = 4 [pid 307] <... ioctl resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... openat resumed>) = 3 [pid 6258] ioctl(4, LOOP_SET_FD, 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] close(3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] close(3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 305] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6261 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6263 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6264 [pid 6260] ioctl(4, LOOP_SET_FD, 3 [pid 6258] <... ioctl resumed>) = 0 [pid 6258] close(3) = 0 [pid 6258] mkdir("./bus", 0777) = 0 [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6258] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6265 ./strace-static-x86_64: Process 6264 attached [pid 6260] <... ioctl resumed>) = 0 [pid 6260] close(3) = 0 [pid 6260] mkdir("./bus", 0777) = 0 [pid 6260] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 6261 attached ./strace-static-x86_64: Process 6265 attached [pid 6261] set_robust_list(0x55555748e5e0, 24./strace-static-x86_64: Process 6263 attached ) = 0 [pid 6265] set_robust_list(0x55555748e5e0, 24 [pid 6261] chdir("./200" [pid 6263] set_robust_list(0x55555748e5e0, 24 [pid 6261] <... chdir resumed>) = 0 [pid 6265] <... set_robust_list resumed>) = 0 [pid 6263] <... set_robust_list resumed>) = 0 [pid 6261] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] chdir("./196" [pid 6263] chdir("./197" [pid 6261] <... prctl resumed>) = 0 [pid 6261] setpgid(0, 0) = 0 [pid 6264] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6264] chdir("./195") = 0 [pid 6264] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6264] setpgid(0, 0) = 0 [pid 6264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6261] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6265] <... chdir resumed>) = 0 [pid 6263] <... chdir resumed>) = 0 [pid 6265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6261] <... openat resumed>) = 3 [pid 6265] <... prctl resumed>) = 0 [pid 6263] <... prctl resumed>) = 0 [pid 6261] write(3, "1000", 4 [pid 6264] write(3, "1000", 4 [pid 6261] <... write resumed>) = 4 [pid 6265] setpgid(0, 0 [pid 6263] setpgid(0, 0 [pid 6264] <... write resumed>) = 4 [pid 6264] close(3) = 0 [pid 6264] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6261] close(3 [pid 6265] <... setpgid resumed>) = 0 [pid 6263] <... setpgid resumed>) = 0 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6261] <... close resumed>) = 0 [pid 6261] symlink("/dev/binderfs", "./binderfs" [pid 6265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6264] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6264] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6264] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6263] <... openat resumed>) = 3 [pid 6265] <... openat resumed>) = 3 [pid 6261] <... symlink resumed>) = 0 [pid 6263] write(3, "1000", 4 [pid 6264] <... clone resumed>, parent_tid=[6267], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6267 [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6267 attached [pid 6265] write(3, "1000", 4 [pid 6263] <... write resumed>) = 4 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... write resumed>) = 4 [pid 6263] close(3 [pid 6261] <... futex resumed>) = 0 [pid 6265] close(3 [pid 6263] <... close resumed>) = 0 [pid 6265] <... close resumed>) = 0 [pid 6261] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6263] symlink("/dev/binderfs", "./binderfs" [pid 6267] set_robust_list(0x7f19bd6049e0, 24 [pid 6265] symlink("/dev/binderfs", "./binderfs" [pid 6267] <... set_robust_list resumed>) = 0 [pid 6265] <... symlink resumed>) = 0 [pid 6263] <... symlink resumed>) = 0 [pid 6261] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6265] <... futex resumed>) = 0 [pid 6263] <... futex resumed>) = 0 [pid 6261] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6261] <... clone resumed>, parent_tid=[6270], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6270 [pid 6265] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6263] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] memfd_create("syzkaller", 0 [pid 6261] <... futex resumed>) = 0 [pid 6265] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6263] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6265] <... mprotect resumed>) = 0 [pid 6263] <... mprotect resumed>) = 0 [pid 6265] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6263] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6265] <... clone resumed>, parent_tid=[6272], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6272 [pid 6263] <... clone resumed>, parent_tid=[6273], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6273 [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... futex resumed>) = 0 [pid 6263] <... futex resumed>) = 0 [pid 6267] <... memfd_create resumed>) = 3 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6267] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6270 attached [pid 6270] set_robust_list(0x7f19bd6049e0, 24./strace-static-x86_64: Process 6273 attached ./strace-static-x86_64: Process 6272 attached ) = 0 [pid 6273] set_robust_list(0x7f19bd6049e0, 24 [pid 6272] set_robust_list(0x7f19bd6049e0, 24 [pid 6270] memfd_create("syzkaller", 0 [pid 6267] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6260] <... mount resumed>) = 0 [pid 6273] <... set_robust_list resumed>) = 0 [pid 6272] <... set_robust_list resumed>) = 0 [pid 6270] <... memfd_create resumed>) = 3 [pid 6267] <... write resumed>) = 1048576 [pid 6260] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6273] memfd_create("syzkaller", 0 [pid 6272] memfd_create("syzkaller", 0 [pid 6270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6267] munmap(0x7f19b51e4000, 1048576 [pid 6260] <... openat resumed>) = 3 [pid 6273] <... memfd_create resumed>) = 3 [pid 6272] <... memfd_create resumed>) = 3 [pid 6270] <... mmap resumed>) = 0x7f19b51e4000 [pid 6267] <... munmap resumed>) = 0 [pid 6260] chdir("./bus" [pid 6258] <... mount resumed>) = 0 [pid 6273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6267] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6260] <... chdir resumed>) = 0 [pid 6258] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6273] <... mmap resumed>) = 0x7f19b51e4000 [pid 6272] <... mmap resumed>) = 0x7f19b51e4000 [pid 6270] <... write resumed>) = 1048576 [pid 6267] <... openat resumed>) = 4 [pid 6260] ioctl(4, LOOP_CLR_FD [pid 6258] <... openat resumed>) = 3 [pid 6273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6258] chdir("./bus") = 0 [pid 6258] ioctl(4, LOOP_CLR_FD) = 0 [pid 6258] close(4) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6257] <... futex resumed>) = 0 [pid 6258] chdir("./file0" [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... chdir resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6258] <... open resumed>) = 4 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... mount resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... open resumed>) = 5 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6258] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6258] <... openat resumed>) = 6 [pid 6257] <... futex resumed>) = 0 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 0 [pid 6257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] <... ioctl resumed>) = 0 [pid 6267] ioctl(4, LOOP_SET_FD, 3 [pid 6260] close(4 [pid 6258] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... write resumed>) = 1048576 [pid 6260] <... close resumed>) = 0 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] chdir("./file0") = 0 [pid 6267] <... ioctl resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6267] close(3 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6260] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6267] <... close resumed>) = 0 [pid 6258] <... write resumed>) = 262144 [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6257] <... futex resumed>) = 0 [pid 6257] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6257] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6258] <... futex resumed>) = 1 [pid 6258] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6267] mkdir("./bus", 0777 [pid 6260] <... open resumed>) = 4 [pid 6267] <... mkdir resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6260] <... futex resumed>) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... write resumed>) = 1048576 [pid 6270] munmap(0x7f19b51e4000, 1048576 [pid 6260] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 146.038819][ T6260] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/198/bus supports timestamps until 2038 (0x7fffffff) [ 146.056054][ T6258] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/191/bus supports timestamps until 2038 (0x7fffffff) [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] munmap(0x7f19b51e4000, 1048576 [pid 6272] munmap(0x7f19b51e4000, 1048576 [pid 6270] <... munmap resumed>) = 0 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6259] <... futex resumed>) = 0 [pid 6273] <... munmap resumed>) = 0 [pid 6272] <... munmap resumed>) = 0 [pid 6270] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6260] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6272] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6270] <... openat resumed>) = 4 [pid 6260] <... open resumed>) = 5 [pid 6273] <... openat resumed>) = 4 [pid 6272] <... openat resumed>) = 4 [pid 6270] ioctl(4, LOOP_SET_FD, 3 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] ioctl(4, LOOP_SET_FD, 3 [pid 6272] ioctl(4, LOOP_SET_FD, 3 [pid 6260] <... futex resumed>) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6259] <... futex resumed>) = 0 [pid 6260] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] <... openat resumed>) = 6 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6260] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6259] <... futex resumed>) = 0 [pid 6260] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6260] <... write resumed>) = 262144 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6259] <... futex resumed>) = 0 [pid 6260] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6259] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6259] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... ioctl resumed>) = 0 [pid 6270] close(3) = 0 [pid 6270] mkdir("./bus", 0777) = 0 [pid 6273] <... ioctl resumed>) = 0 [pid 6267] <... mount resumed>) = 0 [pid 6258] <... write resumed>) = 1048576 [pid 6273] close(3 [pid 6272] <... ioctl resumed>) = 0 [pid 6270] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6257] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6273] <... close resumed>) = 0 [pid 6272] close(3 [pid 6267] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6258] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] mkdir("./bus", 0777 [pid 6272] <... close resumed>) = 0 [pid 6267] <... openat resumed>) = 3 [pid 6258] <... futex resumed>) = 0 [pid 6257] exit_group(0 [pid 6273] <... mkdir resumed>) = 0 [pid 6273] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6272] mkdir("./bus", 0777 [pid 6267] chdir("./bus" [pid 6257] <... exit_group resumed>) = ? [pid 6267] <... chdir resumed>) = 0 [pid 6258] +++ exited with 0 +++ [pid 6260] <... write resumed>) = 1048576 [pid 6260] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... mkdir resumed>) = 0 [pid 6267] ioctl(4, LOOP_CLR_FD [pid 6257] +++ exited with 0 +++ [pid 6272] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6267] <... ioctl resumed>) = 0 [pid 6260] <... futex resumed>) = 1 [pid 6259] <... futex resumed>) = 0 [ 146.135522][ T6267] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/195/bus supports timestamps until 2038 (0x7fffffff) [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6257, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6267] close(4 [pid 6260] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6259] exit_group(0 [pid 6267] <... close resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] chdir("./file0" [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... chdir resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... open resumed>) = 4 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... mount resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... open resumed>) = 5 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... openat resumed>) = 6 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6267] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = 0 [pid 6267] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6267] <... write resumed>) = 262144 [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6264] <... futex resumed>) = 0 [pid 6267] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6264] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6264] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6259] <... exit_group resumed>) = ? [pid 309] umount2("./191", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./191", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6260] <... futex resumed>) = ? [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./191/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./191/binderfs", [pid 6273] <... mount resumed>) = 0 [pid 6270] <... mount resumed>) = 0 [pid 6260] +++ exited with 0 +++ [pid 6259] +++ exited with 0 +++ [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6259, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] unlink("./191/binderfs") = 0 [pid 309] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6270] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] <... openat resumed>) = 3 [pid 6270] <... openat resumed>) = 3 [pid 310] fstat(3, [pid 6270] chdir("./bus" [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6270] <... chdir resumed>) = 0 [pid 310] getdents64(3, [pid 6270] ioctl(4, LOOP_CLR_FD [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6273] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6270] <... ioctl resumed>) = 0 [pid 310] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6273] <... openat resumed>) = 3 [pid 6270] close(4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6273] chdir("./bus" [pid 6270] <... close resumed>) = 0 [pid 310] lstat("./198/binderfs", [pid 6273] <... chdir resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6273] ioctl(4, LOOP_CLR_FD [pid 6270] <... futex resumed>) = 1 [pid 6261] <... futex resumed>) = 0 [pid 310] unlink("./198/binderfs" [pid 6273] <... ioctl resumed>) = 0 [pid 6270] chdir("./file0" [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... unlink resumed>) = 0 [pid 6273] close(4 [pid 6270] <... chdir resumed>) = 0 [pid 6261] <... futex resumed>) = 0 [ 146.178043][ T6270] ext4 filesystem being mounted at /root/syzkaller.URAKkl/200/bus supports timestamps until 2038 (0x7fffffff) [ 146.190362][ T6273] ext4 filesystem being mounted at /root/syzkaller.69675s/197/bus supports timestamps until 2038 (0x7fffffff) [ 146.209413][ T6272] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/196/bus supports timestamps until 2038 (0x7fffffff) [pid 310] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6273] <... close resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = 0 [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] <... futex resumed>) = 1 [pid 6270] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6263] <... futex resumed>) = 0 [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] chdir("./file0" [pid 6270] <... open resumed>) = 4 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... futex resumed>) = 0 [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6261] <... futex resumed>) = 0 [pid 6270] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... mount resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6261] <... futex resumed>) = 0 [pid 6270] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... open resumed>) = 5 [pid 6261] <... futex resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... chdir resumed>) = 0 [pid 6270] <... futex resumed>) = 0 [pid 6261] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = 1 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] <... futex resumed>) = 0 [pid 6261] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] <... openat resumed>) = 6 [pid 6263] <... futex resumed>) = 0 [pid 6273] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6270] <... futex resumed>) = 1 [pid 6261] <... futex resumed>) = 0 [pid 6270] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6264] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6261] <... futex resumed>) = 0 [pid 6270] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... open resumed>) = 4 [pid 6272] <... mount resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] <... futex resumed>) = 0 [pid 6273] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... mount resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... write resumed>) = 262144 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] <... futex resumed>) = 0 [pid 6273] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... open resumed>) = 5 [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] <... futex resumed>) = 0 [pid 6273] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] <... openat resumed>) = 6 [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6263] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6270] <... futex resumed>) = 1 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6261] <... futex resumed>) = 0 [pid 6273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6270] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] <... futex resumed>) = 0 [ 146.223382][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 146.243291][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 146.264694][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6261] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6273] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6261] <... futex resumed>) = 0 [pid 6273] <... write resumed>) = 262144 [pid 6272] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6270] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6261] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6273] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6263] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6263] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... openat resumed>) = 3 [pid 6267] <... write resumed>) = 1048576 [pid 6272] chdir("./bus" [pid 6267] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6264] exit_group(0 [pid 6272] <... chdir resumed>) = 0 [pid 6267] <... futex resumed>) = ? [pid 6264] <... exit_group resumed>) = ? [pid 6272] ioctl(4, LOOP_CLR_FD [pid 6267] +++ exited with 0 +++ [pid 6270] <... write resumed>) = 1048576 [pid 6270] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6261] <... futex resumed>) = 0 [pid 6261] exit_group(0) = ? [pid 6273] <... write resumed>) = 1048576 [pid 6273] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6263] <... futex resumed>) = 0 [pid 6273] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6263] exit_group(0) = ? [pid 6273] <... futex resumed>) = ? [ 146.278742][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6264] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 6272] <... ioctl resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6264, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 305] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./195/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./195/binderfs") = 0 [pid 305] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6270] +++ exited with 0 +++ [pid 6261] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6261, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 309] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] <... restart_syscall resumed>) = 0 [pid 309] lstat("./191/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./191/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./191/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... openat resumed>) = 4 [pid 306] <... openat resumed>) = 3 [pid 309] fstat(4, [pid 306] fstat(3, [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, [pid 306] getdents64(3, [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] getdents64(4, [pid 306] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] close(4 [pid 306] lstat("./200/binderfs", [pid 309] <... close resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] rmdir("./191/bus" [pid 306] unlink("./200/binderfs" [pid 309] <... rmdir resumed>) = 0 [pid 306] <... unlink resumed>) = 0 [pid 309] getdents64(3, [pid 306] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./191") = 0 [pid 309] mkdir("./192", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [ 146.349194][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 146.362179][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 146.362668][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6272] close(4 [pid 6273] +++ exited with 0 +++ [pid 6272] <... close resumed>) = 0 [pid 6263] +++ exited with 0 +++ [pid 309] <... openat resumed>) = 3 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 6272] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6272] chdir("./file0" [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] close(3 [pid 6272] <... chdir resumed>) = 0 [pid 6265] <... futex resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6272] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6272] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6287 [pid 6265] <... futex resumed>) = 0 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6263, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6272] <... open resumed>) = 4 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6287 attached [pid 6272] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6272] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... mount resumed>) = 0 [pid 6265] <... futex resumed>) = 0 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6272] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6272] <... open resumed>) = 5 [pid 6265] <... futex resumed>) = 0 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6287] set_robust_list(0x55555748e5e0, 24 [pid 6272] <... futex resumed>) = 0 [pid 6265] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... set_robust_list resumed>) = 0 [pid 6272] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... openat resumed>) = 6 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... openat resumed>) = 3 [pid 6287] chdir("./192" [pid 308] fstat(3, [pid 6287] <... chdir resumed>) = 0 [pid 6272] <... futex resumed>) = 1 [pid 6265] <... futex resumed>) = 0 [pid 6272] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6287] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6265] <... futex resumed>) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6287] <... prctl resumed>) = 0 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] getdents64(3, [pid 6287] setpgid(0, 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6287] <... setpgid resumed>) = 0 [pid 308] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6287] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6287] <... openat resumed>) = 3 [pid 308] lstat("./197/binderfs", [pid 6287] write(3, "1000", 4 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6287] <... write resumed>) = 4 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] unlink("./197/binderfs" [pid 6287] close(3 [pid 310] lstat("./198/bus", [pid 6287] <... close resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... unlink resumed>) = 0 [pid 6287] symlink("/dev/binderfs", "./binderfs" [pid 310] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6287] <... symlink resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6287] <... futex resumed>) = 0 [pid 6287] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 310] <... openat resumed>) = 4 [pid 6287] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6287] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 310] fstat(4, [pid 6287] <... mprotect resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6287] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [ 146.375881][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] close(4) = 0 [pid 310] rmdir("./198/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./198") = 0 [pid 310] mkdir("./199", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6288 [pid 6272] <... write resumed>) = 262144 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... futex resumed>) = 0 [pid 6265] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6265] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6272] <... futex resumed>) = 1 [pid 6272] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6287] <... clone resumed>, parent_tid=[6289], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6289 [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6288 attached [pid 6288] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6288] chdir("./199") = 0 [pid 6288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6288] setpgid(0, 0) = 0 [pid 6288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6288] write(3, "1000", 4) = 4 [pid 6288] close(3) = 0 [pid 6288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6288] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6288] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6290], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6290 [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6289 attached [pid 6289] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6289] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6290 attached ) = 3 [pid 6289] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6290] set_robust_list(0x7f19bd6049e0, 24 [pid 6289] <... mmap resumed>) = 0x7f19b51e4000 [pid 6290] <... set_robust_list resumed>) = 0 [pid 6290] memfd_create("syzkaller", 0) = 3 [pid 6290] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6290] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6272] <... write resumed>) = 1048576 [pid 6272] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6265] <... futex resumed>) = 0 [pid 6265] exit_group(0) = ? [pid 6272] <... futex resumed>) = ? [pid 6272] +++ exited with 0 +++ [pid 6265] +++ exited with 0 +++ [pid 306] <... umount2 resumed>) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6265, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 306] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] lstat("./200/bus", [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] fstat(3, [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6289] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] getdents64(3, [pid 306] <... openat resumed>) = 4 [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] fstat(4, [pid 307] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./196/binderfs", [pid 306] getdents64(4, [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] unlink("./196/binderfs" [pid 306] getdents64(4, [pid 307] <... unlink resumed>) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] close(4) = 0 [ 146.430250][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 146.448009][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6290] <... write resumed>) = 1048576 [pid 6290] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6290] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6289] <... write resumed>) = 1048576 [pid 6289] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6289] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 306] rmdir("./200/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./200") = 0 [pid 306] mkdir("./201", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6290] <... openat resumed>) = 4 [pid 305] <... umount2 resumed>) = 0 [pid 6290] ioctl(4, LOOP_SET_FD, 3 [pid 305] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./195/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./195/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./195") = 0 [pid 305] mkdir("./196", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6290] <... ioctl resumed>) = 0 [pid 6290] close(3) = 0 [pid 6290] mkdir("./bus", 0777) = 0 [pid 6290] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6289] <... openat resumed>) = 4 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 6289] ioctl(4, LOOP_SET_FD, 3 [pid 307] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] lstat("./196/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./196/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./196") = 0 [pid 307] mkdir("./197", 0777) = 0 [ 146.490579][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 146.504036][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 6289] <... ioctl resumed>) = 0 [pid 308] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6289] close(3 [pid 306] close(3 [pid 305] close(3 [pid 6289] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 6289] mkdir("./bus", 0777 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6289] <... mkdir resumed>) = 0 [pid 6289] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6293 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6294 ./strace-static-x86_64: Process 6294 attached [pid 6294] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6294] chdir("./196") = 0 [pid 6294] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6294] setpgid(0, 0) = 0 [pid 6294] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6294] write(3, "1000", 4) = 4 [pid 6294] close(3) = 0 [pid 6294] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6294] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6294] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6294] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6293 attached [pid 6293] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6294] <... clone resumed>, parent_tid=[6295], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6295 [pid 307] <... openat resumed>) = 3 [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6293] chdir("./201") = 0 [pid 6293] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6293] setpgid(0, 0) = 0 [pid 6293] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6293] write(3, "1000", 4) = 4 [pid 6293] close(3) = 0 [pid 6293] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6293] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6296], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6296 [pid 6293] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6295 attached [pid 6295] set_robust_list(0x7f19bd6049e0, 24./strace-static-x86_64: Process 6296 attached [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] lstat("./197/bus", [pid 307] close(3 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... close resumed>) = 0 [pid 308] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6295] <... set_robust_list resumed>) = 0 [pid 6295] memfd_create("syzkaller", 0) = 3 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6300 [pid 6295] <... mmap resumed>) = 0x7f19b51e4000 [pid 308] <... openat resumed>) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, ./strace-static-x86_64: Process 6300 attached 0x555557497660 /* 2 entries */, 32768) = 48 [pid 6296] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6296] memfd_create("syzkaller", 0) = 3 [pid 6296] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4 [pid 6295] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 308] <... close resumed>) = 0 [pid 6300] set_robust_list(0x55555748e5e0, 24 [pid 6290] <... mount resumed>) = 0 [pid 308] rmdir("./197/bus" [pid 6300] <... set_robust_list resumed>) = 0 [pid 6290] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6300] chdir("./197" [pid 6290] <... openat resumed>) = 3 [pid 308] <... rmdir resumed>) = 0 [pid 6300] <... chdir resumed>) = 0 [pid 6290] chdir("./bus" [pid 308] getdents64(3, [pid 6300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6290] <... chdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6300] <... prctl resumed>) = 0 [pid 6290] ioctl(4, LOOP_CLR_FD [pid 308] close(3 [pid 6300] setpgid(0, 0 [pid 6290] <... ioctl resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 6300] <... setpgid resumed>) = 0 [pid 6290] close(4 [pid 308] rmdir("./197" [pid 6300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6290] <... close resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 6300] write(3, "1000", 4 [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] mkdir("./198", 0777 [pid 6300] <... write resumed>) = 4 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6300] close(3 [pid 6290] chdir("./file0" [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... mkdir resumed>) = 0 [pid 6300] <... close resumed>) = 0 [pid 6290] <... chdir resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6300] symlink("/dev/binderfs", "./binderfs" [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6300] <... symlink resumed>) = 0 [pid 6295] <... write resumed>) = 1048576 [pid 6290] <... futex resumed>) = 0 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... openat resumed>) = 3 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6290] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 308] ioctl(3, LOOP_CLR_FD [pid 6300] <... futex resumed>) = 0 [pid 6300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6300] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6296] <... write resumed>) = 1048576 [pid 6290] <... open resumed>) = 4 [pid 308] close(3 [pid 6300] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... close resumed>) = 0 [pid 6300] <... mprotect resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6300] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6288] <... futex resumed>) = 0 [pid 6300] <... clone resumed>, parent_tid=[6303], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6303 [pid 6290] <... mount resumed>) = 0 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6302 [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] <... futex resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6290] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6302 attached [pid 6290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6290] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6290] <... open resumed>) = 5 [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] set_robust_list(0x55555748e5e0, 24 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6302] <... set_robust_list resumed>) = 0 [pid 6290] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6303 attached [pid 6302] chdir("./198" [pid 6290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6303] set_robust_list(0x7f19bd6049e0, 24 [pid 6302] <... chdir resumed>) = 0 [pid 6290] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... set_robust_list resumed>) = 0 [pid 6295] munmap(0x7f19b51e4000, 1048576 [pid 6303] memfd_create("syzkaller", 0 [pid 6302] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6295] <... munmap resumed>) = 0 [pid 6290] <... openat resumed>) = 6 [pid 6303] <... memfd_create resumed>) = 3 [pid 6302] <... prctl resumed>) = 0 [pid 6295] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6302] setpgid(0, 0 [pid 6295] <... openat resumed>) = 4 [pid 6290] <... futex resumed>) = 1 [pid 6288] <... futex resumed>) = 0 [pid 6303] <... mmap resumed>) = 0x7f19b51e4000 [pid 6302] <... setpgid resumed>) = 0 [pid 6295] ioctl(4, LOOP_SET_FD, 3 [pid 6290] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6288] <... futex resumed>) = 0 [pid 6302] <... openat resumed>) = 3 [pid 6296] munmap(0x7f19b51e4000, 1048576 [pid 6290] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] write(3, "1000", 4 [pid 6296] <... munmap resumed>) = 0 [pid 6295] <... ioctl resumed>) = 0 [pid 6289] <... mount resumed>) = 0 [pid 6302] <... write resumed>) = 4 [pid 6296] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6295] close(3 [pid 6302] close(3 [pid 6296] <... openat resumed>) = 4 [pid 6295] <... close resumed>) = 0 [pid 6302] <... close resumed>) = 0 [pid 6296] ioctl(4, LOOP_SET_FD, 3 [pid 6295] mkdir("./bus", 0777 [pid 6302] symlink("/dev/binderfs", "./binderfs" [pid 6295] <... mkdir resumed>) = 0 [pid 6290] <... write resumed>) = 262144 [pid 6289] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6295] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6302] <... symlink resumed>) = 0 [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] <... openat resumed>) = 3 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6290] <... futex resumed>) = 1 [pid 6289] chdir("./bus" [pid 6288] <... futex resumed>) = 0 [pid 6302] <... futex resumed>) = 0 [pid 6290] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] <... chdir resumed>) = 0 [pid 6288] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6290] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] ioctl(4, LOOP_CLR_FD [pid 6288] <... futex resumed>) = 0 [ 146.620120][ T6290] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/199/bus supports timestamps until 2038 (0x7fffffff) [ 146.636635][ T6289] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/192/bus supports timestamps until 2038 (0x7fffffff) [pid 6302] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6290] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6288] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6302] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6296] <... ioctl resumed>) = 0 [pid 6296] close(3) = 0 [pid 6296] mkdir("./bus", 0777) = 0 [pid 6296] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6303] <... write resumed>) = 1048576 [pid 6303] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6303] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6303] ioctl(4, LOOP_SET_FD, 3 [pid 6302] <... mprotect resumed>) = 0 [pid 6302] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6307], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6307 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6307 attached [pid 6303] <... ioctl resumed>) = 0 [pid 6295] <... mount resumed>) = 0 [pid 6290] <... write resumed>) = 1048576 [pid 6289] <... ioctl resumed>) = 0 [pid 6307] set_robust_list(0x7f19bd6049e0, 24 [pid 6290] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] close(4 [pid 6307] <... set_robust_list resumed>) = 0 [pid 6290] <... futex resumed>) = 1 [pid 6289] <... close resumed>) = 0 [pid 6288] <... futex resumed>) = 0 [pid 6307] memfd_create("syzkaller", 0 [pid 6290] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6288] exit_group(0 [pid 6307] <... memfd_create resumed>) = 3 [pid 6290] <... futex resumed>) = ? [pid 6289] <... futex resumed>) = 1 [pid 6288] <... exit_group resumed>) = ? [pid 6287] <... futex resumed>) = 0 [pid 6307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6290] +++ exited with 0 +++ [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6288] +++ exited with 0 +++ [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] <... mmap resumed>) = 0x7f19b51e4000 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6288, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6289] chdir("./file0" [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] <... chdir resumed>) = 0 [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 3 [pid 6289] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] fstat(3, [pid 6303] close(3 [pid 6295] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6303] <... close resumed>) = 0 [pid 6295] <... openat resumed>) = 3 [pid 6289] <... open resumed>) = 4 [pid 310] getdents64(3, [pid 6307] <... write resumed>) = 1048576 [pid 6303] mkdir("./bus", 0777 [pid 6295] chdir("./bus" [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6295] <... chdir resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 310] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6295] ioctl(4, LOOP_CLR_FD [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6295] <... ioctl resumed>) = 0 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 310] lstat("./199/binderfs", [pid 6295] close(4 [pid 6289] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6303] <... mkdir resumed>) = 0 [pid 6295] <... close resumed>) = 0 [pid 6289] <... mount resumed>) = 0 [pid 310] unlink("./199/binderfs" [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... unlink resumed>) = 0 [pid 6303] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6295] <... futex resumed>) = 1 [pid 6294] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 310] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6295] chdir("./file0" [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... chdir resumed>) = 0 [pid 6294] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6295] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] <... open resumed>) = 5 [pid 6295] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... open resumed>) = 4 [pid 6294] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6295] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] munmap(0x7f19b51e4000, 1048576 [pid 6295] <... mount resumed>) = 0 [pid 6294] <... futex resumed>) = 0 [pid 6289] <... openat resumed>) = 6 [pid 6307] <... munmap resumed>) = 0 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6295] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6289] <... futex resumed>) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6307] <... openat resumed>) = 4 [pid 6295] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6307] ioctl(4, LOOP_SET_FD, 3 [pid 6295] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6294] <... futex resumed>) = 0 [pid 6289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6287] <... futex resumed>) = 0 [pid 6295] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 146.711688][ T6295] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/196/bus supports timestamps until 2038 (0x7fffffff) [ 146.741266][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6289] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6289] <... write resumed>) = 262144 [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6287] <... futex resumed>) = 0 [pid 6289] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6287] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... ioctl resumed>) = 0 [pid 6307] close(3) = 0 [pid 6307] mkdir("./bus", 0777) = 0 [pid 6307] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6295] <... open resumed>) = 5 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6294] <... futex resumed>) = 0 [pid 6295] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6295] <... openat resumed>) = 6 [pid 6294] <... futex resumed>) = 0 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6295] <... futex resumed>) = 0 [pid 6294] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6295] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6295] <... write resumed>) = 262144 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] <... futex resumed>) = 0 [pid 6294] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6294] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6295] <... futex resumed>) = 1 [ 146.764907][ T734] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 146.799195][ T6296] ext4 filesystem being mounted at /root/syzkaller.URAKkl/201/bus supports timestamps until 2038 (0x7fffffff) [pid 6295] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6287] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6289] <... write resumed>) = 1048576 [pid 6289] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6289] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6296] <... mount resumed>) = 0 [pid 6287] exit_group(0) = ? [pid 6289] <... futex resumed>) = ? [pid 6296] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6289] +++ exited with 0 +++ [pid 6287] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6287, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6294] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6295] <... write resumed>) = 1048576 [pid 6295] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6295] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6307] <... mount resumed>) = 0 [pid 6307] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6307] chdir("./bus") = 0 [pid 6307] ioctl(4, LOOP_CLR_FD) = 0 [pid 6307] close(4) = 0 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6294] exit_group(0 [pid 309] umount2("./192", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6294] <... exit_group resumed>) = ? [pid 6295] <... futex resumed>) = ? [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./192", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6295] +++ exited with 0 +++ [pid 6294] +++ exited with 0 +++ [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] chdir("./file0") = 0 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 309] <... openat resumed>) = 3 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6294, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] fstat(3, [pid 305] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] getdents64(3, [pid 305] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... openat resumed>) = 3 [pid 309] umount2("./192/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(3, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 309] lstat("./192/binderfs", [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./192/binderfs" [pid 305] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 146.809312][ T6307] ext4 filesystem being mounted at /root/syzkaller.69675s/198/bus supports timestamps until 2038 (0x7fffffff) [ 146.812609][ T6303] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/197/bus supports timestamps until 2038 (0x7fffffff) [pid 309] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6307] <... write resumed>) = 262144 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6302] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6307] <... futex resumed>) = 1 [pid 6307] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 305] unlink("./196/binderfs") = 0 [pid 305] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6296] <... openat resumed>) = 3 [pid 6296] chdir("./bus") = 0 [pid 6307] <... write resumed>) = 1048576 [pid 6307] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6302] <... futex resumed>) = 0 [pid 6302] exit_group(0) = ? [pid 6307] <... futex resumed>) = ? [pid 6296] ioctl(4, LOOP_CLR_FD [pid 6303] <... mount resumed>) = 0 [pid 6303] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6303] chdir("./bus") = 0 [ 146.855279][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 146.869135][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 146.892218][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6303] ioctl(4, LOOP_CLR_FD [pid 6307] +++ exited with 0 +++ [pid 6302] +++ exited with 0 +++ [pid 6296] <... ioctl resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6302, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 308] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./198/binderfs") = 0 [pid 308] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./199/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 6303] <... ioctl resumed>) = 0 [pid 6296] close(4 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6303] close(4 [pid 6296] <... close resumed>) = 0 [pid 6303] <... close resumed>) = 0 [pid 6296] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = 1 [pid 6303] <... futex resumed>) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6296] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6303] chdir("./file0" [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... chdir resumed>) = 0 [pid 6293] <... futex resumed>) = 0 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6303] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... open resumed>) = 4 [pid 6296] <... futex resumed>) = 0 [pid 6293] <... futex resumed>) = 1 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] chdir("./file0" [pid 6303] <... futex resumed>) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6296] <... chdir resumed>) = 0 [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = 0 [pid 6303] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] <... mount resumed>) = 0 [pid 310] getdents64(4, [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 310] close(4 [pid 6303] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... open resumed>) = 5 [pid 310] <... close resumed>) = 0 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6300] <... futex resumed>) = 0 [pid 310] rmdir("./199/bus" [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... rmdir resumed>) = 0 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = 0 [pid 6293] <... futex resumed>) = 1 [pid 310] getdents64(3, [pid 6303] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6303] <... openat resumed>) = 6 [pid 6296] <... open resumed>) = 4 [pid 310] close(3 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = 1 [pid 6300] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = 1 [pid 6293] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 6303] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6300] <... futex resumed>) = 0 [pid 6296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] rmdir("./199" [ 146.892849][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6303] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6296] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6293] <... futex resumed>) = 0 [pid 6303] <... write resumed>) = 262144 [pid 6296] <... mount resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 6296] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./200", 0777 [pid 6296] <... futex resumed>) = 0 [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... mkdir resumed>) = 0 [pid 6296] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] <... futex resumed>) = 0 [pid 6300] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6300] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... futex resumed>) = 1 [pid 6303] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6293] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6296] <... futex resumed>) = 0 [pid 6293] <... futex resumed>) = 1 [pid 6296] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6303] <... write resumed>) = 1048576 [pid 6303] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6300] <... futex resumed>) = 0 [pid 6300] exit_group(0) = ? [pid 6303] <... futex resumed>) = ? [pid 6293] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6293] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6293] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6293] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6293] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6293] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6317 attached [pid 6317] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 6317] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6293] <... clone resumed>, parent_tid=[6317], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6317 [pid 6293] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6317] <... futex resumed>) = 0 [pid 6317] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6293] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] <... openat resumed>) = 6 [pid 6317] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6317] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6293] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6317] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6293] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] <... write resumed>) = 262144 [pid 6317] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6293] <... futex resumed>) = 0 [pid 6317] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6293] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6317] <... write resumed>) = -1 EBADF (Bad file descriptor) [pid 6293] <... futex resumed>) = 0 [pid 6317] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6293] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6317] <... futex resumed>) = 0 [ 146.950882][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 146.971114][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6317] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6303] +++ exited with 0 +++ [pid 6300] +++ exited with 0 +++ [pid 6293] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 310] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] close(3) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6318 ./strace-static-x86_64: Process 6318 attached [pid 6318] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6318] chdir("./200") = 0 [pid 6318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6318] setpgid(0, 0) = 0 [pid 6318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6318] write(3, "1000", 4) = 4 [pid 6318] close(3) = 0 [pid 6318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6318] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6318] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6319], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6319 [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6319 attached [pid 6319] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6296] <... open resumed>) = 5 [pid 6296] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6300, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 6296] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6319] memfd_create("syzkaller", 0) = 3 [pid 6319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 307] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6293] exit_group(0 [pid 6317] <... futex resumed>) = ? [pid 6296] <... futex resumed>) = ? [pid 6293] <... exit_group resumed>) = ? [pid 307] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6296] +++ exited with 0 +++ [pid 307] <... openat resumed>) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, [pid 6319] <... write resumed>) = 1048576 [pid 6319] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6319] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./197/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./197/binderfs") = 0 [pid 307] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6317] +++ exited with 0 +++ [pid 6293] +++ exited with 0 +++ [pid 309] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6293, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] lstat("./196/bus", [pid 306] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, [pid 305] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./201/binderfs", [pid 305] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./201/binderfs" [pid 305] <... openat resumed>) = 4 [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./196/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./196") = 0 [pid 305] mkdir("./197", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./192/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./192/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./192/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./192/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./192") = 0 [pid 309] mkdir("./193", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6319] <... openat resumed>) = 4 [pid 308] <... umount2 resumed>) = 0 [pid 6319] ioctl(4, LOOP_SET_FD, 3 [pid 308] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./198/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 308] rmdir("./198/bus") = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./198") = 0 [pid 308] mkdir("./199", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6319] <... ioctl resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 6319] close(3 [pid 305] ioctl(3, LOOP_CLR_FD [pid 6319] <... close resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6319] mkdir("./bus", 0777 [pid 305] close(3 [pid 6319] <... mkdir resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 6319] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6321 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6321 attached [pid 6321] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6321] chdir("./197") = 0 [pid 6321] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6321] setpgid(0, 0) = 0 [pid 6321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6321] write(3, "1000", 4) = 4 [pid 6321] close(3) = 0 [pid 6321] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6321] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6321] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6322], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6322 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6322 attached [pid 6322] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6322] memfd_create("syzkaller", 0) = 3 [pid 6322] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [ 147.047776][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 147.061336][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6322] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6322] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6322] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... openat resumed>) = 3 [pid 307] <... umount2 resumed>) = 0 [pid 309] close(3 [pid 307] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 308] close(3) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6323 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6324 [pid 307] lstat("./197/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6322] <... openat resumed>) = 4 [pid 6322] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 6324 attached [pid 6324] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6324] chdir("./199") = 0 [pid 6324] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6324] setpgid(0, 0) = 0 [pid 6324] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6324] write(3, "1000", 4) = 4 [pid 6324] close(3) = 0 [pid 6324] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6324] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6324] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6326], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6326 [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6326 attached [pid 6326] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6326] memfd_create("syzkaller", 0) = 3 [pid 6326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 306] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./201/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... openat resumed>) = 4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] fstat(4, [pid 306] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] getdents64(4, [pid 306] close(4) = 0 [pid 306] rmdir("./201/bus" [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4 [pid 306] <... rmdir resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 307] rmdir("./197/bus" [pid 306] getdents64(3, [pid 307] <... rmdir resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] getdents64(3, [pid 306] close(3 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./201" [pid 307] close(3 [pid 306] <... rmdir resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] mkdir("./202", 0777 [pid 307] rmdir("./197" [pid 6322] <... ioctl resumed>) = 0 [pid 6322] close(3) = 0 [pid 6322] mkdir("./bus", 0777) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 306] <... mkdir resumed>) = 0 [pid 6322] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] mkdir("./198", 0777 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... mkdir resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] ioctl(3, LOOP_CLR_FD [pid 307] <... openat resumed>) = 3 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] close(3 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... close resumed>) = 0 [pid 307] close(3 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6329 ./strace-static-x86_64: Process 6329 attached [pid 6329] set_robust_list(0x55555748e5e0, 24 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6330 [pid 6329] <... set_robust_list resumed>) = 0 [pid 6329] chdir("./202"./strace-static-x86_64: Process 6330 attached [pid 6330] set_robust_list(0x55555748e5e0, 24 [pid 6329] <... chdir resumed>) = 0 [pid 6330] <... set_robust_list resumed>) = 0 [pid 6330] chdir("./198" [pid 6329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6329] setpgid(0, 0) = 0 [pid 6329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6330] <... chdir resumed>) = 0 [pid 6330] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6330] setpgid(0, 0) = 0 [pid 6329] <... openat resumed>) = 3 [pid 6330] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6329] write(3, "1000", 4) = 4 [pid 6329] close(3) = 0 [pid 6329] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6330] write(3, "1000", 4) = 4 [pid 6330] close(3) = 0 [pid 6330] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6329] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... mprotect resumed>) = 0 [pid 6330] <... futex resumed>) = 0 [pid 6330] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6329] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6330] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6330] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6330] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6329] <... clone resumed>, parent_tid=[6332], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6332 [pid 6330] <... clone resumed>, parent_tid=[6333], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6333 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = 0 [pid 6330] <... futex resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6323 attached [pid 6323] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6323] chdir("./193") = 0 [pid 6323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6323] setpgid(0, 0) = 0 [pid 6323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6323] write(3, "1000", 4) = 4 [pid 6323] close(3) = 0 [pid 6323] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6323] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6323] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6334], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6334 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6334 attached ./strace-static-x86_64: Process 6333 attached ./strace-static-x86_64: Process 6332 attached [pid 6333] set_robust_list(0x7f19bd6049e0, 24 [pid 6332] set_robust_list(0x7f19bd6049e0, 24 [pid 6333] <... set_robust_list resumed>) = 0 [pid 6332] <... set_robust_list resumed>) = 0 [pid 6333] memfd_create("syzkaller", 0 [pid 6332] memfd_create("syzkaller", 0 [pid 6334] set_robust_list(0x7f19bd6049e0, 24 [pid 6333] <... memfd_create resumed>) = 3 [pid 6332] <... memfd_create resumed>) = 3 [pid 6334] <... set_robust_list resumed>) = 0 [pid 6333] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6332] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6319] <... mount resumed>) = 0 [pid 6334] memfd_create("syzkaller", 0 [pid 6333] <... mmap resumed>) = 0x7f19b51e4000 [pid 6332] <... mmap resumed>) = 0x7f19b51e4000 [pid 6319] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6322] <... mount resumed>) = 0 [pid 6322] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6322] chdir("./bus") = 0 [pid 6322] ioctl(4, LOOP_CLR_FD) = 0 [pid 6322] close(4) = 0 [pid 6334] <... memfd_create resumed>) = 3 [pid 6334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... futex resumed>) = 1 [pid 6326] <... write resumed>) = 1048576 [pid 6322] chdir("./file0") = 0 [pid 6326] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6332] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... futex resumed>) = 1 [pid 6322] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6326] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6326] ioctl(4, LOOP_SET_FD, 3 [pid 6322] <... open resumed>) = 4 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... futex resumed>) = 1 [pid 6322] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... futex resumed>) = 1 [pid 6322] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6333] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6319] <... openat resumed>) = 3 [pid 6319] chdir("./bus") = 0 [pid 6319] ioctl(4, LOOP_CLR_FD [pid 6326] <... ioctl resumed>) = 0 [pid 6326] close(3) = 0 [pid 6326] mkdir("./bus", 0777) = 0 [pid 6326] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6322] <... open resumed>) = 5 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6322] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... ioctl resumed>) = 0 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... openat resumed>) = 6 [pid 6319] close(4 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... close resumed>) = 0 [pid 6322] <... futex resumed>) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 147.170179][ T6319] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/200/bus supports timestamps until 2038 (0x7fffffff) [ 147.207650][ T6322] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/197/bus supports timestamps until 2038 (0x7fffffff) [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6319] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6319] chdir("./file0") = 0 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6319] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6318] <... futex resumed>) = 0 [pid 6319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... open resumed>) = 4 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6334] <... write resumed>) = 1048576 [pid 6319] <... mount resumed>) = 0 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6319] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6319] <... open resumed>) = 5 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6334] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6334] ioctl(4, LOOP_SET_FD, 3 [pid 6319] <... openat resumed>) = 6 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] <... write resumed>) = 1048576 [pid 6332] <... write resumed>) = 1048576 [pid 6322] <... write resumed>) = 262144 [pid 6319] <... futex resumed>) = 1 [pid 6333] munmap(0x7f19b51e4000, 1048576 [pid 6332] munmap(0x7f19b51e4000, 1048576 [pid 6319] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6333] <... munmap resumed>) = 0 [pid 6332] <... munmap resumed>) = 0 [pid 6333] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6332] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6321] <... futex resumed>) = 0 [pid 6321] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6321] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6322] <... futex resumed>) = 1 [pid 6322] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6318] <... futex resumed>) = 0 [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6319] <... futex resumed>) = 0 [pid 6318] <... futex resumed>) = 1 [pid 6319] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... ioctl resumed>) = 0 [pid 6333] <... openat resumed>) = 4 [pid 6332] <... openat resumed>) = 4 [pid 6326] <... mount resumed>) = 0 [pid 6334] close(3 [pid 6333] ioctl(4, LOOP_SET_FD, 3 [pid 6332] ioctl(4, LOOP_SET_FD, 3 [pid 6326] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6334] <... close resumed>) = 0 [pid 6326] <... openat resumed>) = 3 [pid 6319] <... write resumed>) = 262144 [pid 6334] mkdir("./bus", 0777 [pid 6326] chdir("./bus" [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... mkdir resumed>) = 0 [pid 6326] <... chdir resumed>) = 0 [pid 6319] <... futex resumed>) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6334] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6326] ioctl(4, LOOP_CLR_FD [pid 6319] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6322] <... write resumed>) = 1048576 [pid 6319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6318] <... futex resumed>) = 0 [pid 6333] <... ioctl resumed>) = 0 [pid 6332] <... ioctl resumed>) = 0 [pid 6322] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6321] <... futex resumed>) = 0 [pid 6322] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6321] exit_group(0 [pid 6322] <... futex resumed>) = ? [pid 6321] <... exit_group resumed>) = ? [pid 6333] close(3 [pid 6332] close(3 [pid 6326] <... ioctl resumed>) = 0 [pid 6322] +++ exited with 0 +++ [pid 6321] +++ exited with 0 +++ [pid 6319] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6318] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... close resumed>) = 0 [pid 6332] <... close resumed>) = 0 [pid 6326] close(4 [pid 6333] mkdir("./bus", 0777 [pid 6332] mkdir("./bus", 0777 [pid 6326] <... close resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6321, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 305] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, [pid 6333] <... mkdir resumed>) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, [pid 6332] <... mkdir resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6333] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6332] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6326] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 147.273044][ T6326] ext4 filesystem being mounted at /root/syzkaller.69675s/199/bus supports timestamps until 2038 (0x7fffffff) [pid 305] lstat("./197/binderfs", [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./197/binderfs" [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] <... futex resumed>) = 0 [pid 305] <... unlink resumed>) = 0 [pid 305] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6326] chdir("./file0") = 0 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = 0 [pid 6324] <... futex resumed>) = 1 [pid 6326] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [ 147.328038][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 147.346319][ T6334] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/193/bus supports timestamps until 2038 (0x7fffffff) [ 147.347026][ T6332] ext4 filesystem being mounted at /root/syzkaller.URAKkl/202/bus supports timestamps until 2038 (0x7fffffff) [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... mount resumed>) = 0 [pid 6319] <... write resumed>) = 1048576 [pid 6319] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6318] <... futex resumed>) = 0 [pid 6319] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6318] exit_group(0 [pid 6319] <... futex resumed>) = ? [pid 6318] <... exit_group resumed>) = ? [pid 6319] +++ exited with 0 +++ [pid 6318] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6318, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./200/binderfs") = 0 [pid 310] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6334] chdir("./bus") = 0 [pid 6334] ioctl(4, LOOP_CLR_FD) = 0 [pid 6334] close(4) = 0 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... futex resumed>) = 0 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 1 [pid 6334] chdir("./file0" [pid 6326] <... open resumed>) = 4 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] <... futex resumed>) = 0 [pid 6326] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... mount resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] <... futex resumed>) = 0 [pid 6326] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... open resumed>) = 5 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] <... futex resumed>) = 0 [pid 6326] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... openat resumed>) = 6 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6326] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6324] <... futex resumed>) = 0 [pid 6326] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... write resumed>) = 262144 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6324] <... futex resumed>) = 0 [pid 6324] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6324] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = 1 [pid 6326] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6334] <... chdir resumed>) = 0 [pid 6333] <... mount resumed>) = 0 [pid 6332] <... mount resumed>) = 0 [pid 6332] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6332] chdir("./bus") = 0 [pid 6332] ioctl(4, LOOP_CLR_FD) = 0 [ 147.373244][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 147.386551][ T6333] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/198/bus supports timestamps until 2038 (0x7fffffff) [ 147.398923][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6332] close(4 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6333] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6332] <... close resumed>) = 0 [pid 6326] <... write resumed>) = 1048576 [pid 6323] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6334] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6326] <... futex resumed>) = 1 [pid 6324] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = 0 [pid 6326] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6324] exit_group(0 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6326] <... futex resumed>) = ? [pid 6324] <... exit_group resumed>) = ? [pid 6326] +++ exited with 0 +++ [pid 6324] +++ exited with 0 +++ [pid 6333] <... openat resumed>) = 3 [pid 6333] chdir("./bus") = 0 [pid 6333] ioctl(4, LOOP_CLR_FD) = 0 [pid 6333] close(4) = 0 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] chdir("./file0") = 0 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] <... futex resumed>) = 1 [pid 6333] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6324, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 6334] <... open resumed>) = 4 [pid 6332] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = 0 [pid 6334] <... futex resumed>) = 1 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... futex resumed>) = 0 [pid 6334] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... mount resumed>) = 0 [pid 6323] <... futex resumed>) = 0 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6334] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... open resumed>) = 5 [pid 6323] <... futex resumed>) = 0 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 0 [pid 6323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6334] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] <... openat resumed>) = 6 [pid 6332] chdir("./file0" [pid 6323] <... futex resumed>) = 0 [pid 308] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 0 [pid 6332] <... chdir resumed>) = 0 [pid 6323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6332] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6334] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 308] <... openat resumed>) = 3 [pid 6329] <... futex resumed>) = 0 [pid 6334] <... write resumed>) = 262144 [pid 6333] <... write resumed>) = 262144 [pid 6332] <... open resumed>) = 4 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6323] <... futex resumed>) = 0 [pid 308] fstat(3, [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6332] <... futex resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] getdents64(3, [pid 6332] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6329] <... futex resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... mount resumed>) = 0 [pid 308] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6323] <... futex resumed>) = 0 [pid 6323] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6323] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 1 [pid 6334] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6332] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6332] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 308] lstat("./199/binderfs", [pid 6332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6329] <... futex resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6332] <... open resumed>) = 5 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 308] unlink("./199/binderfs" [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 308] <... unlink resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6332] <... futex resumed>) = 0 [pid 6329] <... futex resumed>) = 0 [pid 308] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6332] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... openat resumed>) = 6 [ 147.416451][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6333] <... futex resumed>) = 1 [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6330] <... futex resumed>) = 0 [pid 6330] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6330] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6333] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6332] <... futex resumed>) = 1 [pid 6329] <... futex resumed>) = 0 [pid 6334] <... write resumed>) = 1048576 [pid 6332] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6334] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6334] <... futex resumed>) = 1 [pid 6323] <... futex resumed>) = 0 [pid 6334] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6323] exit_group(0) = ? [pid 6334] <... futex resumed>) = ? [pid 6332] <... write resumed>) = 262144 [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6329] <... futex resumed>) = 0 [pid 6329] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6329] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6332] <... futex resumed>) = 1 [pid 6332] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 305] <... umount2 resumed>) = 0 [pid 6334] +++ exited with 0 +++ [pid 6323] +++ exited with 0 +++ [pid 305] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6323, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] umount2("./193", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./193", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./193/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./197/bus", [pid 309] lstat("./193/binderfs", [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./193/binderfs" [pid 305] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6330] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] <... unlink resumed>) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 147.449450][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 147.465949][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6333] <... write resumed>) = 1048576 [pid 6333] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6333] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6330] exit_group(0) = ? [pid 6333] <... futex resumed>) = ? [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6332] <... write resumed>) = 1048576 [pid 305] getdents64(4, [pid 6332] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6332] <... futex resumed>) = 0 [pid 6332] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] getdents64(4, [pid 6329] exit_group(0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./197/bus" [pid 6332] <... futex resumed>) = ? [pid 6329] <... exit_group resumed>) = ? [pid 305] <... rmdir resumed>) = 0 [pid 6332] +++ exited with 0 +++ [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./197") = 0 [pid 305] mkdir("./198", 0777) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6333] +++ exited with 0 +++ [pid 6330] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6330, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./198/binderfs") = 0 [ 147.515162][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 147.534381][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6329] +++ exited with 0 +++ [pid 305] <... openat resumed>) = 3 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6329, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./202/binderfs") = 0 [pid 306] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] ioctl(3, LOOP_CLR_FD [pid 310] <... umount2 resumed>) = 0 [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] lstat("./200/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./200/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./200") = 0 [ 147.559412][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 147.572841][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 147.601237][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 310] mkdir("./201", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 308] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6348 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./199/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6348 attached ) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6348] set_robust_list(0x55555748e5e0, 24 [pid 308] <... openat resumed>) = 4 [pid 6348] <... set_robust_list resumed>) = 0 [pid 308] fstat(4, [pid 6348] chdir("./198" [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6348] <... chdir resumed>) = 0 [pid 308] getdents64(4, [pid 6348] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6348] <... prctl resumed>) = 0 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 6348] setpgid(0, 0 [pid 308] close(4 [pid 6348] <... setpgid resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./199/bus" [pid 6348] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] <... rmdir resumed>) = 0 [pid 6348] write(3, "1000", 4 [pid 308] getdents64(3, [pid 6348] <... write resumed>) = 4 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./199") = 0 [pid 308] mkdir("./200", 0777) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 6348] close(3 [pid 310] <... openat resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 309] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6348] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./193/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./193/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./193/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6348] symlink("/dev/binderfs", "./binderfs" [pid 310] ioctl(3, LOOP_CLR_FD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6349 [pid 309] getdents64(4, [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 6348] <... symlink resumed>) = 0 [pid 310] close(3 [pid 309] rmdir("./193/bus" [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... close resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 6350 attached [pid 6348] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6348] <... mmap resumed>) = 0x7f19bd5e4000 [pid 309] close(3) = 0 [pid 309] rmdir("./193" [pid 6350] set_robust_list(0x55555748e5e0, 24 [pid 6348] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6350 [pid 309] <... rmdir resumed>) = 0 [pid 309] mkdir("./194", 0777 [pid 6350] <... set_robust_list resumed>) = 0 [pid 6348] <... mprotect resumed>) = 0 [pid 6350] chdir("./201" [pid 6348] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6351 attached [pid 6350] <... chdir resumed>) = 0 [pid 309] <... mkdir resumed>) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 6352 attached [pid 6351] set_robust_list(0x7f19bd6049e0, 24 [pid 6350] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6348] <... clone resumed>, parent_tid=[6351], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6351 [pid 6352] set_robust_list(0x55555748e5e0, 24 [pid 6351] <... set_robust_list resumed>) = 0 [pid 6350] <... prctl resumed>) = 0 [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6352 [pid 6348] <... futex resumed>) = 0 [pid 6350] setpgid(0, 0 [pid 6352] <... set_robust_list resumed>) = 0 [pid 6351] memfd_create("syzkaller", 0 [pid 6350] <... setpgid resumed>) = 0 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6350] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6351] <... memfd_create resumed>) = 3 [pid 6350] write(3, "1000", 4 [pid 6352] chdir("./194" [pid 6351] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6350] <... write resumed>) = 4 ./strace-static-x86_64: Process 6349 attached [pid 6349] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6352] <... chdir resumed>) = 0 [pid 6351] <... mmap resumed>) = 0x7f19b51e4000 [pid 6350] close(3) = 0 [pid 6350] symlink("/dev/binderfs", "./binderfs" [pid 6349] chdir("./200" [pid 6350] <... symlink resumed>) = 0 [pid 6349] <... chdir resumed>) = 0 [pid 6349] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6349] setpgid(0, 0 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] <... setpgid resumed>) = 0 [pid 6350] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6350] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6350] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6349] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6349] write(3, "1000", 4) = 4 [pid 6350] <... clone resumed>, parent_tid=[6353], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6353 [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] close(3 [pid 6350] <... futex resumed>) = 0 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6349] <... close resumed>) = 0 [pid 6349] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6349] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6349] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6354], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6354 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6353 attached [pid 6353] set_robust_list(0x7f19bd6049e0, 24) = 0 [ 147.616925][ T344] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6353] memfd_create("syzkaller", 0) = 3 [pid 6353] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6352] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6352] setpgid(0, 0) = 0 [pid 6352] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6352] write(3, "1000", 4) = 4 [pid 6352] close(3) = 0 [pid 6352] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6354 attached [pid 6351] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6352] <... futex resumed>) = 0 [pid 6352] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6352] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6352] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6355], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6355 [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6354] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6354] memfd_create("syzkaller", 0) = 3 [pid 6354] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6353] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 6355 attached [pid 6355] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6355] memfd_create("syzkaller", 0) = 3 [pid 6355] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6354] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6351] <... write resumed>) = 1048576 [pid 6351] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6351] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6354] <... write resumed>) = 1048576 [pid 6354] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6354] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6353] <... write resumed>) = 1048576 [pid 6353] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6353] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6355] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6355] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6355] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6354] <... openat resumed>) = 4 [pid 307] <... umount2 resumed>) = 0 [pid 6354] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6354] close(3) = 0 [pid 6354] mkdir("./bus", 0777) = 0 [pid 6354] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./198/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./198/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6354] <... mount resumed>) = 0 [pid 6354] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6354] chdir("./bus") = 0 [pid 6354] ioctl(4, LOOP_CLR_FD [pid 307] close(3) = 0 [pid 307] rmdir("./198") = 0 [pid 307] mkdir("./199", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6355] <... openat resumed>) = 4 [pid 6354] <... ioctl resumed>) = 0 [pid 6353] <... openat resumed>) = 4 [pid 6351] <... openat resumed>) = 4 [pid 307] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 6355] ioctl(4, LOOP_SET_FD, 3 [pid 6353] ioctl(4, LOOP_SET_FD, 3 [pid 6351] ioctl(4, LOOP_SET_FD, 3 [pid 6355] <... ioctl resumed>) = 0 [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6355] close(3) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6355] mkdir("./bus", 0777 [pid 306] lstat("./202/bus", [pid 6355] <... mkdir resumed>) = 0 [pid 6354] close(4 [pid 6353] <... ioctl resumed>) = 0 [pid 6351] <... ioctl resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6355] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6354] <... close resumed>) = 0 [pid 6353] close(3 [pid 307] close(3 [pid 306] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6353] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6353] mkdir("./bus", 0777 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [ 147.755681][ T6354] ext4 filesystem being mounted at /root/syzkaller.69675s/200/bus supports timestamps until 2038 (0x7fffffff) [pid 6353] <... mkdir resumed>) = 0 [pid 306] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6362 attached [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6351] close(3 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6362 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./202/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./202" [pid 6354] <... futex resumed>) = 1 [pid 306] <... rmdir resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] mkdir("./203", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 306] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 6362] set_robust_list(0x55555748e5e0, 24 [pid 6355] <... mount resumed>) = 0 [pid 6351] <... close resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 6362] <... set_robust_list resumed>) = 0 [pid 6355] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6351] mkdir("./bus", 0777 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6362] chdir("./199" [pid 6355] <... openat resumed>) = 3 [pid 6353] <... mount resumed>) = 0 [pid 6351] <... mkdir resumed>) = 0 [pid 6349] <... futex resumed>) = 1 [pid 6362] <... chdir resumed>) = 0 [pid 6355] chdir("./bus" [pid 6351] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6367 attached [pid 6362] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6355] <... chdir resumed>) = 0 [pid 6354] <... futex resumed>) = 0 [pid 6353] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6362] <... prctl resumed>) = 0 [pid 6355] ioctl(4, LOOP_CLR_FD [pid 6362] setpgid(0, 0 [pid 6355] <... ioctl resumed>) = 0 [pid 6354] chdir("./file0" [pid 6353] <... openat resumed>) = 3 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6367 [pid 6362] <... setpgid resumed>) = 0 [pid 6355] close(4 [pid 6367] set_robust_list(0x55555748e5e0, 24 [pid 6362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6354] <... chdir resumed>) = 0 [pid 6353] chdir("./bus" [pid 6367] <... set_robust_list resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... chdir resumed>) = 0 [pid 6367] chdir("./203" [pid 6354] <... futex resumed>) = 1 [pid 6353] ioctl(4, LOOP_CLR_FD [pid 6349] <... futex resumed>) = 0 [pid 6367] <... chdir resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] <... ioctl resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] close(4 [pid 6349] <... futex resumed>) = 0 [pid 6367] <... prctl resumed>) = 0 [pid 6354] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6353] <... close resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] setpgid(0, 0 [pid 6362] <... openat resumed>) = 3 [pid 6354] <... open resumed>) = 4 [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... setpgid resumed>) = 0 [pid 6353] <... futex resumed>) = 1 [pid 6350] <... futex resumed>) = 0 [pid 6367] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... openat resumed>) = 3 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6350] <... futex resumed>) = 0 [pid 6367] write(3, "1000", 4 [pid 6353] chdir("./file0" [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... write resumed>) = 4 [pid 6353] <... chdir resumed>) = 0 [pid 6367] close(3 [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... close resumed>) = 0 [pid 6353] <... futex resumed>) = 1 [pid 6350] <... futex resumed>) = 0 [pid 6367] symlink("/dev/binderfs", "./binderfs" [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... symlink resumed>) = 0 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6350] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] write(3, "1000", 4 [pid 6355] <... close resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... futex resumed>) = 0 [pid 6362] <... write resumed>) = 4 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... futex resumed>) = 1 [pid 6353] <... open resumed>) = 4 [pid 6349] <... futex resumed>) = 0 [pid 6367] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6362] close(3 [pid 6355] <... futex resumed>) = 1 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6362] <... close resumed>) = 0 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] <... futex resumed>) = 1 [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] <... futex resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6367] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6362] symlink("/dev/binderfs", "./binderfs" [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... futex resumed>) = 0 [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] <... mprotect resumed>) = 0 [pid 6362] <... symlink resumed>) = 0 [pid 6355] chdir("./file0" [pid 6354] <... mount resumed>) = 0 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] <... futex resumed>) = 0 [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... chdir resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6362] <... futex resumed>) = 0 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... futex resumed>) = 1 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] <... futex resumed>) = 0 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6355] <... futex resumed>) = 1 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... mount resumed>) = 0 [pid 6362] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... futex resumed>) = 0 [pid 6367] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6362] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6353] <... futex resumed>) = 1 [pid 6352] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] <... mprotect resumed>) = 0 [ 147.818195][ T6355] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/194/bus supports timestamps until 2038 (0x7fffffff) [ 147.831621][ T6353] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/201/bus supports timestamps until 2038 (0x7fffffff) [pid 6355] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6354] <... open resumed>) = 5 [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... clone resumed>, parent_tid=[6370], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6370 [pid 6362] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6355] <... open resumed>) = 4 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... futex resumed>) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6362] <... clone resumed>, parent_tid=[6371], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6371 [pid 6355] <... futex resumed>) = 1 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 0 [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6355] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6354] <... openat resumed>) = 6 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6355] <... mount resumed>) = 0 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] <... futex resumed>) = 1 [pid 6349] <... futex resumed>) = 0 [pid 6355] <... futex resumed>) = 1 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] <... futex resumed>) = 0 [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6352] <... futex resumed>) = 0 [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6355] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6354] <... write resumed>) = 262144 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6355] <... open resumed>) = 5 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6354] <... futex resumed>) = 1 [pid 6352] <... futex resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] <... futex resumed>) = 0 [pid 6349] <... futex resumed>) = 0 [pid 6355] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6354] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6349] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6355] <... openat resumed>) = 6 [pid 6353] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6350] <... futex resumed>) = 0 [pid 6367] <... futex resumed>) = 0 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... open resumed>) = 5 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6355] <... futex resumed>) = 1 [pid 6352] <... futex resumed>) = 0 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6371 attached ./strace-static-x86_64: Process 6370 attached [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] <... futex resumed>) = 0 [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... mount resumed>) = 0 [pid 6350] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] set_robust_list(0x7f19bd6049e0, 24 [pid 6370] set_robust_list(0x7f19bd6049e0, 24 [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] <... futex resumed>) = 0 [pid 6351] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... set_robust_list resumed>) = 0 [pid 6370] <... set_robust_list resumed>) = 0 [pid 6355] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... openat resumed>) = 3 [pid 6350] <... futex resumed>) = 0 [pid 6371] memfd_create("syzkaller", 0 [pid 6353] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6351] chdir("./bus" [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... memfd_create resumed>) = 3 [pid 6353] <... openat resumed>) = 6 [pid 6351] <... chdir resumed>) = 0 [pid 6371] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] ioctl(4, LOOP_CLR_FD [pid 6371] <... mmap resumed>) = 0x7f19b51e4000 [pid 6353] <... futex resumed>) = 1 [pid 6351] <... ioctl resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [pid 6371] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6370] memfd_create("syzkaller", 0 [pid 6355] <... write resumed>) = 262144 [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] close(4 [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6370] <... memfd_create resumed>) = 3 [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6351] <... close resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [pid 6353] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6355] <... futex resumed>) = 1 [pid 6353] <... write resumed>) = 262144 [pid 6352] <... futex resumed>) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6370] <... mmap resumed>) = 0x7f19b51e4000 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6353] <... futex resumed>) = 1 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6350] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6351] chdir("./file0" [pid 6350] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6353] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6351] <... chdir resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [pid 6353] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6350] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... write resumed>) = 1048576 [pid 6370] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6355] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6354] <... write resumed>) = 1048576 [pid 6352] <... futex resumed>) = 0 [pid 6351] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6371] munmap(0x7f19b51e4000, 1048576 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6351] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... open resumed>) = 4 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6351] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... mount resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 147.878062][ T6351] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/198/bus supports timestamps until 2038 (0x7fffffff) [pid 6348] <... futex resumed>) = 0 [pid 6370] <... write resumed>) = 1048576 [pid 6355] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6354] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6352] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... munmap resumed>) = 0 [pid 6354] <... futex resumed>) = 1 [pid 6351] <... open resumed>) = 5 [pid 6349] <... futex resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6351] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6351] <... openat resumed>) = 6 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6348] <... futex resumed>) = 0 [pid 6351] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6348] <... futex resumed>) = 0 [pid 6351] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6370] munmap(0x7f19b51e4000, 1048576 [pid 6354] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6349] exit_group(0 [pid 6371] <... openat resumed>) = 4 [pid 6370] <... munmap resumed>) = 0 [pid 6355] <... write resumed>) = 1048576 [pid 6354] <... futex resumed>) = ? [pid 6353] <... write resumed>) = 1048576 [pid 6351] <... write resumed>) = 262144 [pid 6349] <... exit_group resumed>) = ? [pid 6371] ioctl(4, LOOP_SET_FD, 3 [pid 6370] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6355] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6354] +++ exited with 0 +++ [pid 6353] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6349] +++ exited with 0 +++ [pid 6351] <... futex resumed>) = 1 [pid 6348] <... futex resumed>) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6349, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6351] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6348] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... ioctl resumed>) = 0 [pid 6370] <... openat resumed>) = 4 [pid 6355] <... futex resumed>) = 1 [pid 6353] <... futex resumed>) = 1 [pid 6352] <... futex resumed>) = 0 [pid 6350] <... futex resumed>) = 0 [pid 6348] <... futex resumed>) = 0 [pid 6371] close(3 [pid 6370] ioctl(4, LOOP_SET_FD, 3 [pid 6355] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6353] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6352] exit_group(0 [pid 6350] exit_group(0 [pid 6348] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... close resumed>) = 0 [pid 6355] <... futex resumed>) = ? [pid 6352] <... exit_group resumed>) = ? [pid 6371] mkdir("./bus", 0777 [pid 6355] +++ exited with 0 +++ [pid 6353] <... futex resumed>) = ? [pid 6350] <... exit_group resumed>) = ? [pid 6371] <... mkdir resumed>) = 0 [pid 6353] +++ exited with 0 +++ [pid 6371] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6370] <... ioctl resumed>) = 0 [pid 6352] +++ exited with 0 +++ [pid 6350] +++ exited with 0 +++ [pid 6370] close(3) = 0 [pid 6370] mkdir("./bus", 0777) = 0 [pid 308] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6350, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6352, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 308] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6351] <... write resumed>) = 1048576 [pid 310] <... restart_syscall resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./194", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] getdents64(3, [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] openat(AT_FDCWD, "./194", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6351] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6348] <... futex resumed>) = 0 [pid 6348] exit_group(0) = ? [pid 6351] <... futex resumed>) = ? [pid 6351] +++ exited with 0 +++ [pid 6348] +++ exited with 0 +++ [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 308] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./200/binderfs") = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6348, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 310] fstat(3, [pid 309] fstat(3, [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, [pid 309] getdents64(3, [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] umount2("./194/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] lstat("./201/binderfs", [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] <... openat resumed>) = 3 [pid 309] lstat("./194/binderfs", [pid 310] unlink("./201/binderfs" [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] fstat(3, [pid 310] <... unlink resumed>) = 0 [pid 309] unlink("./194/binderfs" [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... unlink resumed>) = 0 [pid 305] getdents64(3, [pid 309] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./198/binderfs") = 0 [pid 305] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6370] <... mount resumed>) = 0 [pid 6370] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] chdir("./bus") = 0 [pid 6370] ioctl(4, LOOP_CLR_FD) = 0 [pid 6370] close(4) = 0 [ 147.998255][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 148.009940][ T6370] ext4 filesystem being mounted at /root/syzkaller.URAKkl/203/bus supports timestamps until 2038 (0x7fffffff) [ 148.012112][ T6371] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/199/bus supports timestamps until 2038 (0x7fffffff) [ 148.034514][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] chdir("./file0") = 0 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6367] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6370] <... futex resumed>) = 1 [pid 6370] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6371] <... mount resumed>) = 0 [ 148.034682][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 148.048247][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 148.074034][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6370] <... write resumed>) = 1048576 [pid 6370] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6367] <... futex resumed>) = 0 [pid 6367] exit_group(0) = ? [pid 6370] <... futex resumed>) = ? [pid 6371] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6370] +++ exited with 0 +++ [pid 6367] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6367, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 306] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6371] chdir("./bus" [pid 306] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./203/binderfs", [pid 6371] <... chdir resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./203/binderfs") = 0 [pid 306] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 148.088280][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 148.096218][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 148.120380][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.124125][ T381] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6371] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./194/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./194/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] close(4 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./194/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./194/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./194") = 0 [pid 309] mkdir("./195", 0777) = 0 [ 148.147063][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6371] <... close resumed>) = 0 [pid 310] <... umount2 resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] <... futex resumed>) = 0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 6371] chdir("./file0") = 0 [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6362] <... futex resumed>) = 0 [pid 6371] <... open resumed>) = 4 [pid 310] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] <... futex resumed>) = 0 [pid 305] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6371] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 6371] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6371] <... mount resumed>) = 0 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6371] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 310] lstat("./201/bus", [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] lstat("./198/bus", [pid 6371] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6371] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] lstat("./200/bus", [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 4 [pid 308] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 305] fstat(4, [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 305] getdents64(4, [pid 308] <... openat resumed>) = 4 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, [pid 308] fstat(4, [pid 310] getdents64(4, [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] close(4 [pid 308] getdents64(4, [pid 305] close(4 [pid 310] <... close resumed>) = 0 [pid 310] rmdir("./201/bus" [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... close resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 308] getdents64(4, [pid 305] rmdir("./198/bus" [pid 310] getdents64(3, [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3 [pid 308] close(4 [pid 305] getdents64(3, [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./200/bus" [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... close resumed>) = 0 [pid 310] rmdir("./201" [pid 308] <... rmdir resumed>) = 0 [pid 305] close(3 [pid 310] <... rmdir resumed>) = 0 [pid 308] getdents64(3, [pid 305] <... close resumed>) = 0 [pid 310] mkdir("./202", 0777 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] rmdir("./198" [pid 310] <... mkdir resumed>) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 308] close(3 [pid 305] <... rmdir resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] mkdir("./199", 0777 [pid 308] rmdir("./200") = 0 [pid 308] mkdir("./201", 0777 [pid 305] <... mkdir resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6362] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6362] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6362] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6362] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6371] <... open resumed>) = 5 [pid 310] <... openat resumed>) = 3 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... openat resumed>) = 3 [pid 306] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6371] <... futex resumed>) = 0 [pid 6362] <... clone resumed>, parent_tid=[6378], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6378 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] close(3 [pid 308] ioctl(3, LOOP_CLR_FD [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6378 attached [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... close resumed>) = 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6378] set_robust_list(0x7f19b52e39e0, 24 [pid 6362] <... futex resumed>) = 0 [pid 310] close(3 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] close(3 [pid 305] close(3 [pid 6378] <... set_robust_list resumed>) = 0 [pid 6362] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... close resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 6378] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6379 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] lstat("./203/bus", [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6378] <... openat resumed>) = 6 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6378] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6380 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6381 [pid 306] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6382 [pid 6378] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6380 attached [pid 6378] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 6379 attached [pid 6380] set_robust_list(0x55555748e5e0, 24 [pid 6371] <... futex resumed>) = 0 [pid 6362] <... futex resumed>) = 1 [pid 306] <... openat resumed>) = 4 [pid 6380] <... set_robust_list resumed>) = 0 [pid 6379] set_robust_list(0x55555748e5e0, 24 [pid 6371] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] fstat(4, ./strace-static-x86_64: Process 6382 attached [pid 6382] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6382] chdir("./199") = 0 [pid 6382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6382] setpgid(0, 0) = 0 [pid 6382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6371] <... write resumed>) = 262144 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6382] <... openat resumed>) = 3 [pid 6380] chdir("./202" [pid 6379] <... set_robust_list resumed>) = 0 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] getdents64(4, [pid 6382] write(3, "1000", 4 [pid 6380] <... chdir resumed>) = 0 [pid 6379] chdir("./195" [pid 6371] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 6381 attached [pid 6380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6382] <... write resumed>) = 4 [pid 6382] close(3) = 0 [pid 6382] symlink("/dev/binderfs", "./binderfs" [pid 6362] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] <... symlink resumed>) = 0 [pid 6362] <... futex resumed>) = 0 [pid 306] getdents64(4, [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] set_robust_list(0x55555748e5e0, 24 [pid 6380] <... prctl resumed>) = 0 [pid 6379] <... chdir resumed>) = 0 [pid 6371] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6362] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6381] <... set_robust_list resumed>) = 0 [pid 6380] setpgid(0, 0 [pid 6379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 306] close(4 [pid 6382] <... futex resumed>) = 0 [pid 6380] <... setpgid resumed>) = 0 [pid 6379] <... prctl resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 6382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] rmdir("./203/bus" [pid 6382] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6379] setpgid(0, 0 [pid 6382] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6380] <... openat resumed>) = 3 [pid 6379] <... setpgid resumed>) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 6382] <... mprotect resumed>) = 0 [pid 6380] write(3, "1000", 4 [pid 6379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 306] getdents64(3, [pid 6382] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6381] chdir("./201" [pid 6380] <... write resumed>) = 4 [pid 6379] <... openat resumed>) = 3 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6382] <... clone resumed>, parent_tid=[6383], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6383 [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] close(3 [pid 6382] <... futex resumed>) = 0 [pid 6380] close(3 [pid 6379] write(3, "1000", 4 [pid 306] <... close resumed>) = 0 [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6380] <... close resumed>) = 0 [pid 6379] <... write resumed>) = 4 [pid 306] rmdir("./203" [pid 6381] <... chdir resumed>) = 0 [pid 6380] symlink("/dev/binderfs", "./binderfs" [pid 6379] close(3 [pid 306] <... rmdir resumed>) = 0 [pid 6380] <... symlink resumed>) = 0 [pid 6379] <... close resumed>) = 0 [pid 306] mkdir("./204", 0777 [pid 6381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] symlink("/dev/binderfs", "./binderfs" [pid 306] <... mkdir resumed>) = 0 [pid 6380] <... futex resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6379] <... symlink resumed>) = 0 [pid 306] <... openat resumed>) = 3 [pid 6380] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] ioctl(3, LOOP_CLR_FD [pid 6380] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6379] <... futex resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6381] <... prctl resumed>) = 0 [pid 6380] <... mprotect resumed>) = 0 [pid 6379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] close(3 [pid 6381] setpgid(0, 0 [pid 6380] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6379] <... mmap resumed>) = 0x7f19bd5e4000 [pid 306] <... close resumed>) = 0 [pid 6381] <... setpgid resumed>) = 0 [pid 6379] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6380] <... clone resumed>, parent_tid=[6384], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6384 [pid 6379] <... mprotect resumed>) = 0 [pid 6381] <... openat resumed>) = 3 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6381] write(3, "1000", 4 [pid 6380] <... futex resumed>) = 0 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6385 ./strace-static-x86_64: Process 6383 attached [pid 6381] <... write resumed>) = 4 [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6379] <... clone resumed>, parent_tid=[6386], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6386 [pid 6383] set_robust_list(0x7f19bd6049e0, 24 [pid 6381] close(3 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... set_robust_list resumed>) = 0 [pid 6381] <... close resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6383] memfd_create("syzkaller", 0 [pid 6381] symlink("/dev/binderfs", "./binderfs" [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6383] <... memfd_create resumed>) = 3 [pid 6381] <... symlink resumed>) = 0 [pid 6383] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6384 attached ) = 0x7f19b51e4000 [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] set_robust_list(0x7f19bd6049e0, 24 [pid 6381] <... futex resumed>) = 0 [pid 6384] <... set_robust_list resumed>) = 0 [pid 6381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6384] memfd_create("syzkaller", 0 [pid 6381] <... mmap resumed>) = 0x7f19bd5e4000 ./strace-static-x86_64: Process 6386 attached [pid 6381] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6386] set_robust_list(0x7f19bd6049e0, 24 [pid 6384] <... memfd_create resumed>) = 3 [pid 6381] <... mprotect resumed>) = 0 [pid 6384] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6381] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 6387 attached [pid 6386] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 6385 attached [pid 6387] set_robust_list(0x7f19bd6049e0, 24 [pid 6386] memfd_create("syzkaller", 0 [pid 6381] <... clone resumed>, parent_tid=[6387], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6387 [pid 6387] <... set_robust_list resumed>) = 0 [pid 6386] <... memfd_create resumed>) = 3 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6381] <... futex resumed>) = 0 [pid 6387] memfd_create("syzkaller", 0 [pid 6386] <... mmap resumed>) = 0x7f19b51e4000 [pid 6385] set_robust_list(0x55555748e5e0, 24 [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6387] <... memfd_create resumed>) = 3 [pid 6385] <... set_robust_list resumed>) = 0 [pid 6371] <... write resumed>) = 1048576 [pid 6385] chdir("./204") = 0 [pid 6385] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6385] setpgid(0, 0) = 0 [pid 6385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6386] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6385] write(3, "1000", 4 [pid 6384] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6383] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6371] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] <... mmap resumed>) = 0x7f19b51e4000 [pid 6386] <... write resumed>) = 1048576 [pid 6385] <... write resumed>) = 4 [pid 6371] <... futex resumed>) = 1 [pid 6362] <... futex resumed>) = 0 [pid 6387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6383] <... write resumed>) = 1048576 [pid 6371] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6362] exit_group(0 [pid 6386] munmap(0x7f19b51e4000, 1048576 [pid 6385] close(3 [pid 6384] <... write resumed>) = 1048576 [pid 6383] munmap(0x7f19b51e4000, 1048576 [pid 6378] <... futex resumed>) = ? [pid 6362] <... exit_group resumed>) = ? [pid 6386] <... munmap resumed>) = 0 [pid 6385] <... close resumed>) = 0 [pid 6384] munmap(0x7f19b51e4000, 1048576 [pid 6383] <... munmap resumed>) = 0 [pid 6378] +++ exited with 0 +++ [pid 6371] <... futex resumed>) = ? [pid 6386] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6385] symlink("/dev/binderfs", "./binderfs" [pid 6384] <... munmap resumed>) = 0 [pid 6383] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6386] <... openat resumed>) = 4 [pid 6385] <... symlink resumed>) = 0 [pid 6384] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6383] <... openat resumed>) = 4 [pid 6386] ioctl(4, LOOP_SET_FD, 3 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... openat resumed>) = 4 [pid 6383] ioctl(4, LOOP_SET_FD, 3 [pid 6385] <... futex resumed>) = 0 [pid 6384] ioctl(4, LOOP_SET_FD, 3 [pid 6387] <... write resumed>) = 1048576 [pid 6385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6387] munmap(0x7f19b51e4000, 1048576 [pid 6385] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6387] <... munmap resumed>) = 0 [pid 6386] <... ioctl resumed>) = 0 [pid 6385] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6386] close(3 [pid 6385] <... mprotect resumed>) = 0 [pid 6387] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6386] <... close resumed>) = 0 [pid 6385] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6383] <... ioctl resumed>) = 0 [pid 6387] <... openat resumed>) = 4 [pid 6386] mkdir("./bus", 0777 [pid 6384] <... ioctl resumed>) = 0 [pid 6383] close(3 [pid 6371] +++ exited with 0 +++ [pid 6362] +++ exited with 0 +++ [pid 6387] ioctl(4, LOOP_SET_FD, 3 [pid 6386] <... mkdir resumed>) = 0 [pid 6385] <... clone resumed>, parent_tid=[6391], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6391 [pid 6384] close(3 [pid 6383] <... close resumed>) = 0 [pid 6386] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... close resumed>) = 0 [pid 6383] mkdir("./bus", 0777 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6362, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 6385] <... futex resumed>) = 0 [pid 6384] mkdir("./bus", 0777 [pid 6383] <... mkdir resumed>) = 0 [pid 307] restart_syscall(<... resuming interrupted clone ...> [pid 6387] <... ioctl resumed>) = 0 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6384] <... mkdir resumed>) = 0 [pid 6383] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] <... restart_syscall resumed>) = 0 [pid 6387] close(3 [pid 6384] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6387] <... close resumed>) = 0 [pid 6387] mkdir("./bus", 0777 [pid 307] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6387] <... mkdir resumed>) = 0 [pid 307] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 6387] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./199/binderfs") = 0 [pid 307] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6391 attached [pid 6391] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6391] memfd_create("syzkaller", 0) = 3 [pid 6391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6391] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6391] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6391] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6383] <... mount resumed>) = 0 [pid 6386] <... mount resumed>) = 0 [pid 6386] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6386] chdir("./bus") = 0 [pid 6386] ioctl(4, LOOP_CLR_FD) = 0 [pid 6386] close(4) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] <... futex resumed>) = 0 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [ 148.550222][ T6383] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/199/bus supports timestamps until 2038 (0x7fffffff) [ 148.562186][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.575839][ T6386] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/195/bus supports timestamps until 2038 (0x7fffffff) [ 148.584769][ T6387] ext4 filesystem being mounted at /root/syzkaller.69675s/201/bus supports timestamps until 2038 (0x7fffffff) [pid 6386] chdir("./file0" [pid 6391] close(3) = 0 [pid 6391] mkdir("./bus", 0777) = 0 [pid 6391] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6383] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6386] <... chdir resumed>) = 0 [pid 6387] <... mount resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... openat resumed>) = 3 [pid 6386] <... futex resumed>) = 1 [pid 6379] <... futex resumed>) = 0 [pid 6386] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... open resumed>) = 4 [pid 6379] <... futex resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... mount resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... open resumed>) = 5 [pid 6379] <... futex resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... openat resumed>) = 6 [pid 6383] chdir("./bus" [pid 6379] <... futex resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6383] <... chdir resumed>) = 0 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 0 [pid 6383] ioctl(4, LOOP_CLR_FD [pid 6379] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6383] <... ioctl resumed>) = 0 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6386] <... write resumed>) = 262144 [pid 6383] close(4 [pid 6379] <... futex resumed>) = 0 [pid 6383] <... close resumed>) = 0 [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6391] <... mount resumed>) = 0 [pid 6387] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... mount resumed>) = 0 [pid 6382] <... futex resumed>) = 0 [pid 6387] <... openat resumed>) = 3 [pid 6384] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] chdir("./bus" [pid 6384] <... openat resumed>) = 3 [pid 6382] <... futex resumed>) = 1 [pid 6387] <... chdir resumed>) = 0 [pid 6384] chdir("./bus" [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] ioctl(4, LOOP_CLR_FD [pid 6384] <... chdir resumed>) = 0 [pid 6387] <... ioctl resumed>) = 0 [pid 6384] ioctl(4, LOOP_CLR_FD [pid 6387] close(4 [pid 6384] <... ioctl resumed>) = 0 [pid 6387] <... close resumed>) = 0 [pid 6384] close(4 [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... close resumed>) = 0 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 1 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] chdir("./file0" [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6387] <... chdir resumed>) = 0 [pid 6384] chdir("./file0" [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... chdir resumed>) = 0 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 1 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6387] <... open resumed>) = 4 [pid 6384] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6383] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... open resumed>) = 4 [pid 6383] chdir("./file0" [pid 6391] <... openat resumed>) = 3 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6391] chdir("./bus" [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6386] <... futex resumed>) = 1 [pid 6384] <... futex resumed>) = 1 [pid 6383] <... chdir resumed>) = 0 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6391] <... chdir resumed>) = 0 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6379] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] ioctl(4, LOOP_CLR_FD [pid 6387] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6386] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6379] <... futex resumed>) = 0 [pid 6391] <... ioctl resumed>) = 0 [pid 6387] <... mount resumed>) = 0 [pid 6386] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6384] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6379] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] close(4 [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... mount resumed>) = 0 [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6391] <... close resumed>) = 0 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 1 [pid 6383] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6382] <... futex resumed>) = 0 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6387] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6387] <... open resumed>) = 5 [pid 6385] <... futex resumed>) = 0 [pid 6384] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] chdir("./file0" [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... open resumed>) = 5 [pid 6383] <... open resumed>) = 4 [pid 6391] <... chdir resumed>) = 0 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 1 [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6387] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6387] <... openat resumed>) = 6 [pid 6385] <... futex resumed>) = 0 [pid 6384] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... openat resumed>) = 6 [pid 6383] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... open resumed>) = 4 [pid 6387] <... futex resumed>) = 1 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6384] <... futex resumed>) = 1 [pid 6383] <... mount resumed>) = 0 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = 1 [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6387] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6380] <... futex resumed>) = 0 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6386] <... write resumed>) = 1048576 [pid 6385] <... futex resumed>) = 0 [pid 6384] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6386] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6386] <... futex resumed>) = 1 [pid 6383] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6379] <... futex resumed>) = 0 [pid 6386] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6379] exit_group(0 [pid 6386] <... futex resumed>) = ? [pid 6379] <... exit_group resumed>) = ? [pid 6386] +++ exited with 0 +++ [ 148.599597][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.614742][ T6384] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/202/bus supports timestamps until 2038 (0x7fffffff) [ 148.629104][ T6391] ext4 filesystem being mounted at /root/syzkaller.URAKkl/204/bus supports timestamps until 2038 (0x7fffffff) [pid 6387] <... write resumed>) = 262144 [pid 6384] <... write resumed>) = 262144 [pid 6382] <... futex resumed>) = 0 [pid 6391] <... mount resumed>) = 0 [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6387] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 1 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] <... futex resumed>) = 0 [pid 6381] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] <... futex resumed>) = 0 [pid 6385] <... futex resumed>) = 0 [pid 6387] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6381] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6380] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6380] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6391] <... open resumed>) = 5 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 6391] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6391] <... openat resumed>) = 6 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6385] <... futex resumed>) = 0 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6385] <... futex resumed>) = 0 [pid 6391] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] <... open resumed>) = 5 [pid 6379] +++ exited with 0 +++ [pid 6391] <... write resumed>) = 262144 [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6385] <... futex resumed>) = 0 [pid 6385] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6385] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6391] <... futex resumed>) = 1 [pid 6391] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 307] <... umount2 resumed>) = 0 [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6379, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6384] <... write resumed>) = 1048576 [pid 6382] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6384] <... futex resumed>) = 1 [pid 6380] <... futex resumed>) = 0 [pid 6384] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6380] exit_group(0 [pid 6384] <... futex resumed>) = ? [pid 6383] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6380] <... exit_group resumed>) = ? [pid 6384] +++ exited with 0 +++ [pid 6383] <... openat resumed>) = 6 [pid 6380] +++ exited with 0 +++ [pid 307] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6380, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] umount2("./195", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6382] <... futex resumed>) = 0 [pid 309] openat(AT_FDCWD, "./195", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] lstat("./199/bus", [pid 6383] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... openat resumed>) = 3 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6383] <... write resumed>) = 262144 [pid 310] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] fstat(3, [pid 307] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... openat resumed>) = 3 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] fstat(3, [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 310] getdents64(3, [pid 6387] <... write resumed>) = 1048576 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./195/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 4 [pid 310] lstat("./202/binderfs", [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] lstat("./195/binderfs", [pid 310] unlink("./202/binderfs" [pid 307] fstat(4, [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6387] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... unlink resumed>) = 0 [pid 309] unlink("./195/binderfs" [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6387] <... futex resumed>) = 1 [pid 6381] <... futex resumed>) = 0 [pid 309] <... unlink resumed>) = 0 [pid 6387] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6381] exit_group(0 [pid 309] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] getdents64(4, [pid 6387] <... futex resumed>) = ? [pid 6383] <... futex resumed>) = 1 [pid 6382] <... futex resumed>) = 0 [pid 6381] <... exit_group resumed>) = ? [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6383] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6382] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 6382] <... futex resumed>) = 0 [pid 6387] +++ exited with 0 +++ [pid 6382] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6381] +++ exited with 0 +++ [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6381, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] close(4) = 0 [pid 308] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] rmdir("./199/bus" [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6391] <... write resumed>) = 1048576 [pid 307] <... rmdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] getdents64(3, [pid 308] <... openat resumed>) = 3 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] fstat(3, [pid 307] close(3 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... close resumed>) = 0 [pid 308] getdents64(3, [pid 307] rmdir("./199" [pid 308] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... rmdir resumed>) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] mkdir("./200", 0777 [pid 308] lstat("./201/binderfs", [pid 307] <... mkdir resumed>) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 308] unlink("./201/binderfs") = 0 [pid 307] <... openat resumed>) = 3 [pid 308] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6404 [ 148.731549][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.757085][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 6385] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6391] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6391] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 6404 attached [pid 6404] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6385] exit_group(0 [pid 6404] chdir("./200" [pid 6391] <... futex resumed>) = ? [pid 6385] <... exit_group resumed>) = ? [pid 6404] <... chdir resumed>) = 0 [pid 6391] +++ exited with 0 +++ [pid 6385] +++ exited with 0 +++ [pid 6404] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6404] setpgid(0, 0) = 0 [pid 6404] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6404] write(3, "1000", 4) = 4 [pid 6404] close(3) = 0 [pid 6404] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6404] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6404] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6405], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6405 [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6405 attached [pid 6405] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6405] memfd_create("syzkaller", 0) = 3 [pid 6405] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6385, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6383] <... write resumed>) = 1048576 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./204/binderfs") = 0 [pid 306] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6383] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6383] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6382] exit_group(0) = ? [pid 6383] <... futex resumed>) = ? [ 148.770455][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 148.770464][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 148.771081][ T344] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 148.814883][ T381] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6405] <... write resumed>) = 1048576 [pid 6405] munmap(0x7f19b51e4000, 1048576 [pid 6383] +++ exited with 0 +++ [pid 6382] +++ exited with 0 +++ [pid 6405] <... munmap resumed>) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6382, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 6405] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./199/binderfs") = 0 [pid 305] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6405] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6405] close(3) = 0 [pid 6405] mkdir("./bus", 0777) = 0 [ 148.829056][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.850741][ T172] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 148.863698][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 148.878690][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6405] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue") = 0 [pid 6405] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6405] chdir("./bus") = 0 [ 148.994802][ T6405] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/200/bus supports timestamps until 2038 (0x7fffffff) [pid 6405] ioctl(4, LOOP_CLR_FD [pid 310] <... umount2 resumed>) = 0 [pid 308] <... umount2 resumed>) = 0 [pid 6405] <... ioctl resumed>) = 0 [pid 310] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... umount2 resumed>) = 0 [pid 308] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 305] <... umount2 resumed>) = 0 [pid 306] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./204/bus", [pid 305] lstat("./199/bus", [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... openat resumed>) = 4 [pid 305] <... openat resumed>) = 4 [pid 306] fstat(4, [pid 305] fstat(4, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, [pid 305] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 305] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4 [pid 305] close(4 [pid 306] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 306] rmdir("./204/bus" [pid 305] rmdir("./199/bus" [pid 6405] close(4 [pid 310] lstat("./202/bus", [pid 309] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] lstat("./201/bus", [pid 306] <... rmdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 305] getdents64(3, [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3 [pid 305] close(3 [pid 306] <... close resumed>) = 0 [pid 305] <... close resumed>) = 0 [pid 306] rmdir("./204" [pid 305] rmdir("./199" [pid 6405] <... close resumed>) = 0 [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... rmdir resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 306] mkdir("./205", 0777 [pid 305] mkdir("./200", 0777 [pid 306] <... mkdir resumed>) = 0 [pid 305] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 306] <... openat resumed>) = 3 [pid 305] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] close(3 [pid 305] close(3 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] lstat("./195/bus", [pid 308] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... close resumed>) = 0 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... close resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] umount2("./195/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 310] <... openat resumed>) = 4 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... openat resumed>) = 4 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6405] chdir("./file0" [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] fstat(4, [pid 309] openat(AT_FDCWD, "./195/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] fstat(4, [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6409 [pid 6405] <... chdir resumed>) = 0 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... openat resumed>) = 4 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 309] fstat(4, [pid 308] getdents64(4, [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6410 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(4, [pid 309] getdents64(4, [pid 308] getdents64(4, [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6405] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(4 [pid 309] getdents64(4, [pid 308] close(4./strace-static-x86_64: Process 6410 attached ./strace-static-x86_64: Process 6409 attached [pid 6405] <... open resumed>) = 4 [pid 310] <... close resumed>) = 0 [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] <... close resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./202/bus" [pid 309] close(4 [pid 308] rmdir("./201/bus" [pid 6410] set_robust_list(0x55555748e5e0, 24 [pid 6409] set_robust_list(0x55555748e5e0, 24 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 6410] <... set_robust_list resumed>) = 0 [pid 6409] <... set_robust_list resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] getdents64(3, [pid 309] rmdir("./195/bus" [pid 308] getdents64(3, [pid 6410] chdir("./200" [pid 6409] chdir("./205" [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6410] <... chdir resumed>) = 0 [pid 6409] <... chdir resumed>) = 0 [pid 6405] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] close(3 [pid 309] getdents64(3, [pid 308] close(3 [pid 6410] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6405] <... mount resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... close resumed>) = 0 [pid 6410] <... prctl resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] rmdir("./202" [pid 6409] <... prctl resumed>) = 0 [pid 309] close(3 [pid 308] rmdir("./201" [pid 6410] setpgid(0, 0 [pid 6409] setpgid(0, 0 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 6410] <... setpgid resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] mkdir("./203", 0777 [pid 6409] <... setpgid resumed>) = 0 [pid 309] rmdir("./195" [pid 308] mkdir("./202", 0777 [pid 6410] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 6410] <... openat resumed>) = 3 [pid 6405] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] mkdir("./196", 0777 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6410] write(3, "1000", 4 [pid 6409] <... openat resumed>) = 3 [pid 6405] <... open resumed>) = 5 [pid 310] <... openat resumed>) = 3 [pid 309] <... mkdir resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 6410] <... write resumed>) = 4 [pid 6409] write(3, "1000", 4 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 308] ioctl(3, LOOP_CLR_FD [pid 6410] close(3 [pid 6409] <... write resumed>) = 4 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... openat resumed>) = 3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6410] <... close resumed>) = 0 [pid 6409] close(3 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] close(3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] close(3 [pid 6410] symlink("/dev/binderfs", "./binderfs" [pid 6409] <... close resumed>) = 0 [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... close resumed>) = 0 [pid 6405] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] close(3 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6405] <... openat resumed>) = 6 [pid 309] <... close resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6411 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6412 [pid 6405] <... futex resumed>) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6413 [pid 6405] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6404] <... futex resumed>) = 0 [pid 6405] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6405] <... write resumed>) = 262144 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6405] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6404] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... symlink resumed>) = 0 [pid 6409] symlink("/dev/binderfs", "./binderfs" [pid 6404] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6404] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6413 attached [pid 6409] <... symlink resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6409] <... futex resumed>) = 0 [pid 6410] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6410] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6409] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6413] set_robust_list(0x55555748e5e0, 24 [pid 6410] <... mprotect resumed>) = 0 [pid 6409] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6413] <... set_robust_list resumed>) = 0 [pid 6410] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6409] <... mprotect resumed>) = 0 [pid 6409] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6410] <... clone resumed>, parent_tid=[6414], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6414 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... clone resumed>, parent_tid=[6415], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6415 [pid 6410] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6409] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6413] chdir("./196") = 0 [pid 6413] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6413] setpgid(0, 0) = 0 [pid 6413] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6412 attached ./strace-static-x86_64: Process 6415 attached ./strace-static-x86_64: Process 6414 attached ) = 3 [pid 6412] set_robust_list(0x55555748e5e0, 24 [pid 6413] write(3, "1000", 4 [pid 6412] <... set_robust_list resumed>) = 0 [pid 6413] <... write resumed>) = 4 [pid 6412] chdir("./202" [pid 6413] close(3 [pid 6412] <... chdir resumed>) = 0 [pid 6413] <... close resumed>) = 0 [pid 6412] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6415] set_robust_list(0x7f19bd6049e0, 24 [pid 6414] set_robust_list(0x7f19bd6049e0, 24 [pid 6413] symlink("/dev/binderfs", "./binderfs" [pid 6412] <... prctl resumed>) = 0 [pid 6415] <... set_robust_list resumed>) = 0 [pid 6414] <... set_robust_list resumed>) = 0 [pid 6413] <... symlink resumed>) = 0 [pid 6412] setpgid(0, 0 [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 6411 attached [pid 6413] <... futex resumed>) = 0 [pid 6412] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6415] memfd_create("syzkaller", 0 [pid 6414] memfd_create("syzkaller", 0 [pid 6413] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6412] <... openat resumed>) = 3 [pid 6411] set_robust_list(0x55555748e5e0, 24 [pid 6413] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6412] write(3, "1000", 4 [pid 6411] <... set_robust_list resumed>) = 0 [pid 6413] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6415] <... memfd_create resumed>) = 3 [pid 6414] <... memfd_create resumed>) = 3 [pid 6412] <... write resumed>) = 4 [pid 6411] chdir("./203" [pid 6413] <... mprotect resumed>) = 0 [pid 6412] close(3 [pid 6411] <... chdir resumed>) = 0 [pid 6415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6413] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6412] <... close resumed>) = 0 [pid 6411] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6412] symlink("/dev/binderfs", "./binderfs" [pid 6411] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 6416 attached [pid 6415] <... mmap resumed>) = 0x7f19b51e4000 [pid 6414] <... mmap resumed>) = 0x7f19b51e4000 [pid 6413] <... clone resumed>, parent_tid=[6416], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6416 [pid 6412] <... symlink resumed>) = 0 [pid 6411] setpgid(0, 0 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... setpgid resumed>) = 0 [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6411] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6412] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6411] <... openat resumed>) = 3 [pid 6412] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6411] write(3, "1000", 4 [pid 6412] <... mprotect resumed>) = 0 [pid 6411] <... write resumed>) = 4 [pid 6412] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6411] close(3) = 0 [pid 6412] <... clone resumed>, parent_tid=[6417], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6417 [pid 6411] symlink("/dev/binderfs", "./binderfs" [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... symlink resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6411] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6411] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6418], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6418 [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6416] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6416] memfd_create("syzkaller", 0) = 3 [pid 6416] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 ./strace-static-x86_64: Process 6417 attached [pid 6417] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6417] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 6418 attached [pid 6417] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6418] set_robust_list(0x7f19bd6049e0, 24 [pid 6417] <... mmap resumed>) = 0x7f19b51e4000 [pid 6418] <... set_robust_list resumed>) = 0 [pid 6418] memfd_create("syzkaller", 0) = 3 [pid 6418] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6418] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6416] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6405] <... write resumed>) = 1048576 [pid 6405] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6404] <... futex resumed>) = 0 [pid 6405] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6404] exit_group(0 [pid 6405] <... futex resumed>) = ? [pid 6404] <... exit_group resumed>) = ? [pid 6405] +++ exited with 0 +++ [pid 6404] +++ exited with 0 +++ [pid 6417] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6404, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6415] <... write resumed>) = 1048576 [pid 307] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 6415] munmap(0x7f19b51e4000, 1048576 [pid 6414] <... write resumed>) = 1048576 [pid 307] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6414] munmap(0x7f19b51e4000, 1048576 [pid 6415] <... munmap resumed>) = 0 [pid 6414] <... munmap resumed>) = 0 [pid 307] unlink("./200/binderfs") = 0 [pid 6415] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6414] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6415] <... openat resumed>) = 4 [pid 6414] <... openat resumed>) = 4 [pid 307] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] <... write resumed>) = 1048576 [pid 6415] ioctl(4, LOOP_SET_FD, 3 [pid 6414] ioctl(4, LOOP_SET_FD, 3 [pid 6418] <... write resumed>) = 1048576 [pid 6417] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6418] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6417] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 6418] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6417] ioctl(4, LOOP_SET_FD, 3 [pid 6418] ioctl(4, LOOP_SET_FD, 3 [pid 6416] <... write resumed>) = 1048576 [pid 6416] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6416] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6417] <... ioctl resumed>) = 0 [pid 6417] close(3) = 0 [pid 6417] mkdir("./bus", 0777) = 0 [pid 6417] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6418] <... ioctl resumed>) = 0 [pid 6416] <... openat resumed>) = 4 [pid 6418] close(3 [pid 6416] ioctl(4, LOOP_SET_FD, 3 [pid 6418] <... close resumed>) = 0 [pid 6418] mkdir("./bus", 0777) = 0 [pid 6418] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6415] <... ioctl resumed>) = 0 [pid 6415] close(3) = 0 [pid 6415] mkdir("./bus", 0777) = 0 [pid 6414] <... ioctl resumed>) = 0 [pid 6415] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6414] close(3) = 0 [pid 6414] mkdir("./bus", 0777) = 0 [pid 6414] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6416] <... ioctl resumed>) = 0 [pid 6416] close(3) = 0 [pid 6416] mkdir("./bus", 0777) = 0 [ 149.305327][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 149.319272][ T172] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 149.357816][ T6416] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/196/bus supports timestamps until 2038 (0x7fffffff) [ 149.359535][ T6417] ext4 filesystem being mounted at /root/syzkaller.69675s/202/bus supports timestamps until 2038 (0x7fffffff) [ 149.370574][ T6414] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/200/bus supports timestamps until 2038 (0x7fffffff) [pid 6416] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6418] <... mount resumed>) = 0 [pid 6418] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6418] chdir("./bus") = 0 [pid 6418] ioctl(4, LOOP_CLR_FD [pid 6416] <... mount resumed>) = 0 [pid 6416] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6416] chdir("./bus") = 0 [pid 6416] ioctl(4, LOOP_CLR_FD [pid 6414] <... mount resumed>) = 0 [pid 6414] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6414] chdir("./bus") = 0 [pid 6414] ioctl(4, LOOP_CLR_FD [pid 6417] <... mount resumed>) = 0 [pid 6417] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6417] chdir("./bus") = 0 [pid 6417] ioctl(4, LOOP_CLR_FD [pid 6418] <... ioctl resumed>) = 0 [pid 6416] <... ioctl resumed>) = 0 [pid 6415] <... mount resumed>) = 0 [pid 6414] <... ioctl resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 6416] close(4 [pid 6418] close(4 [pid 6417] <... ioctl resumed>) = 0 [pid 6416] <... close resumed>) = 0 [pid 6415] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6414] close(4 [pid 307] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... close resumed>) = 0 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... close resumed>) = 0 [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 1 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] chdir("./file0" [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6418] chdir("./file0" [pid 6416] <... chdir resumed>) = 0 [pid 6414] chdir("./file0" [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] lstat("./200/bus", [pid 6418] <... chdir resumed>) = 0 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... chdir resumed>) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] <... futex resumed>) = 1 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 307] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6418] <... futex resumed>) = 1 [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6418] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... openat resumed>) = 4 [pid 6418] <... open resumed>) = 4 [pid 6416] <... open resumed>) = 4 [pid 307] fstat(4, [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... open resumed>) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 1 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 307] getdents64(4, [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(4, [pid 6418] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6417] close(4 [pid 6416] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6415] <... openat resumed>) = 3 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6418] <... mount resumed>) = 0 [pid 6417] <... close resumed>) = 0 [pid 6416] <... mount resumed>) = 0 [pid 6415] chdir("./bus" [pid 6414] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] close(4 [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... chdir resumed>) = 0 [pid 6414] <... mount resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... futex resumed>) = 1 [pid 6416] <... futex resumed>) = 1 [pid 6415] ioctl(4, LOOP_CLR_FD [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 307] rmdir("./200/bus" [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] chdir("./file0" [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... ioctl resumed>) = 0 [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] <... chdir resumed>) = 0 [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] close(4 [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] getdents64(3, [pid 6418] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6415] <... close resumed>) = 0 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6418] <... open resumed>) = 5 [pid 6417] <... futex resumed>) = 0 [pid 6416] <... open resumed>) = 5 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6412] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] close(3 [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... futex resumed>) = 1 [pid 6414] <... open resumed>) = 5 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] <... futex resumed>) = 1 [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6412] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] rmdir("./200" [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 0 [pid 307] <... rmdir resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] <... open resumed>) = 4 [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] chdir("./file0" [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] mkdir("./201", 0777 [pid 6418] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6416] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6415] <... chdir resumed>) = 0 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 6416] <... openat resumed>) = 6 [pid 6414] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... mkdir resumed>) = 0 [pid 6418] <... openat resumed>) = 6 [pid 6417] <... futex resumed>) = 1 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] <... openat resumed>) = 6 [pid 6412] <... futex resumed>) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] <... futex resumed>) = 1 [pid 6415] <... futex resumed>) = 1 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6413] <... futex resumed>) = 0 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] <... futex resumed>) = 1 [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] ioctl(3, LOOP_CLR_FD [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] <... futex resumed>) = 0 [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] <... mount resumed>) = 0 [ 149.388193][ T6418] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/203/bus supports timestamps until 2038 (0x7fffffff) [ 149.398602][ T6415] ext4 filesystem being mounted at /root/syzkaller.URAKkl/205/bus supports timestamps until 2038 (0x7fffffff) [pid 6416] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... futex resumed>) = 0 [pid 6410] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] close(3 [pid 6418] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... open resumed>) = 4 [pid 6414] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... close resumed>) = 0 [pid 6418] <... write resumed>) = 262144 [pid 6417] <... futex resumed>) = 1 [pid 6416] <... write resumed>) = 262144 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 [pid 6411] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6434 [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6418] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6417] <... open resumed>) = 5 [pid 6415] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6411] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6418] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... mount resumed>) = 0 [pid 6414] <... write resumed>) = 262144 [pid 6411] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6434 attached [pid 6417] <... futex resumed>) = 1 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 6434] set_robust_list(0x55555748e5e0, 24 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6416] <... futex resumed>) = 1 [pid 6415] <... futex resumed>) = 1 [pid 6414] <... futex resumed>) = 1 [pid 6413] <... futex resumed>) = 0 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6410] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 0 [pid 6434] <... set_robust_list resumed>) = 0 [pid 6418] <... write resumed>) = 1048576 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] chdir("./201" [pid 6418] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6416] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6414] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6413] <... futex resumed>) = 0 [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6410] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 0 [pid 6434] <... chdir resumed>) = 0 [pid 6418] <... futex resumed>) = 1 [pid 6417] <... openat resumed>) = 6 [pid 6416] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6415] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6414] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6413] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6411] <... futex resumed>) = 0 [pid 6410] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6418] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... open resumed>) = 5 [pid 6417] <... futex resumed>) = 1 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] <... futex resumed>) = 0 [pid 6417] <... write resumed>) = 262144 [pid 6415] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] <... openat resumed>) = 6 [pid 6417] <... futex resumed>) = 1 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6412] <... futex resumed>) = 0 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] <... futex resumed>) = 1 [pid 6412] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6409] <... futex resumed>) = 0 [pid 6417] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6412] <... futex resumed>) = 0 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6412] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6409] <... futex resumed>) = 0 [pid 6434] <... prctl resumed>) = 0 [pid 6415] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6411] exit_group(0 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] setpgid(0, 0 [pid 6415] <... write resumed>) = 262144 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6411] <... exit_group resumed>) = ? [pid 6434] <... setpgid resumed>) = 0 [pid 6418] <... futex resumed>) = ? [pid 6415] <... futex resumed>) = 1 [pid 6409] <... futex resumed>) = 0 [pid 6434] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6415] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6409] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... openat resumed>) = 3 [pid 6409] <... futex resumed>) = 0 [pid 6434] write(3, "1000", 4 [pid 6409] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6434] <... write resumed>) = 4 [pid 6434] close(3) = 0 [pid 6434] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6434] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6434] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6435], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6435 [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6418] +++ exited with 0 +++ [pid 6411] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6411, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 310] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 310] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./203/binderfs") = 0 [pid 310] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 6435 attached [pid 6435] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6435] memfd_create("syzkaller", 0) = 3 [pid 6435] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6435] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6416] <... write resumed>) = 1048576 [pid 6416] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6413] <... futex resumed>) = 0 [pid 6416] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6413] exit_group(0 [pid 6410] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6413] <... exit_group resumed>) = ? [pid 6416] <... futex resumed>) = ? [pid 6416] +++ exited with 0 +++ [pid 6413] +++ exited with 0 +++ [pid 6412] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6413, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./196", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./196", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./196/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./196/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./196/binderfs") = 0 [pid 309] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6417] <... write resumed>) = 1048576 [pid 6415] <... write resumed>) = 1048576 [pid 6414] <... write resumed>) = 1048576 [pid 6414] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6415] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6417] <... futex resumed>) = 0 [pid 6415] <... futex resumed>) = 1 [pid 6414] <... futex resumed>) = 0 [pid 6409] <... futex resumed>) = 0 [pid 6417] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6415] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6414] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6409] exit_group(0 [pid 6412] exit_group(0) = ? [pid 6435] <... write resumed>) = 1048576 [pid 6435] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6435] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 6435] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6435] close(3) = 0 [pid 6435] mkdir("./bus", 0777) = 0 [pid 6435] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6409] <... exit_group resumed>) = ? [ 149.543602][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [ 149.564345][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 149.578895][ T172] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:2: Invalid inode table block 0 in block_group 0 [pid 6410] exit_group(0 [pid 6417] <... futex resumed>) = ? [pid 6415] <... futex resumed>) = ? [pid 6414] <... futex resumed>) = ? [pid 6410] <... exit_group resumed>) = ? [pid 6417] +++ exited with 0 +++ [pid 6412] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6412, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 308] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 308] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./202/binderfs") = 0 [pid 308] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6414] +++ exited with 0 +++ [pid 6410] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6410, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./200/binderfs") = 0 [ 149.593373][ T344] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 149.618733][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... mount resumed>) = 0 [pid 6415] +++ exited with 0 +++ [pid 6409] +++ exited with 0 +++ [pid 310] <... umount2 resumed>) = 0 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6409, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6435] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6435] chdir("./bus") = 0 [pid 6435] ioctl(4, LOOP_CLR_FD) = 0 [pid 6435] close(4) = 0 [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6434] <... futex resumed>) = 0 [pid 6435] chdir("./file0" [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... chdir resumed>) = 0 [pid 6434] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6435] <... futex resumed>) = 0 [pid 6434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... openat resumed>) = 3 [pid 6435] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] fstat(3, [pid 6434] <... futex resumed>) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6435] <... open resumed>) = 4 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] <... futex resumed>) = 1 [pid 6434] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6435] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] lstat("./205/binderfs", [pid 6435] <... mount resumed>) = 0 [pid 6434] <... futex resumed>) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] unlink("./205/binderfs" [pid 6435] <... futex resumed>) = 0 [pid 6434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... unlink resumed>) = 0 [pid 6435] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6435] <... open resumed>) = 5 [pid 306] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6434] <... futex resumed>) = 0 [pid 6435] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6435] <... openat resumed>) = 6 [pid 6434] <... futex resumed>) = 0 [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6435] <... futex resumed>) = 0 [pid 6434] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6435] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6435] <... write resumed>) = 262144 [pid 6434] <... futex resumed>) = 0 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./203/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [ 149.634634][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 149.649315][ T6435] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/201/bus supports timestamps until 2038 (0x7fffffff) [ 149.650250][ T734] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 149.662733][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./203/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./203") = 0 [pid 310] mkdir("./204", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... futex resumed>) = 0 [pid 6434] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6434] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6435] <... futex resumed>) = 1 [pid 6435] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 1048576 [pid 6435] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6434] <... futex resumed>) = 0 [pid 6434] exit_group(0) = ? [pid 6435] <... futex resumed>) = ? [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./196/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./196/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./196/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./196/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./196") = 0 [pid 309] mkdir("./197", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... openat resumed>) = 3 [pid 6435] +++ exited with 0 +++ [pid 6434] +++ exited with 0 +++ [pid 310] ioctl(3, LOOP_CLR_FD [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6434, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 307] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./201/binderfs") = 0 [ 149.713067][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 149.727041][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 307] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... openat resumed>) = 3 [pid 310] close(3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] close(3) = 0 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6439 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 149.769873][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 149.783600][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6440 [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... umount2 resumed>) = 0 [pid 308] lstat("./202/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] lstat("./200/bus", [pid 308] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... openat resumed>) = 4 [pid 305] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, [pid 305] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 305] getdents64(4, [pid 308] rmdir("./202/bus" [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./200/bus" [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... rmdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 305] close(3) = 0 [pid 308] rmdir("./202") = 0 [pid 305] rmdir("./200" [pid 306] lstat("./205/bus", [pid 305] <... rmdir resumed>) = 0 [pid 308] mkdir("./203", 0777 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] mkdir("./201", 0777 [pid 306] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... mkdir resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 6440 attached ./strace-static-x86_64: Process 6439 attached [pid 307] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] lstat("./201/bus", [pid 306] <... openat resumed>) = 4 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, [pid 307] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] getdents64(4, [pid 6440] set_robust_list(0x55555748e5e0, 24 [pid 307] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... openat resumed>) = 4 [pid 306] getdents64(4, [pid 307] fstat(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 6440] <... set_robust_list resumed>) = 0 [pid 6439] set_robust_list(0x55555748e5e0, 24 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] close(4 [pid 307] getdents64(4, [pid 306] <... close resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] rmdir("./205/bus" [pid 307] getdents64(4, [pid 306] <... rmdir resumed>) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] getdents64(3, [pid 307] close(4 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 6440] chdir("./197" [pid 6439] <... set_robust_list resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] close(3 [pid 307] rmdir("./201/bus" [pid 306] <... close resumed>) = 0 [pid 6440] <... chdir resumed>) = 0 [pid 6439] chdir("./204" [pid 307] <... rmdir resumed>) = 0 [pid 306] rmdir("./205" [pid 6440] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6439] <... chdir resumed>) = 0 [pid 307] getdents64(3, [pid 306] <... rmdir resumed>) = 0 [pid 6440] <... prctl resumed>) = 0 [pid 6439] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] mkdir("./206", 0777 [pid 6440] setpgid(0, 0 [pid 6439] <... prctl resumed>) = 0 [pid 307] close(3 [pid 306] <... mkdir resumed>) = 0 [pid 6440] <... setpgid resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] rmdir("./201" [pid 6440] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6439] setpgid(0, 0 [pid 307] <... rmdir resumed>) = 0 [pid 307] mkdir("./202", 0777 [pid 6440] <... openat resumed>) = 3 [pid 6439] <... setpgid resumed>) = 0 [pid 307] <... mkdir resumed>) = 0 [pid 6440] write(3, "1000", 4 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6440] <... write resumed>) = 4 [pid 6440] close(3) = 0 [pid 6439] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6440] symlink("/dev/binderfs", "./binderfs" [pid 6439] <... openat resumed>) = 3 [pid 6439] write(3, "1000", 4) = 4 [pid 6439] close(3) = 0 [pid 6439] symlink("/dev/binderfs", "./binderfs" [pid 6440] <... symlink resumed>) = 0 [pid 6439] <... symlink resumed>) = 0 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6439] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6440] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6439] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6440] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6440] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6439] <... clone resumed>, parent_tid=[6441], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6441 [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] <... clone resumed>, parent_tid=[6442], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6442 [pid 6439] <... futex resumed>) = 0 [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6440] <... futex resumed>) = 0 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6442 attached [pid 6442] set_robust_list(0x7f19bd6049e0, 24) = 0 ./strace-static-x86_64: Process 6441 attached [pid 6442] memfd_create("syzkaller", 0) = 3 [pid 6441] set_robust_list(0x7f19bd6049e0, 24 [pid 6442] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6441] <... set_robust_list resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 306] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] ioctl(3, LOOP_CLR_FD [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] close(3 [pid 306] close(3 [pid 307] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6443 [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6444 [pid 305] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 6444 attached [pid 6441] memfd_create("syzkaller", 0) = 3 [pid 6444] set_robust_list(0x55555748e5e0, 24 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) ./strace-static-x86_64: Process 6443 attached [pid 6444] <... set_robust_list resumed>) = 0 [pid 6442] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6441] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] close(3 [pid 6444] chdir("./206" [pid 6443] set_robust_list(0x55555748e5e0, 24 [pid 6441] <... mmap resumed>) = 0x7f19b51e4000 [pid 308] close(3 [pid 305] <... close resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6445 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6446 [pid 6444] <... chdir resumed>) = 0 [pid 6444] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6444] setpgid(0, 0) = 0 [pid 6444] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6444] write(3, "1000", 4) = 4 [pid 6444] close(3) = 0 [pid 6444] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 6445 attached [pid 6445] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6444] <... symlink resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... set_robust_list resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6445] chdir("./201") = 0 ./strace-static-x86_64: Process 6446 attached [pid 6445] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6446] set_robust_list(0x55555748e5e0, 24 [pid 6444] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6443] chdir("./202" [pid 6445] <... prctl resumed>) = 0 [pid 6445] setpgid(0, 0 [pid 6444] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6443] <... chdir resumed>) = 0 [pid 6444] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6443] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6445] <... setpgid resumed>) = 0 [pid 6444] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6445] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6446] <... set_robust_list resumed>) = 0 [pid 6446] chdir("./203" [pid 6443] <... prctl resumed>) = 0 [pid 6444] <... clone resumed>, parent_tid=[6447], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6447 [pid 6443] setpgid(0, 0 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... setpgid resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6443] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6445] <... openat resumed>) = 3 [pid 6446] <... chdir resumed>) = 0 [pid 6446] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6446] setpgid(0, 0) = 0 [pid 6446] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6445] write(3, "1000", 4) = 4 [pid 6445] close(3 [pid 6446] <... openat resumed>) = 3 [pid 6445] <... close resumed>) = 0 [pid 6443] <... openat resumed>) = 3 [pid 6446] write(3, "1000", 4 [pid 6445] symlink("/dev/binderfs", "./binderfs" [pid 6443] write(3, "1000", 4 [pid 6446] <... write resumed>) = 4 [pid 6445] <... symlink resumed>) = 0 [pid 6443] <... write resumed>) = 4 [pid 6441] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6446] close(3 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] close(3 [pid 6446] <... close resumed>) = 0 [pid 6445] <... futex resumed>) = 0 [pid 6443] <... close resumed>) = 0 [pid 6446] symlink("/dev/binderfs", "./binderfs" [pid 6445] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6443] symlink("/dev/binderfs", "./binderfs" [pid 6446] <... symlink resumed>) = 0 [pid 6445] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6443] <... symlink resumed>) = 0 [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = 0 [pid 6445] <... mprotect resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6446] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6445] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6443] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6446] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6443] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6446] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6445] <... clone resumed>, parent_tid=[6448], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6448 [pid 6443] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6446] <... mprotect resumed>) = 0 [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 6448 attached ./strace-static-x86_64: Process 6447 attached [pid 6446] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6445] <... futex resumed>) = 0 [pid 6443] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6442] <... write resumed>) = 1048576 [pid 6441] <... write resumed>) = 1048576 [pid 6448] set_robust_list(0x7f19bd6049e0, 24 [pid 6447] set_robust_list(0x7f19bd6049e0, 24 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6442] munmap(0x7f19b51e4000, 1048576 [pid 6441] munmap(0x7f19b51e4000, 1048576 [pid 6448] <... set_robust_list resumed>) = 0 [pid 6447] <... set_robust_list resumed>) = 0 [pid 6443] <... clone resumed>, parent_tid=[6449], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6449 [pid 6442] <... munmap resumed>) = 0 [pid 6441] <... munmap resumed>) = 0 [pid 6448] memfd_create("syzkaller", 0 [pid 6447] memfd_create("syzkaller", 0 [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6441] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6448] <... memfd_create resumed>) = 3 [pid 6447] <... memfd_create resumed>) = 3 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... openat resumed>) = 4 [pid 6441] <... openat resumed>) = 4 [pid 6448] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6447] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6446] <... clone resumed>, parent_tid=[6450], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6450 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6442] ioctl(4, LOOP_SET_FD, 3 [pid 6441] ioctl(4, LOOP_SET_FD, 3 [pid 6448] <... mmap resumed>) = 0x7f19b51e4000 [pid 6447] <... mmap resumed>) = 0x7f19b51e4000 [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6450 attached ./strace-static-x86_64: Process 6449 attached ) = 0 [pid 6450] set_robust_list(0x7f19bd6049e0, 24 [pid 6449] set_robust_list(0x7f19bd6049e0, 24 [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6450] <... set_robust_list resumed>) = 0 [pid 6449] <... set_robust_list resumed>) = 0 [pid 6450] memfd_create("syzkaller", 0 [pid 6449] memfd_create("syzkaller", 0 [pid 6450] <... memfd_create resumed>) = 3 [pid 6449] <... memfd_create resumed>) = 3 [pid 6450] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6449] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6450] <... mmap resumed>) = 0x7f19b51e4000 [pid 6449] <... mmap resumed>) = 0x7f19b51e4000 [pid 6450] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6448] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6447] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6442] <... ioctl resumed>) = 0 [pid 6442] close(3) = 0 [pid 6442] mkdir("./bus", 0777 [pid 6449] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6442] <... mkdir resumed>) = 0 [pid 6442] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6441] <... ioctl resumed>) = 0 [pid 6441] close(3) = 0 [pid 6441] mkdir("./bus", 0777) = 0 [pid 6441] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6449] <... write resumed>) = 1048576 [pid 6450] <... write resumed>) = 1048576 [pid 6449] munmap(0x7f19b51e4000, 1048576 [pid 6450] munmap(0x7f19b51e4000, 1048576 [pid 6449] <... munmap resumed>) = 0 [pid 6450] <... munmap resumed>) = 0 [pid 6450] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6449] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6450] <... openat resumed>) = 4 [pid 6449] <... openat resumed>) = 4 [pid 6450] ioctl(4, LOOP_SET_FD, 3 [pid 6449] ioctl(4, LOOP_SET_FD, 3 [pid 6447] <... write resumed>) = 1048576 [pid 6450] <... ioctl resumed>) = 0 [pid 6448] <... write resumed>) = 1048576 [pid 6447] munmap(0x7f19b51e4000, 1048576 [pid 6450] close(3 [pid 6448] munmap(0x7f19b51e4000, 1048576 [pid 6450] <... close resumed>) = 0 [pid 6448] <... munmap resumed>) = 0 [pid 6450] mkdir("./bus", 0777 [pid 6448] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6450] <... mkdir resumed>) = 0 [pid 6450] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6447] <... munmap resumed>) = 0 [pid 6447] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6449] <... ioctl resumed>) = 0 [pid 6448] <... openat resumed>) = 4 [pid 6442] <... mount resumed>) = 0 [pid 6441] <... mount resumed>) = 0 [pid 6449] close(3) = 0 [pid 6449] mkdir("./bus", 0777 [pid 6441] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6441] chdir("./bus" [pid 6449] <... mkdir resumed>) = 0 [pid 6449] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6442] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6441] <... chdir resumed>) = 0 [pid 6442] <... openat resumed>) = 3 [pid 6442] chdir("./bus" [pid 6441] ioctl(4, LOOP_CLR_FD [pid 6442] <... chdir resumed>) = 0 [pid 6441] <... ioctl resumed>) = 0 [pid 6442] ioctl(4, LOOP_CLR_FD [pid 6441] close(4 [pid 6448] ioctl(4, LOOP_SET_FD, 3 [pid 6447] <... openat resumed>) = 4 [pid 6447] ioctl(4, LOOP_SET_FD, 3 [pid 6448] <... ioctl resumed>) = 0 [pid 6448] close(3) = 0 [pid 6448] mkdir("./bus", 0777) = 0 [pid 6447] <... ioctl resumed>) = 0 [pid 6448] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6447] close(3) = 0 [pid 6447] mkdir("./bus", 0777 [pid 6441] <... close resumed>) = 0 [pid 6447] <... mkdir resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6441] <... futex resumed>) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... ioctl resumed>) = 0 [pid 6442] close(4) = 0 [ 149.963741][ T6442] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/197/bus supports timestamps until 2038 (0x7fffffff) [ 149.976320][ T6441] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/204/bus supports timestamps until 2038 (0x7fffffff) [pid 6441] chdir("./file0" [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... chdir resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] <... futex resumed>) = 0 [pid 6441] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... open resumed>) = 4 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] <... futex resumed>) = 0 [pid 6441] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... mount resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] <... futex resumed>) = 0 [pid 6441] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... open resumed>) = 5 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] <... futex resumed>) = 0 [pid 6441] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... openat resumed>) = 6 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6439] <... futex resumed>) = 0 [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6439] <... futex resumed>) = 0 [pid 6441] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... write resumed>) = 262144 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] <... futex resumed>) = 0 [pid 6439] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6439] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6441] <... futex resumed>) = 1 [pid 6441] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6442] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] chdir("./file0") = 0 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6440] <... futex resumed>) = 0 [pid 6449] <... mount resumed>) = 0 [pid 6449] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6449] chdir("./bus") = 0 [pid 6449] ioctl(4, LOOP_CLR_FD) = 0 [pid 6449] close(4) = 0 [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = 0 [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6449] <... futex resumed>) = 1 [pid 6449] chdir("./file0") = 0 [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] <... futex resumed>) = 0 [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... mount resumed>) = 0 [pid 6449] <... futex resumed>) = 1 [pid 6447] <... mount resumed>) = 0 [pid 6442] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6449] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6440] <... futex resumed>) = 0 [pid 6450] <... openat resumed>) = 3 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] chdir("./bus") = 0 [ 150.014613][ T6449] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/202/bus supports timestamps until 2038 (0x7fffffff) [ 150.020092][ T6450] ext4 filesystem being mounted at /root/syzkaller.69675s/203/bus supports timestamps until 2038 (0x7fffffff) [ 150.048053][ T6447] ext4 filesystem being mounted at /root/syzkaller.URAKkl/206/bus supports timestamps until 2038 (0x7fffffff) [pid 6450] ioctl(4, LOOP_CLR_FD) = 0 [pid 6450] close(4) = 0 [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6441] <... write resumed>) = 1048576 [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] <... open resumed>) = 4 [pid 6447] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... open resumed>) = 4 [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... openat resumed>) = 3 [pid 6446] <... futex resumed>) = 0 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6441] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6450] chdir("./file0" [pid 6449] <... futex resumed>) = 1 [pid 6448] <... mount resumed>) = 0 [pid 6447] chdir("./bus" [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 6441] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 6439] <... futex resumed>) = 0 [pid 6450] <... chdir resumed>) = 0 [pid 6448] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6442] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6441] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6439] exit_group(0 [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... openat resumed>) = 3 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6441] <... futex resumed>) = ? [pid 6439] <... exit_group resumed>) = ? [pid 6450] <... futex resumed>) = 1 [pid 6449] <... mount resumed>) = 0 [pid 6448] chdir("./bus" [pid 6447] <... chdir resumed>) = 0 [pid 6446] <... futex resumed>) = 0 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6441] +++ exited with 0 +++ [pid 6440] <... futex resumed>) = 0 [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] ioctl(4, LOOP_CLR_FD [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6439] +++ exited with 0 +++ [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6449] <... futex resumed>) = 0 [pid 6447] <... ioctl resumed>) = 0 [pid 6446] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6442] <... mount resumed>) = 0 [pid 6450] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6449] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] close(4 [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6439, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6450] <... open resumed>) = 4 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] <... close resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 310] restart_syscall(<... resuming interrupted clone ...> [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6448] <... chdir resumed>) = 0 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... restart_syscall resumed>) = 0 [pid 6450] <... futex resumed>) = 1 [pid 6449] <... open resumed>) = 5 [pid 6448] ioctl(4, LOOP_CLR_FD [pid 6447] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6440] <... futex resumed>) = 0 [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... ioctl resumed>) = 0 [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6449] <... futex resumed>) = 1 [pid 6448] close(4 [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... open resumed>) = 5 [pid 310] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6449] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... close resumed>) = 0 [pid 6447] chdir("./file0" [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... mount resumed>) = 0 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... chdir resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 310] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6448] <... futex resumed>) = 1 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... openat resumed>) = 3 [pid 6450] <... futex resumed>) = 1 [pid 6449] <... openat resumed>) = 6 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6440] <... futex resumed>) = 0 [pid 310] fstat(3, [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6449] <... futex resumed>) = 1 [pid 6448] chdir("./file0" [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] <... futex resumed>) = 0 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... openat resumed>) = 6 [pid 310] getdents64(3, [pid 6450] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6449] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... chdir resumed>) = 0 [pid 6447] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6450] <... open resumed>) = 5 [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... open resumed>) = 4 [pid 6443] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 310] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6448] <... futex resumed>) = 1 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6450] <... futex resumed>) = 1 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6447] <... futex resumed>) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] <... futex resumed>) = 0 [pid 6442] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6440] <... futex resumed>) = 0 [pid 310] lstat("./204/binderfs", [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6450] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6449] <... write resumed>) = 262144 [pid 6448] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6446] <... futex resumed>) = 0 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] <... futex resumed>) = 0 [pid 310] unlink("./204/binderfs" [pid 6450] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... unlink resumed>) = 0 [pid 6450] <... openat resumed>) = 6 [ 150.066454][ T6448] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/201/bus supports timestamps until 2038 (0x7fffffff) [pid 6449] <... futex resumed>) = 1 [pid 6448] <... open resumed>) = 4 [pid 6447] <... mount resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 310] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6442] <... write resumed>) = 262144 [pid 6448] <... futex resumed>) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6443] <... futex resumed>) = 0 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6443] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6442] <... futex resumed>) = 1 [pid 6440] <... futex resumed>) = 0 [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6445] <... futex resumed>) = 0 [pid 6442] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6440] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6440] <... futex resumed>) = 0 [pid 6448] <... mount resumed>) = 0 [pid 6440] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6445] <... futex resumed>) = 0 [pid 6448] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... futex resumed>) = 1 [pid 6448] <... open resumed>) = 5 [pid 6447] <... futex resumed>) = 1 [pid 6450] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6449] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6446] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = 0 [pid 6448] <... futex resumed>) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6445] <... futex resumed>) = 0 [pid 6448] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6448] <... openat resumed>) = 6 [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6448] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6448] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6445] <... futex resumed>) = 0 [pid 6448] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6448] <... write resumed>) = 262144 [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6445] <... futex resumed>) = 0 [pid 6448] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6445] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6445] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6450] <... futex resumed>) = 0 [pid 6447] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6446] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6450] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6447] <... open resumed>) = 5 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] <... write resumed>) = 262144 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6444] <... futex resumed>) = 0 [pid 6447] <... openat resumed>) = 6 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6447] <... futex resumed>) = 0 [pid 6444] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6444] <... futex resumed>) = 0 [pid 6447] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6446] <... futex resumed>) = 0 [pid 6446] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6450] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6447] <... write resumed>) = 262144 [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6444] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6447] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6444] <... futex resumed>) = 0 [pid 6444] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6443] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6440] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6449] <... write resumed>) = 1048576 [pid 6449] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6443] exit_group(0 [pid 6447] <... write resumed>) = 1048576 [pid 6443] <... exit_group resumed>) = ? [pid 6447] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6449] +++ exited with 0 +++ [pid 6443] +++ exited with 0 +++ [pid 6442] <... write resumed>) = 1048576 [pid 6442] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6442] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6440] exit_group(0) = ? [pid 6442] <... futex resumed>) = ? [ 150.119128][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 150.132994][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 6445] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6442] +++ exited with 0 +++ [pid 6440] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6440, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./197", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./197", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6447] <... futex resumed>) = 1 [pid 6444] <... futex resumed>) = 0 [pid 309] umount2("./197/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6447] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6444] exit_group(0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6444] <... exit_group resumed>) = ? [pid 309] lstat("./197/binderfs", [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6443, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 6447] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 6448] <... write resumed>) = 1048576 [pid 309] unlink("./197/binderfs" [pid 6448] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... unlink resumed>) = 0 [pid 6448] <... futex resumed>) = 0 [pid 6447] +++ exited with 0 +++ [pid 6445] exit_group(0 [pid 6444] +++ exited with 0 +++ [pid 309] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6445] <... exit_group resumed>) = ? [pid 307] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6444, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 6448] +++ exited with 0 +++ [pid 6445] +++ exited with 0 +++ [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6445, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 305] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 305] umount2("./201", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./201", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./201/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./201/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./201/binderfs") = 0 [pid 305] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6446] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 307] <... openat resumed>) = 3 [pid 306] <... restart_syscall resumed>) = 0 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] lstat("./202/binderfs", [pid 306] fstat(3, [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] unlink("./202/binderfs" [pid 306] getdents64(3, [pid 307] <... unlink resumed>) = 0 [pid 307] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./206/binderfs") = 0 [pid 6450] <... write resumed>) = 1048576 [ 150.214181][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 150.229191][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 150.247631][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6450] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6446] exit_group(0) = ? [ 150.248365][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 150.261659][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 150.284961][ T381] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./204/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 310] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./204/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./204") = 0 [pid 310] mkdir("./205", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6450] +++ exited with 0 +++ [pid 6446] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6446, si_uid=0, si_status=0, si_utime=0, si_stime=8} --- [pid 308] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./203/binderfs") = 0 [ 150.303277][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 150.317882][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 308] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... openat resumed>) = 3 [ 150.356434][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 150.369842][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 310] ioctl(3, LOOP_CLR_FD [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./201/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./201/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./201/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 4 [pid 305] fstat(4, [pid 309] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./197/bus", [pid 305] getdents64(4, [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] umount2("./197/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] getdents64(4, [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] openat(AT_FDCWD, "./197/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 305] close(4 [pid 309] <... openat resumed>) = 4 [pid 305] <... close resumed>) = 0 [pid 309] fstat(4, [pid 305] rmdir("./201/bus" [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 309] getdents64(4, [pid 305] getdents64(3, [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(3 [pid 309] close(4 [pid 305] <... close resumed>) = 0 [pid 309] <... close resumed>) = 0 [pid 305] rmdir("./201" [pid 309] rmdir("./197/bus" [pid 305] <... rmdir resumed>) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 305] mkdir("./202", 0777 [pid 309] getdents64(3, [pid 305] <... mkdir resumed>) = 0 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 309] close(3) = 0 [pid 309] rmdir("./197") = 0 [pid 309] mkdir("./198", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... umount2 resumed>) = 0 [pid 307] <... umount2 resumed>) = 0 [pid 306] <... umount2 resumed>) = 0 [pid 308] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./203/bus", [pid 310] close(3 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 308] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] close(4) = 0 [pid 308] rmdir("./203/bus") = 0 [pid 307] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] close(3) = 0 [pid 308] rmdir("./203") = 0 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./206/bus", [pid 307] lstat("./202/bus", [pid 308] mkdir("./204", 0777) = 0 [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 307] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... openat resumed>) = 4 [pid 306] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 307] fstat(4, [pid 306] <... openat resumed>) = 4 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] fstat(4, [pid 307] getdents64(4, [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, [pid 307] getdents64(4, [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] getdents64(4, [pid 307] close(4 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] <... close resumed>) = 0 [pid 306] close(4 [pid 307] rmdir("./202/bus") = 0 [pid 306] <... close resumed>) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] rmdir("./206/bus" [pid 307] close(3) = 0 [pid 307] rmdir("./202") = 0 [pid 306] <... rmdir resumed>) = 0 [pid 307] mkdir("./203", 0777 [pid 306] getdents64(3, [pid 307] <... mkdir resumed>) = 0 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 306] close(3) = 0 [pid 306] rmdir("./206") = 0 [pid 306] mkdir("./207", 0777) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 305] <... openat resumed>) = 3 [pid 305] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6469 [pid 309] <... openat resumed>) = 3 [pid 309] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 309] close(3) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6470 ./strace-static-x86_64: Process 6470 attached [pid 6470] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6470] chdir("./198") = 0 [pid 6470] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6470] setpgid(0, 0) = 0 [pid 6470] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6470] write(3, "1000", 4) = 4 [pid 6470] close(3) = 0 [pid 6470] symlink("/dev/binderfs", "./binderfs" [pid 310] <... close resumed>) = 0 [pid 308] <... openat resumed>) = 3 [pid 307] <... openat resumed>) = 3 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] ioctl(3, LOOP_CLR_FD [pid 307] ioctl(3, LOOP_CLR_FD [pid 306] <... openat resumed>) = 3 [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 307] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] close(3 [pid 307] close(3 [pid 308] <... close resumed>) = 0 [pid 307] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] ioctl(3, LOOP_CLR_FD [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6471 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6472 [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6473 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6470] <... symlink resumed>) = 0 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6470] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6470] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6474], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6474 [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6471 attached [pid 6471] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6471] chdir("./205") = 0 [pid 6471] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6471] setpgid(0, 0) = 0 [pid 6471] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] close(3 [pid 6471] write(3, "1000", 4 [pid 306] <... close resumed>) = 0 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6471] <... write resumed>) = 4 [pid 6471] close(3) = 0 [pid 6471] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6471] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6471] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6475 [pid 6471] <... mprotect resumed>) = 0 [pid 6471] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6476], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6476 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6475 attached [pid 6475] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6475] chdir("./207") = 0 [pid 6475] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6475] setpgid(0, 0) = 0 [pid 6475] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 6474 attached ) = 3 [pid 6474] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6474] memfd_create("syzkaller", 0 [pid 6475] write(3, "1000", 4) = 4 [pid 6474] <... memfd_create resumed>) = 3 [pid 6475] close(3) = 0 [pid 6475] symlink("/dev/binderfs", "./binderfs" [pid 6474] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6475] <... symlink resumed>) = 0 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6475] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6475] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6477], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6477 [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6473 attached ./strace-static-x86_64: Process 6472 attached ./strace-static-x86_64: Process 6476 attached [pid 6476] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6476] memfd_create("syzkaller", 0 [pid 6473] set_robust_list(0x55555748e5e0, 24 [pid 6472] set_robust_list(0x55555748e5e0, 24 [pid 6476] <... memfd_create resumed>) = 3 [pid 6476] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6473] <... set_robust_list resumed>) = 0 [pid 6472] <... set_robust_list resumed>) = 0 [pid 6472] chdir("./204" [pid 6473] chdir("./203") = 0 [pid 6472] <... chdir resumed>) = 0 [pid 6472] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6473] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6472] <... prctl resumed>) = 0 [pid 6473] setpgid(0, 0) = 0 [pid 6472] setpgid(0, 0) = 0 [pid 6473] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6472] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6473] <... openat resumed>) = 3 [pid 6472] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6469 attached [pid 6472] write(3, "1000", 4 [pid 6473] write(3, "1000", 4) = 4 [pid 6472] <... write resumed>) = 4 [pid 6473] close(3 [pid 6472] close(3 [pid 6469] set_robust_list(0x55555748e5e0, 24 [pid 6473] <... close resumed>) = 0 [pid 6472] <... close resumed>) = 0 [pid 6469] <... set_robust_list resumed>) = 0 [pid 6472] symlink("/dev/binderfs", "./binderfs" [pid 6473] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6472] <... symlink resumed>) = 0 [pid 6469] chdir("./202" [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... chdir resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6469] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6473] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6472] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6469] <... prctl resumed>) = 0 [pid 6473] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6472] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6469] setpgid(0, 0 [pid 6473] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6472] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6469] <... setpgid resumed>) = 0 [pid 6473] <... mprotect resumed>) = 0 [pid 6472] <... mprotect resumed>) = 0 [pid 6473] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6472] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6473] <... clone resumed>, parent_tid=[6478], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6478 [pid 6472] <... clone resumed>, parent_tid=[6479], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6479 [pid 6469] <... openat resumed>) = 3 ./strace-static-x86_64: Process 6477 attached [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] write(3, "1000", 4 [pid 6477] set_robust_list(0x7f19bd6049e0, 24 [pid 6473] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6469] <... write resumed>) = 4 [pid 6477] <... set_robust_list resumed>) = 0 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6469] close(3./strace-static-x86_64: Process 6478 attached [pid 6477] memfd_create("syzkaller", 0 [pid 6474] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6469] <... close resumed>) = 0 [pid 6478] set_robust_list(0x7f19bd6049e0, 24 [pid 6477] <... memfd_create resumed>) = 3 [pid 6469] symlink("/dev/binderfs", "./binderfs" [pid 6477] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6478] <... set_robust_list resumed>) = 0 [pid 6469] <... symlink resumed>) = 0 [pid 6478] memfd_create("syzkaller", 0 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... memfd_create resumed>) = 3 [pid 6474] <... write resumed>) = 1048576 [pid 6469] <... futex resumed>) = 0 ./strace-static-x86_64: Process 6479 attached [pid 6479] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6479] memfd_create("syzkaller", 0 [pid 6469] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6479] <... memfd_create resumed>) = 3 [pid 6469] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6479] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6469] <... mprotect resumed>) = 0 [pid 6479] <... mmap resumed>) = 0x7f19b51e4000 [pid 6476] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6469] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6478] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6469] <... clone resumed>, parent_tid=[6480], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6480 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 6480 attached [pid 6478] <... mmap resumed>) = 0x7f19b51e4000 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6480] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6480] memfd_create("syzkaller", 0) = 3 [pid 6480] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6474] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6474] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6474] ioctl(4, LOOP_SET_FD, 3 [pid 6479] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6478] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6477] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6476] <... write resumed>) = 1048576 [pid 6476] munmap(0x7f19b51e4000, 1048576 [pid 6474] <... ioctl resumed>) = 0 [pid 6474] close(3) = 0 [pid 6474] mkdir("./bus", 0777) = 0 [pid 6474] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6476] <... munmap resumed>) = 0 [pid 6476] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6476] ioctl(4, LOOP_SET_FD, 3 [pid 6479] <... write resumed>) = 1048576 [pid 6479] munmap(0x7f19b51e4000, 1048576 [pid 6480] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6479] <... munmap resumed>) = 0 [pid 6479] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6480] <... write resumed>) = 1048576 [pid 6478] <... write resumed>) = 1048576 [pid 6477] <... write resumed>) = 1048576 [pid 6476] <... ioctl resumed>) = 0 [pid 6476] close(3) = 0 [pid 6476] mkdir("./bus", 0777) = 0 [pid 6476] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6480] munmap(0x7f19b51e4000, 1048576 [pid 6479] <... openat resumed>) = 4 [pid 6478] munmap(0x7f19b51e4000, 1048576 [pid 6477] munmap(0x7f19b51e4000, 1048576 [pid 6474] <... mount resumed>) = 0 [pid 6480] <... munmap resumed>) = 0 [pid 6479] ioctl(4, LOOP_SET_FD, 3 [pid 6478] <... munmap resumed>) = 0 [pid 6477] <... munmap resumed>) = 0 [pid 6480] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6478] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6477] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6474] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6474] chdir("./bus") = 0 [pid 6474] ioctl(4, LOOP_CLR_FD [pid 6480] <... openat resumed>) = 4 [pid 6479] <... ioctl resumed>) = 0 [pid 6477] <... openat resumed>) = 4 [pid 6480] ioctl(4, LOOP_SET_FD, 3 [pid 6479] close(3 [pid 6477] ioctl(4, LOOP_SET_FD, 3 [pid 6479] <... close resumed>) = 0 [pid 6479] mkdir("./bus", 0777) = 0 [pid 6479] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6480] <... ioctl resumed>) = 0 [pid 6474] <... ioctl resumed>) = 0 [pid 6478] <... openat resumed>) = 4 [pid 6474] close(4 [pid 6480] close(3 [pid 6478] ioctl(4, LOOP_SET_FD, 3 [pid 6476] <... mount resumed>) = 0 [pid 6480] <... close resumed>) = 0 [pid 6477] <... ioctl resumed>) = 0 [pid 6476] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6474] <... close resumed>) = 0 [pid 6478] <... ioctl resumed>) = 0 [pid 6478] close(3 [pid 6476] <... openat resumed>) = 3 [pid 6478] <... close resumed>) = 0 [pid 6476] chdir("./bus" [pid 6478] mkdir("./bus", 0777 [pid 6476] <... chdir resumed>) = 0 [pid 6480] mkdir("./bus", 0777 [pid 6478] <... mkdir resumed>) = 0 [pid 6477] close(3 [pid 6476] ioctl(4, LOOP_CLR_FD [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6476] <... ioctl resumed>) = 0 [pid 6474] <... futex resumed>) = 1 [pid 6470] <... futex resumed>) = 0 [ 150.667188][ T6474] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/198/bus supports timestamps until 2038 (0x7fffffff) [ 150.685905][ T6476] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/205/bus supports timestamps until 2038 (0x7fffffff) [pid 6480] <... mkdir resumed>) = 0 [pid 6477] <... close resumed>) = 0 [pid 6476] close(4 [pid 6474] chdir("./file0" [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6477] mkdir("./bus", 0777 [pid 6476] <... close resumed>) = 0 [pid 6474] <... chdir resumed>) = 0 [pid 6470] <... futex resumed>) = 0 [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] <... futex resumed>) = 0 [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] <... mkdir resumed>) = 0 [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6474] <... futex resumed>) = 0 [pid 6470] <... futex resumed>) = 1 [pid 6474] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6474] <... open resumed>) = 4 [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6470] <... futex resumed>) = 0 [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6474] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... mount resumed>) = 0 [pid 6476] <... futex resumed>) = 1 [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 0 [pid 6476] chdir("./file0" [pid 6474] <... futex resumed>) = 1 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6470] <... futex resumed>) = 0 [pid 6479] <... mount resumed>) = 0 [pid 6476] <... chdir resumed>) = 0 [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] <... futex resumed>) = 0 [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = 0 [pid 6474] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] <... open resumed>) = 5 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 0 [pid 6479] <... openat resumed>) = 3 [pid 6476] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6474] <... futex resumed>) = 1 [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6479] chdir("./bus" [pid 6476] <... open resumed>) = 4 [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... chdir resumed>) = 0 [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6479] ioctl(4, LOOP_CLR_FD [pid 6476] <... futex resumed>) = 1 [pid 6474] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6471] <... futex resumed>) = 0 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... ioctl resumed>) = 0 [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] <... openat resumed>) = 6 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] close(4 [pid 6476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] <... futex resumed>) = 0 [pid 6479] <... close resumed>) = 0 [pid 6474] <... futex resumed>) = 1 [ 150.709244][ T6479] ext4 filesystem being mounted at /root/syzkaller.69675s/204/bus supports timestamps until 2038 (0x7fffffff) [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = 0 [pid 6480] <... mount resumed>) = 0 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6479] <... futex resumed>) = 1 [pid 6476] <... mount resumed>) = 0 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6480] <... openat resumed>) = 3 [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] chdir("./bus" [pid 6476] <... futex resumed>) = 1 [pid 6474] <... write resumed>) = 262144 [pid 6471] <... futex resumed>) = 0 [pid 6480] <... chdir resumed>) = 0 [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] ioctl(4, LOOP_CLR_FD [pid 6476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6474] <... futex resumed>) = 1 [pid 6471] <... futex resumed>) = 0 [pid 6470] <... futex resumed>) = 0 [pid 6480] <... ioctl resumed>) = 0 [pid 6476] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6474] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] close(4 [pid 6476] <... open resumed>) = 5 [pid 6474] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6470] <... futex resumed>) = 0 [pid 6478] <... mount resumed>) = 0 [pid 6477] <... mount resumed>) = 0 [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... futex resumed>) = 0 [pid 6478] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6477] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... openat resumed>) = 3 [pid 6477] <... openat resumed>) = 3 [pid 6472] <... futex resumed>) = 1 [pid 6478] chdir("./bus" [pid 6477] chdir("./bus" [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... chdir resumed>) = 0 [pid 6477] <... chdir resumed>) = 0 [pid 6478] ioctl(4, LOOP_CLR_FD) = 0 [pid 6477] ioctl(4, LOOP_CLR_FD [pid 6478] close(4 [pid 6477] <... ioctl resumed>) = 0 [pid 6478] <... close resumed>) = 0 [pid 6477] close(4 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] <... close resumed>) = 0 [pid 6479] <... futex resumed>) = 0 [pid 6478] <... futex resumed>) = 1 [pid 6476] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6470] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] chdir("./file0" [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... chdir resumed>) = 0 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] <... futex resumed>) = 1 [pid 6476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6475] <... futex resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] chdir("./file0" [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [pid 6478] <... chdir resumed>) = 0 [pid 6477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6472] <... futex resumed>) = 0 [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] chdir("./file0" [pid 6476] <... openat resumed>) = 6 [pid 6475] <... futex resumed>) = 0 [pid 6474] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... close resumed>) = 0 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 1 [pid 6477] <... chdir resumed>) = 0 [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6473] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6476] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... futex resumed>) = 0 [pid 6480] <... futex resumed>) = 1 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] <... futex resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] <... open resumed>) = 4 [pid 6478] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6477] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6476] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... open resumed>) = 4 [pid 6477] <... open resumed>) = 4 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = 1 [pid 6477] <... futex resumed>) = 0 [pid 6473] <... futex resumed>) = 0 [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 0 [pid 6478] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... mount resumed>) = 0 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 0 [pid 6478] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... open resumed>) = 5 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 0 [pid 6478] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... openat resumed>) = 6 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6478] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6478] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 0 [pid 6478] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] chdir("./file0" [pid 6479] <... futex resumed>) = 1 [pid 6478] <... write resumed>) = 262144 [pid 6477] <... futex resumed>) = 0 [pid 6476] <... write resumed>) = 262144 [pid 6475] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6480] <... chdir resumed>) = 0 [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6478] <... futex resumed>) = 1 [pid 6476] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6473] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 150.746127][ T6478] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/203/bus supports timestamps until 2038 (0x7fffffff) [ 150.747177][ T6480] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/202/bus supports timestamps until 2038 (0x7fffffff) [ 150.759969][ T6477] ext4 filesystem being mounted at /root/syzkaller.URAKkl/207/bus supports timestamps until 2038 (0x7fffffff) [pid 6480] <... futex resumed>) = 0 [pid 6479] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 6478] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6479] <... mount resumed>) = 0 [pid 6477] <... futex resumed>) = 0 [pid 6476] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6475] <... futex resumed>) = 1 [pid 6473] <... futex resumed>) = 0 [pid 6473] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6471] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6476] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6477] <... mount resumed>) = 0 [pid 6479] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6471] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] <... futex resumed>) = 1 [pid 6475] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6477] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6480] <... open resumed>) = 4 [pid 6479] <... open resumed>) = 5 [pid 6477] <... open resumed>) = 5 [pid 6475] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... futex resumed>) = 1 [pid 6479] <... futex resumed>) = 1 [pid 6477] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6469] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6475] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6480] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6477] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... mount resumed>) = 0 [pid 6472] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] <... openat resumed>) = 6 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... futex resumed>) = 1 [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... futex resumed>) = 0 [pid 6480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] <... futex resumed>) = 1 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 0 [pid 6480] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6469] <... futex resumed>) = 0 [pid 6480] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6477] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6475] <... futex resumed>) = 0 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] <... open resumed>) = 5 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6480] <... futex resumed>) = 1 [pid 6469] <... futex resumed>) = 0 [pid 6472] <... futex resumed>) = 1 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6470] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] <... futex resumed>) = 0 [pid 6469] <... futex resumed>) = 0 [pid 6480] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6480] <... openat resumed>) = 6 [pid 6479] <... openat resumed>) = 6 [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6480] <... futex resumed>) = 1 [pid 6469] <... futex resumed>) = 0 [pid 6480] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6479] <... futex resumed>) = 1 [pid 6472] <... futex resumed>) = 0 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6479] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] <... futex resumed>) = 0 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6478] <... write resumed>) = 1048576 [pid 6478] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6473] <... futex resumed>) = 0 [pid 6473] exit_group(0) = ? [pid 6478] <... futex resumed>) = ? [pid 6478] +++ exited with 0 +++ [pid 6473] +++ exited with 0 +++ [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6473, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 307] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 307] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 307] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./203/binderfs") = 0 [pid 307] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6479] <... write resumed>) = 262144 [pid 6477] <... write resumed>) = 262144 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6472] <... futex resumed>) = 0 [pid 6472] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6479] <... futex resumed>) = 1 [pid 6479] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6474] <... write resumed>) = 1048576 [pid 6480] <... write resumed>) = 262144 [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6477] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6474] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] <... futex resumed>) = 0 [pid 6471] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6470] exit_group(0 [pid 6475] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6474] <... futex resumed>) = ? [pid 6470] <... exit_group resumed>) = ? [pid 6477] <... futex resumed>) = 0 [pid 6475] <... futex resumed>) = 1 [pid 6474] +++ exited with 0 +++ [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6470] +++ exited with 0 +++ [pid 6480] <... futex resumed>) = 1 [pid 6475] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6469] <... futex resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6470, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 6480] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6469] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] restart_syscall(<... resuming interrupted clone ...> [pid 6469] <... futex resumed>) = 0 [pid 309] <... restart_syscall resumed>) = 0 [pid 6469] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] umount2("./198", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./198", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./198/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./198/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./198/binderfs") = 0 [ 150.868562][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 150.882795][ T344] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6472] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6472] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6476] <... write resumed>) = 1048576 [pid 6476] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6476] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6471] exit_group(0 [pid 6476] <... futex resumed>) = ? [pid 6471] <... exit_group resumed>) = ? [pid 6476] +++ exited with 0 +++ [pid 6471] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6471, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 310] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./205/binderfs") = 0 [pid 310] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6480] <... write resumed>) = 1048576 [pid 6477] <... write resumed>) = 1048576 [ 150.917613][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 150.949269][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 6475] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6469] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6480] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6477] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6475] exit_group(0 [pid 6480] <... futex resumed>) = 0 [pid 6469] exit_group(0 [pid 6480] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6477] <... futex resumed>) = 0 [pid 6480] <... futex resumed>) = ? [pid 6475] <... exit_group resumed>) = ? [pid 6469] <... exit_group resumed>) = ? [pid 6480] +++ exited with 0 +++ [pid 6477] +++ exited with 0 +++ [pid 6479] <... write resumed>) = 1048576 [pid 6479] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6479] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6472] exit_group(0) = ? [pid 6479] <... futex resumed>) = ? [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./203/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./203/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./203") = 0 [pid 307] mkdir("./204", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 6469] +++ exited with 0 +++ [pid 6475] +++ exited with 0 +++ [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6475, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6469, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 306] restart_syscall(<... resuming interrupted clone ...> [pid 305] restart_syscall(<... resuming interrupted clone ...> [pid 306] <... restart_syscall resumed>) = 0 [pid 305] <... restart_syscall resumed>) = 0 [pid 306] umount2("./207", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./207", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 305] umount2("./202", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] openat(AT_FDCWD, "./202", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] umount2("./207/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] <... openat resumed>) = 3 [pid 306] lstat("./207/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] fstat(3, [pid 306] unlink("./207/binderfs" [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... unlink resumed>) = 0 [pid 306] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW [ 150.950905][ T734] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 150.981922][ T344] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./202/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./202/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./202/binderfs") = 0 [ 151.047834][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 151.061852][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 151.075026][ T734] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 305] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6479] +++ exited with 0 +++ [pid 6472] +++ exited with 0 +++ [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6472, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 307] <... openat resumed>) = 3 [pid 308] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./204/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./204/binderfs") = 0 [pid 308] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 310] <... umount2 resumed>) = 0 [pid 309] <... umount2 resumed>) = 0 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 310] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] close(3 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 307] <... close resumed>) = 0 [pid 310] lstat("./205/bus", [pid 309] lstat("./198/bus", [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] umount2("./198/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6499 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 309] openat(AT_FDCWD, "./198/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 310] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 309] <... openat resumed>) = 4 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 309] fstat(4, [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] getdents64(4, [pid 310] close(4 [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] <... close resumed>) = 0 [pid 309] getdents64(4, [pid 310] rmdir("./205/bus" [pid 309] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 310] getdents64(3, [pid 309] close(4 [pid 310] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] <... close resumed>) = 0 [pid 310] close(3 [pid 309] rmdir("./198/bus" [pid 310] <... close resumed>) = 0 ./strace-static-x86_64: Process 6499 attached [pid 310] rmdir("./205" [pid 309] <... rmdir resumed>) = 0 [pid 310] <... rmdir resumed>) = 0 [pid 309] getdents64(3, [pid 310] mkdir("./206", 0777 [pid 309] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] <... mkdir resumed>) = 0 [pid 309] close(3 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./198") = 0 [pid 309] mkdir("./199", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6499] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6499] chdir("./204") = 0 [pid 6499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6499] setpgid(0, 0) = 0 [pid 6499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6499] write(3, "1000", 4) = 4 [pid 6499] close(3) = 0 [pid 6499] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6499] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6499] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6500], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6500 [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6500 attached [pid 6500] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6500] memfd_create("syzkaller", 0) = 3 [pid 6500] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6500] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 306] <... umount2 resumed>) = 0 [pid 306] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./207/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./207/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./207/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./207/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./207") = 0 [pid 306] mkdir("./208", 0777 [pid 310] <... openat resumed>) = 3 [pid 309] <... openat resumed>) = 3 [pid 310] ioctl(3, LOOP_CLR_FD [pid 309] ioctl(3, LOOP_CLR_FD [pid 306] <... mkdir resumed>) = 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 6500] munmap(0x7f19b51e4000, 1048576) = 0 [ 151.075416][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 151.110302][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 151.128103][ T734] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6500] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... openat resumed>) = 3 [pid 305] <... umount2 resumed>) = 0 [pid 6500] ioctl(4, LOOP_SET_FD, 3 [pid 310] close(3 [pid 309] close(3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 6500] <... ioctl resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6500] close(3 [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] close(3 [pid 6500] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 6500] mkdir("./bus", 0777 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6502 [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6500] <... mkdir resumed>) = 0 [pid 6500] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6503 [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 308] <... umount2 resumed>) = 0 [pid 309] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6504 ./strace-static-x86_64: Process 6503 attached ./strace-static-x86_64: Process 6504 attached ./strace-static-x86_64: Process 6502 attached [pid 308] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6503] set_robust_list(0x55555748e5e0, 24 [pid 6502] set_robust_list(0x55555748e5e0, 24 [pid 308] lstat("./204/bus", [pid 305] lstat("./202/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6504] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6504] chdir("./199") = 0 [pid 6504] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6504] setpgid(0, 0) = 0 [pid 6504] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 305] umount2("./202/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6504] write(3, "1000", 4) = 4 [pid 6504] close(3) = 0 [pid 6504] symlink("/dev/binderfs", "./binderfs") = 0 [pid 308] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 305] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./202/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6504] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6504] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6506], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6506 [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6506 attached [pid 6506] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6506] memfd_create("syzkaller", 0 [pid 305] <... openat resumed>) = 4 [pid 308] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6503] <... set_robust_list resumed>) = 0 [pid 6502] <... set_robust_list resumed>) = 0 [pid 308] <... openat resumed>) = 4 [pid 6503] chdir("./208" [pid 305] fstat(4, [pid 308] fstat(4, [pid 305] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, [pid 308] getdents64(4, [pid 6506] <... memfd_create resumed>) = 3 [pid 6506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 305] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 6506] <... mmap resumed>) = 0x7f19b51e4000 [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] getdents64(4, [pid 305] close(4 [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] <... close resumed>) = 0 [pid 308] close(4 [pid 305] rmdir("./202/bus" [pid 308] <... close resumed>) = 0 [pid 305] <... rmdir resumed>) = 0 [pid 308] rmdir("./204/bus") = 0 [pid 305] getdents64(3, [pid 6503] <... chdir resumed>) = 0 [pid 308] getdents64(3, [pid 305] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3 [pid 6503] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] close(3 [pid 305] <... close resumed>) = 0 [pid 308] <... close resumed>) = 0 [pid 305] rmdir("./202" [pid 308] rmdir("./204" [pid 305] <... rmdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 305] mkdir("./203", 0777 [pid 6503] <... prctl resumed>) = 0 [pid 308] mkdir("./205", 0777 [pid 305] <... mkdir resumed>) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 6503] setpgid(0, 0 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 305] <... openat resumed>) = 3 [pid 6503] <... setpgid resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 305] ioctl(3, LOOP_CLR_FD [pid 6502] chdir("./206" [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6503] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6502] <... chdir resumed>) = 0 [pid 308] close(3 [pid 305] close(3 [pid 6503] <... openat resumed>) = 3 [pid 308] <... close resumed>) = 0 [pid 6502] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 305] <... close resumed>) = 0 [pid 6503] write(3, "1000", 4 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 6503] <... write resumed>) = 4 [pid 6502] <... prctl resumed>) = 0 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6508 [pid 6503] close(3 [pid 6502] setpgid(0, 0 [pid 305] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6509 [pid 6502] <... setpgid resumed>) = 0 [pid 6503] <... close resumed>) = 0 [pid 6502] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6503] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... openat resumed>) = 3 [pid 6502] write(3, "1000", 4 [pid 6503] <... futex resumed>) = 0 [pid 6502] <... write resumed>) = 4 [pid 6503] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6502] close(3./strace-static-x86_64: Process 6509 attached ) = 0 [pid 6503] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6503] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6502] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6503] <... mprotect resumed>) = 0 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] set_robust_list(0x55555748e5e0, 24 [pid 6503] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6502] <... futex resumed>) = 0 [pid 6509] <... set_robust_list resumed>) = 0 [pid 6509] chdir("./203") = 0 ./strace-static-x86_64: Process 6508 attached [pid 6502] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 6508] set_robust_list(0x55555748e5e0, 24 [pid 6502] <... mmap resumed>) = 0x7f19bd5e4000 [pid 6502] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6503] <... clone resumed>, parent_tid=[6510], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6510 [pid 6502] <... mprotect resumed>) = 0 [pid 6509] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... prctl resumed>) = 0 [pid 6502] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6503] <... futex resumed>) = 0 [pid 6509] setpgid(0, 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6509] <... setpgid resumed>) = 0 [pid 6509] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6502] <... clone resumed>, parent_tid=[6511], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6511 [pid 6508] <... set_robust_list resumed>) = 0 [pid 6508] chdir("./205" [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6508] <... chdir resumed>) = 0 [pid 6509] <... openat resumed>) = 3 [pid 6506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6508] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6508] setpgid(0, 0) = 0 [pid 6508] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6509] write(3, "1000", 4) = 4 [pid 6509] close(3) = 0 [pid 6508] <... openat resumed>) = 3 [pid 6509] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6508] write(3, "1000", 4) = 4 [pid 6508] close(3) = 0 [pid 6508] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6509] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 6511 attached ./strace-static-x86_64: Process 6510 attached ) = 0 [pid 6509] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6508] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6508] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6509] <... clone resumed>, parent_tid=[6512], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6512 [pid 6511] set_robust_list(0x7f19bd6049e0, 24 [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6513 attached ./strace-static-x86_64: Process 6512 attached [pid 6511] <... set_robust_list resumed>) = 0 [pid 6510] set_robust_list(0x7f19bd6049e0, 24 [pid 6500] <... mount resumed>) = 0 [pid 6508] <... clone resumed>, parent_tid=[6513], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6513 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6513] set_robust_list(0x7f19bd6049e0, 24 [pid 6512] set_robust_list(0x7f19bd6049e0, 24 [pid 6511] memfd_create("syzkaller", 0 [pid 6510] <... set_robust_list resumed>) = 0 [pid 6500] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6513] <... set_robust_list resumed>) = 0 [pid 6512] <... set_robust_list resumed>) = 0 [pid 6511] <... memfd_create resumed>) = 3 [pid 6510] memfd_create("syzkaller", 0 [pid 6506] <... write resumed>) = 1048576 [pid 6500] <... openat resumed>) = 3 [pid 6513] memfd_create("syzkaller", 0 [pid 6512] memfd_create("syzkaller", 0 [pid 6511] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6510] <... memfd_create resumed>) = 3 [pid 6506] munmap(0x7f19b51e4000, 1048576 [pid 6512] <... memfd_create resumed>) = 3 [pid 6511] <... mmap resumed>) = 0x7f19b51e4000 [pid 6510] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6513] <... memfd_create resumed>) = 3 [pid 6506] <... munmap resumed>) = 0 [pid 6500] chdir("./bus" [pid 6512] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6506] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6512] <... mmap resumed>) = 0x7f19b51e4000 [pid 6506] <... openat resumed>) = 4 [pid 6506] ioctl(4, LOOP_SET_FD, 3 [pid 6510] <... mmap resumed>) = 0x7f19b51e4000 [pid 6513] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 6511] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6510] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6506] <... ioctl resumed>) = 0 [pid 6500] <... chdir resumed>) = 0 [pid 6513] <... mmap resumed>) = 0x7f19b51e4000 [pid 6506] close(3 [pid 6500] ioctl(4, LOOP_CLR_FD [pid 6506] <... close resumed>) = 0 [pid 6506] mkdir("./bus", 0777) = 0 [pid 6506] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6513] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6500] <... ioctl resumed>) = 0 [pid 6500] close(4) = 0 [pid 6510] <... write resumed>) = 1048576 [pid 6510] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6510] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] <... futex resumed>) = 0 [pid 6500] chdir("./file0" [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... chdir resumed>) = 0 [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6510] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6510] close(3 [pid 6500] <... open resumed>) = 4 [ 151.418496][ T6500] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/204/bus supports timestamps until 2038 (0x7fffffff) [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] <... futex resumed>) = 0 [pid 6500] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... close resumed>) = 0 [pid 6500] <... futex resumed>) = 0 [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6510] mkdir("./bus", 0777 [pid 6500] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... mkdir resumed>) = 0 [pid 6500] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] <... futex resumed>) = 0 [pid 6510] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6500] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... open resumed>) = 5 [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6499] <... futex resumed>) = 0 [pid 6500] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6500] <... openat resumed>) = 6 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6500] <... futex resumed>) = 0 [pid 6499] <... futex resumed>) = 0 [pid 6500] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6512] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6512] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6512] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6512] close(3) = 0 [pid 6512] mkdir("./bus", 0777) = 0 [pid 6512] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6511] <... write resumed>) = 1048576 [pid 6513] <... write resumed>) = 1048576 [pid 6511] munmap(0x7f19b51e4000, 1048576 [pid 6500] <... write resumed>) = 262144 [pid 6511] <... munmap resumed>) = 0 [pid 6511] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 6511] ioctl(4, LOOP_SET_FD, 3 [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = 0 [pid 6499] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] <... futex resumed>) = 1 [pid 6500] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6510] <... mount resumed>) = 0 [pid 6510] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6510] chdir("./bus") = 0 [pid 6511] <... ioctl resumed>) = 0 [pid 6511] close(3) = 0 [pid 6511] mkdir("./bus", 0777) = 0 [pid 6511] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6510] ioctl(4, LOOP_CLR_FD) = 0 [pid 6510] close(4) = 0 [pid 6513] munmap(0x7f19b51e4000, 1048576 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... munmap resumed>) = 0 [pid 6510] <... futex resumed>) = 1 [pid 6503] <... futex resumed>) = 0 [pid 6513] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6510] chdir("./file0" [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6510] <... chdir resumed>) = 0 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... mount resumed>) = 0 [pid 6506] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6510] <... futex resumed>) = 1 [pid 6503] <... futex resumed>) = 0 [pid 6506] chdir("./bus") = 0 [pid 6506] ioctl(4, LOOP_CLR_FD) = 0 [pid 6506] close(4 [pid 6513] <... openat resumed>) = 4 [pid 6510] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6499] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6499] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6513] ioctl(4, LOOP_SET_FD, 3 [pid 6510] <... open resumed>) = 4 [pid 6503] <... futex resumed>) = 0 [pid 6500] <... write resumed>) = 1048576 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6500] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... futex resumed>) = 0 [pid 6503] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6500] <... futex resumed>) = 0 [pid 6512] <... mount resumed>) = 0 [pid 6512] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6499] exit_group(0) = ? [pid 6512] <... openat resumed>) = 3 [pid 6512] chdir("./bus") = 0 [ 151.502941][ T6510] ext4 filesystem being mounted at /root/syzkaller.URAKkl/208/bus supports timestamps until 2038 (0x7fffffff) [ 151.517298][ T6506] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/199/bus supports timestamps until 2038 (0x7fffffff) [ 151.538325][ T6512] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/203/bus supports timestamps until 2038 (0x7fffffff) [pid 6512] ioctl(4, LOOP_CLR_FD [pid 6510] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... futex resumed>) = 0 [pid 6503] <... futex resumed>) = 1 [pid 6510] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6510] <... mount resumed>) = 0 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6503] <... futex resumed>) = 0 [pid 6510] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... ioctl resumed>) = 0 [pid 6513] close(3) = 0 [pid 6513] mkdir("./bus", 0777 [pid 6506] <... close resumed>) = 0 [pid 6513] <... mkdir resumed>) = 0 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6506] <... futex resumed>) = 1 [pid 6506] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6511] <... mount resumed>) = 0 [pid 6510] <... open resumed>) = 5 [pid 6504] <... futex resumed>) = 0 [pid 6500] +++ exited with 0 +++ [pid 6499] +++ exited with 0 +++ [pid 6511] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... ioctl resumed>) = 0 [pid 6511] <... openat resumed>) = 3 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 1 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6499, si_uid=0, si_status=0, si_utime=0, si_stime=7} --- [pid 6512] close(4 [pid 6510] <... futex resumed>) = 1 [pid 6506] chdir("./file0" [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6503] <... futex resumed>) = 0 [pid 6511] chdir("./bus" [pid 6512] <... close resumed>) = 0 [pid 6510] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6506] <... chdir resumed>) = 0 [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... futex resumed>) = 0 [pid 307] umount2("./204", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6510] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6506] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6510] <... openat resumed>) = 6 [pid 6506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] openat(AT_FDCWD, "./204", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... open resumed>) = 4 [pid 6504] <... futex resumed>) = 0 [pid 307] <... openat resumed>) = 3 [pid 6510] <... futex resumed>) = 1 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6503] <... futex resumed>) = 0 [pid 307] fstat(3, [pid 6512] <... futex resumed>) = 1 [pid 6510] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6509] <... futex resumed>) = 0 [pid 6506] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 6512] chdir("./file0" [pid 6510] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... futex resumed>) = 0 [pid 307] getdents64(3, [pid 6512] <... chdir resumed>) = 0 [pid 6511] <... chdir resumed>) = 0 [pid 6510] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6509] <... futex resumed>) = 0 [pid 6506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6504] <... futex resumed>) = 0 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] ioctl(4, LOOP_CLR_FD [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 0 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6506] <... mount resumed>) = 0 [pid 307] umount2("./204/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6512] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... open resumed>) = 4 [pid 6511] <... ioctl resumed>) = 0 [pid 6510] <... write resumed>) = 262144 [pid 6509] <... futex resumed>) = 0 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 0 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... mount resumed>) = 0 [pid 6509] <... futex resumed>) = 0 [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 0 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... open resumed>) = 5 [pid 6509] <... futex resumed>) = 0 [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 0 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] <... openat resumed>) = 6 [pid 6509] <... futex resumed>) = 0 [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 0 [pid 6509] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6512] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] close(4 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 0 [pid 6506] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 307] lstat("./204/binderfs", [pid 6511] <... close resumed>) = 0 [pid 6510] <... futex resumed>) = 1 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... futex resumed>) = 0 [pid 6512] <... write resumed>) = 262144 [pid 6504] <... futex resumed>) = 0 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6509] <... futex resumed>) = 0 [pid 6509] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6509] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6512] <... futex resumed>) = 1 [pid 6512] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6506] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 307] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 151.570711][ T6511] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/206/bus supports timestamps until 2038 (0x7fffffff) [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... open resumed>) = 5 [pid 6503] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] unlink("./204/binderfs" [pid 6503] <... futex resumed>) = 0 [pid 307] <... unlink resumed>) = 0 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6511] <... futex resumed>) = 1 [pid 6506] <... futex resumed>) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6511] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6510] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6506] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6513] <... mount resumed>) = 0 [pid 6511] chdir("./file0" [pid 6504] <... futex resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 6513] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6511] <... chdir resumed>) = 0 [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] chdir("./bus" [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 1 [pid 6510] <... write resumed>) = 1048576 [pid 6506] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6511] <... futex resumed>) = 1 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... openat resumed>) = 6 [pid 6502] <... futex resumed>) = 0 [pid 6513] <... chdir resumed>) = 0 [pid 6511] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6510] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = 0 [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6506] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6511] <... open resumed>) = 4 [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6506] <... write resumed>) = 262144 [pid 6511] <... futex resumed>) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6513] ioctl(4, LOOP_CLR_FD [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6503] <... futex resumed>) = 0 [pid 6503] exit_group(0 [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6513] <... ioctl resumed>) = 0 [pid 6511] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 6513] close(4 [pid 6511] <... mount resumed>) = 0 [pid 6506] <... futex resumed>) = 1 [pid 6510] <... futex resumed>) = 1 [pid 6503] <... exit_group resumed>) = ? [pid 6502] <... futex resumed>) = 0 [pid 6504] <... futex resumed>) = 0 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6511] <... futex resumed>) = 0 [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6504] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6502] <... futex resumed>) = 0 [pid 6511] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6504] <... futex resumed>) = 0 [pid 6504] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6511] <... open resumed>) = 5 [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6511] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6511] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6513] <... close resumed>) = 0 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [pid 6513] chdir("./file0") = 0 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [pid 6513] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6511] <... openat resumed>) = 6 [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6502] <... futex resumed>) = 0 [pid 6511] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6502] <... futex resumed>) = 0 [pid 6511] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... open resumed>) = 4 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [pid 6513] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [pid 6513] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6506] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6513] <... open resumed>) = 5 [pid 6509] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [pid 6513] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = 0 [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6513] <... futex resumed>) = 1 [ 151.609994][ T6513] ext4 filesystem being mounted at /root/syzkaller.69675s/205/bus supports timestamps until 2038 (0x7fffffff) [ 151.624422][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [pid 6513] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 6511] <... write resumed>) = 262144 [pid 6510] +++ exited with 0 +++ [pid 6503] +++ exited with 0 +++ [pid 6512] <... write resumed>) = 1048576 [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6503, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6512] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] umount2("./208", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6509] exit_group(0) = ? [pid 6512] <... futex resumed>) = ? [pid 6511] <... futex resumed>) = 1 [pid 6508] <... futex resumed>) = 0 [pid 6502] <... futex resumed>) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6508] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6511] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6502] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] openat(AT_FDCWD, "./208", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6502] <... futex resumed>) = 0 [pid 6502] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 306] <... openat resumed>) = 3 [pid 306] fstat(3, [pid 6512] +++ exited with 0 +++ [pid 6509] +++ exited with 0 +++ [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6509, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 305] umount2("./203", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./203", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] getdents64(3, [pid 305] <... openat resumed>) = 3 [pid 305] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 305] umount2("./203/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./203/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 305] unlink("./203/binderfs") = 0 [pid 305] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 6513] <... futex resumed>) = 1 [pid 6504] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 306] umount2("./208/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./208/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./208/binderfs") = 0 [ 151.670669][ T734] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:7: Invalid inode table block 0 in block_group 0 [ 151.694711][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6511] <... write resumed>) = 1048576 [pid 6502] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6511] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6508] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6511] <... futex resumed>) = 0 [pid 6511] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6502] exit_group(0) = ? [pid 6511] <... futex resumed>) = ? [pid 6511] +++ exited with 0 +++ [pid 6502] +++ exited with 0 +++ [pid 310] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6502, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 310] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 310] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 310] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 310] unlink("./206/binderfs") = 0 [ 151.713423][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 151.724080][ T344] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 151.754376][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 310] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6513] <... write resumed>) = 1048576 [pid 6513] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6508] exit_group(0 [pid 6513] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 6508] <... exit_group resumed>) = ? [pid 6506] <... write resumed>) = 1048576 [pid 6506] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6506] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6504] exit_group(0) = ? [pid 6506] <... futex resumed>) = ? [pid 6513] +++ exited with 0 +++ [pid 6508] +++ exited with 0 +++ [pid 305] <... umount2 resumed>) = 0 [pid 305] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] lstat("./203/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] umount2("./203/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 305] openat(AT_FDCWD, "./203/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 305] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 305] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 305] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 305] close(4) = 0 [pid 305] rmdir("./203/bus") = 0 [pid 305] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 305] close(3) = 0 [pid 305] rmdir("./203") = 0 [pid 305] mkdir("./204", 0777 [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6508, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 305] <... mkdir resumed>) = 0 [pid 305] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 308] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 151.755109][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 151.782274][ T92] EXT4-fs error (device loop5): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 308] lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./205/binderfs") = 0 [pid 308] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6506] +++ exited with 0 +++ [pid 6504] +++ exited with 0 +++ [pid 307] <... umount2 resumed>) = 0 [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6504, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 309] umount2("./199", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./199", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, [pid 307] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 309] <... getdents64 resumed>0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./199/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 309] lstat("./199/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./199/binderfs") = 0 [pid 307] lstat("./204/bus", [ 151.832188][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 151.846621][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 309] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 307] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] umount2("./204/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] openat(AT_FDCWD, "./204/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 307] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 307] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 307] close(4) = 0 [pid 307] rmdir("./204/bus") = 0 [pid 307] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 307] close(3) = 0 [pid 307] rmdir("./204") = 0 [pid 307] mkdir("./205", 0777) = 0 [pid 307] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 308] <... umount2 resumed>) = 0 [pid 305] <... openat resumed>) = 3 [pid 308] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = 0 [pid 305] ioctl(3, LOOP_CLR_FD [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] lstat("./205/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] lstat("./208/bus", [pid 308] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] openat(AT_FDCWD, "./205/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 306] umount2("./208/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] <... openat resumed>) = 4 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 308] fstat(4, [pid 306] openat(AT_FDCWD, "./208/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 308] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] <... openat resumed>) = 4 [pid 308] getdents64(4, [pid 306] fstat(4, [pid 308] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(4, [pid 306] getdents64(4, [pid 308] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] close(4) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 308] rmdir("./205/bus" [pid 306] getdents64(4, [pid 308] <... rmdir resumed>) = 0 [pid 306] <... getdents64 resumed>0x555557497660 /* 0 entries */, 32768) = 0 [pid 308] getdents64(3, [pid 306] close(4 [pid 308] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] <... close resumed>) = 0 [pid 308] close(3 [pid 306] rmdir("./208/bus" [pid 308] <... close resumed>) = 0 [pid 308] rmdir("./205" [pid 306] <... rmdir resumed>) = 0 [pid 308] <... rmdir resumed>) = 0 [pid 306] getdents64(3, [pid 308] mkdir("./206", 0777 [pid 306] <... getdents64 resumed>0x55555748f620 /* 0 entries */, 32768) = 0 [pid 308] <... mkdir resumed>) = 0 [pid 306] close(3 [pid 308] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 306] <... close resumed>) = 0 [pid 306] rmdir("./208") = 0 [pid 306] mkdir("./209", 0777) = 0 [ 151.889556][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 151.903453][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... openat resumed>) = 3 [pid 307] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 307] close(3) = 0 [pid 307] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6529 ./strace-static-x86_64: Process 6529 attached [pid 6529] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6529] chdir("./205") = 0 [pid 6529] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6529] setpgid(0, 0) = 0 [pid 6529] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6529] write(3, "1000", 4) = 4 [pid 6529] close(3) = 0 [pid 6529] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6529] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6529] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6530], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6530 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 6530 attached [pid 310] <... umount2 resumed>) = 0 [pid 310] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6530] set_robust_list(0x7f19bd6049e0, 24 [pid 310] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6530] <... set_robust_list resumed>) = 0 [pid 310] lstat("./206/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 310] openat(AT_FDCWD, "./206/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6530] memfd_create("syzkaller", 0 [pid 310] <... openat resumed>) = 4 [pid 310] fstat(4, [pid 6530] <... memfd_create resumed>) = 3 [pid 310] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 310] getdents64(4, [pid 6530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 310] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 310] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 310] close(4) = 0 [pid 310] rmdir("./206/bus") = 0 [pid 310] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 310] close(3) = 0 [pid 310] rmdir("./206") = 0 [pid 310] mkdir("./207", 0777) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 6530] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6530] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 305] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 306] <... openat resumed>) = 3 [pid 305] close(3) = 0 [pid 305] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6531 ./strace-static-x86_64: Process 6531 attached [pid 6531] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6531] chdir("./204") = 0 [pid 6531] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6531] setpgid(0, 0) = 0 [pid 6531] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6531] write(3, "1000", 4) = 4 [pid 6531] close(3) = 0 [pid 6531] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6531] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6531] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6532], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6532 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 310] <... openat resumed>) = 3 [pid 308] <... openat resumed>) = 3 [pid 306] ioctl(3, LOOP_CLR_FD [pid 309] <... umount2 resumed>) = 0 [pid 308] ioctl(3, LOOP_CLR_FD [pid 310] ioctl(3, LOOP_CLR_FD [pid 306] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 308] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 310] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 309] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] close(3 [pid 306] close(3 [pid 310] close(3 [pid 308] <... close resumed>) = 0 [pid 306] <... close resumed>) = 0 [pid 310] <... close resumed>) = 0 [pid 308] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 306] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 310] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 309] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 6532 attached [pid 6532] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6532] memfd_create("syzkaller", 0) = 3 [pid 6532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 310] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6534 [pid 308] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6533 [pid 309] lstat("./199/bus", [pid 306] <... clone resumed>, child_tidptr=0x55555748e5d0) = 6535 [pid 309] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./199/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./199/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, [pid 6530] <... openat resumed>) = 4 ./strace-static-x86_64: Process 6533 attached [pid 309] <... getdents64 resumed>0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 6533] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6533] chdir("./206") = 0 [pid 309] close(4 [pid 6533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 309] <... close resumed>) = 0 [pid 309] rmdir("./199/bus" [pid 6533] <... prctl resumed>) = 0 [pid 6533] setpgid(0, 0) = 0 [pid 309] <... rmdir resumed>) = 0 [pid 6533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3./strace-static-x86_64: Process 6535 attached ) = 0 [pid 6535] set_robust_list(0x55555748e5e0, 24 [pid 6530] ioctl(4, LOOP_SET_FD, 3 [pid 309] rmdir("./199") = 0 [pid 309] mkdir("./200", 0777 [pid 6535] <... set_robust_list resumed>) = 0 [pid 6535] chdir("./209" [pid 6533] write(3, "1000", 4) = 4 [pid 6533] close(3 [pid 309] <... mkdir resumed>) = 0 [pid 6533] <... close resumed>) = 0 [pid 6533] symlink("/dev/binderfs", "./binderfs" [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6535] <... chdir resumed>) = 0 [pid 6535] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 6535] setpgid(0, 0) = 0 [pid 6535] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6533] <... symlink resumed>) = 0 [pid 6535] <... openat resumed>) = 3 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6535] write(3, "1000", 4 [pid 6533] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE [pid 6535] <... write resumed>) = 4 [pid 6533] <... mprotect resumed>) = 0 [pid 6535] close(3) = 0 ./strace-static-x86_64: Process 6534 attached [pid 6533] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6535] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6534] set_robust_list(0x55555748e5e0, 24 [pid 6533] <... clone resumed>, parent_tid=[6537], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6537 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6535] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6535] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6538], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6538 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6534] <... set_robust_list resumed>) = 0 [pid 6534] chdir("./207") = 0 [pid 6532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6530] <... ioctl resumed>) = 0 [pid 309] <... openat resumed>) = 3 [pid 6534] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 6530] close(3 [pid 309] ioctl(3, LOOP_CLR_FD [pid 6534] <... prctl resumed>) = 0 [pid 6530] <... close resumed>) = 0 [pid 309] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 6530] mkdir("./bus", 0777 [pid 309] close(3 [pid 6534] setpgid(0, 0 [pid 309] <... close resumed>) = 0 [pid 309] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555748e5d0) = 6539 [pid 6530] <... mkdir resumed>) = 0 [pid 6534] <... setpgid resumed>) = 0 [pid 6530] mount("/dev/loop2", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6534] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 6534] write(3, "1000", 4) = 4 [pid 6534] close(3) = 0 [pid 6534] symlink("/dev/binderfs", "./binderfs") = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 6539 attached ) = 0x7f19bd5e4000 [pid 6539] set_robust_list(0x55555748e5e0, 24) = 0 [pid 6539] chdir("./200") = 0 [pid 6539] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 6538 attached ) = 0 [pid 6538] set_robust_list(0x7f19bd6049e0, 24 [pid 6539] setpgid(0, 0 [pid 6534] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6534] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 6538] <... set_robust_list resumed>) = 0 [pid 6538] memfd_create("syzkaller", 0 [pid 6534] <... clone resumed>, parent_tid=[6540], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6540 [pid 6539] <... setpgid resumed>) = 0 [pid 6539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 6534] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6538] <... memfd_create resumed>) = 3 ./strace-static-x86_64: Process 6537 attached [pid 6539] <... openat resumed>) = 3 [pid 6538] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6539] write(3, "1000", 4) = 4 [pid 6537] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6539] close(3) = 0 [pid 6539] symlink("/dev/binderfs", "./binderfs" [pid 6537] memfd_create("syzkaller", 0 [pid 6539] <... symlink resumed>) = 0 [pid 6537] <... memfd_create resumed>) = 3 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 6540 attached [pid 6539] <... futex resumed>) = 0 [pid 6537] <... mmap resumed>) = 0x7f19b51e4000 [pid 6532] <... write resumed>) = 1048576 [pid 6539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19bd5e4000 [pid 6539] mprotect(0x7f19bd5e5000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6539] clone(child_stack=0x7f19bd6043f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6541], tls=0x7f19bd604700, child_tidptr=0x7f19bd6049d0) = 6541 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 6532] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6532] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 6532] ioctl(4, LOOP_SET_FD, 3 [pid 6540] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6540] memfd_create("syzkaller", 0./strace-static-x86_64: Process 6541 attached [pid 6541] set_robust_list(0x7f19bd6049e0, 24) = 0 [pid 6541] memfd_create("syzkaller", 0) = 3 [pid 6541] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6540] <... memfd_create resumed>) = 3 [pid 6540] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f19b51e4000 [pid 6538] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6532] <... ioctl resumed>) = 0 [pid 6532] close(3) = 0 [pid 6532] mkdir("./bus", 0777) = 0 [pid 6532] mount("/dev/loop0", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6537] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6538] <... write resumed>) = 1048576 [pid 6541] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6538] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6538] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 6538] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6538] close(3) = 0 [pid 6538] mkdir("./bus", 0777) = 0 [pid 6538] mount("/dev/loop1", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6541] <... write resumed>) = 1048576 [pid 6541] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6541] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 6541] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 6541] close(3) = 0 [pid 6541] mkdir("./bus", 0777) = 0 [pid 6541] mount("/dev/loop4", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6530] <... mount resumed>) = 0 [pid 6530] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6530] chdir("./bus") = 0 [pid 6530] ioctl(4, LOOP_CLR_FD) = 0 [pid 6530] close(4) = 0 [ 152.114561][ T6530] ext4 filesystem being mounted at /root/syzkaller.Z5urqo/205/bus supports timestamps until 2038 (0x7fffffff) [ 152.130629][ T6532] ext4 filesystem being mounted at /root/syzkaller.FL9Cxh/204/bus supports timestamps until 2038 (0x7fffffff) [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 6537] <... write resumed>) = 1048576 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] <... futex resumed>) = 1 [pid 6530] chdir("./file0") = 0 [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] <... futex resumed>) = 1 [pid 6530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6538] <... mount resumed>) = 0 [pid 6538] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6530] <... open resumed>) = 5 [pid 6537] munmap(0x7f19b51e4000, 1048576 [pid 6538] chdir("./bus") = 0 [pid 6538] ioctl(4, LOOP_CLR_FD) = 0 [pid 6538] close(4) = 0 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] chdir("./file0" [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6538] <... chdir resumed>) = 0 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6537] <... munmap resumed>) = 0 [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6530] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... open resumed>) = 4 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6530] <... openat resumed>) = 6 [pid 6538] <... openat resumed>) = 6 [pid 6540] <... write resumed>) = 1048576 [pid 6537] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] <... futex resumed>) = 0 [pid 6530] <... futex resumed>) = 1 [pid 6537] <... openat resumed>) = 4 [pid 6530] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6537] ioctl(4, LOOP_SET_FD, 3 [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] munmap(0x7f19b51e4000, 1048576) = 0 [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6540] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 6535] <... futex resumed>) = 0 [pid 6535] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6538] <... futex resumed>) = 1 [pid 6538] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6540] <... openat resumed>) = 4 [pid 6537] <... ioctl resumed>) = 0 [pid 6537] close(3) = 0 [pid 6537] mkdir("./bus", 0777 [pid 6540] ioctl(4, LOOP_SET_FD, 3 [pid 6537] <... mkdir resumed>) = 0 [ 152.154721][ T6538] ext4 filesystem being mounted at /root/syzkaller.URAKkl/209/bus supports timestamps until 2038 (0x7fffffff) [pid 6537] mount("/dev/loop3", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6540] <... ioctl resumed>) = 0 [pid 6538] <... write resumed>) = 262144 [pid 6532] <... mount resumed>) = 0 [pid 6530] <... write resumed>) = 262144 [pid 6541] <... mount resumed>) = 0 [pid 6540] close(3 [pid 6541] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6541] chdir("./bus") = 0 [pid 6541] ioctl(4, LOOP_CLR_FD) = 0 [pid 6540] <... close resumed>) = 0 [pid 6541] close(4) = 0 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] chdir("./file0") = 0 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6540] mkdir("./bus", 0777 [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 6540] <... mkdir resumed>) = 0 [pid 6530] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6540] mount("/dev/loop5", "./bus", "ext4", MS_NOATIME|MS_NODIRATIME|MS_REC|MS_I_VERSION|MS_LAZYTIME, ",errors=continue" [pid 6530] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6529] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6541] <... open resumed>) = 4 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6529] <... futex resumed>) = 0 [pid 6530] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6529] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6530] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6541] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6539] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6541] <... futex resumed>) = 1 [pid 6541] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6532] <... openat resumed>) = 3 [pid 6532] chdir("./bus" [pid 6535] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6535] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6535] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6558], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6558 [pid 6535] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] <... chdir resumed>) = 0 [pid 6532] ioctl(4, LOOP_CLR_FD) = 0 [pid 6532] close(4) = 0 [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] chdir("./file0") = 0 [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] <... open resumed>) = 4 [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL [pid 6538] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6538] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6532] <... mount resumed>) = 0 [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] <... open resumed>) = 5 [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 6558 attached [pid 6531] <... futex resumed>) = 0 [pid 6532] <... futex resumed>) = 1 [pid 6558] set_robust_list(0x7f19b52e39e0, 24 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 6531] <... futex resumed>) = 0 [pid 6532] <... openat resumed>) = 6 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6532] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6531] <... futex resumed>) = 0 [pid 6532] <... futex resumed>) = 1 [pid 6531] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6532] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6531] <... futex resumed>) = 0 [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6558] <... set_robust_list resumed>) = 0 [pid 6558] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6529] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 152.200304][ T6541] ext4 filesystem being mounted at /root/syzkaller.Yv3BFy/200/bus supports timestamps until 2038 (0x7fffffff) [ 152.229146][ T6537] ext4 filesystem being mounted at /root/syzkaller.69675s/206/bus supports timestamps until 2038 (0x7fffffff) [pid 6541] <... write resumed>) = 1048576 [pid 6541] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6539] <... futex resumed>) = 0 [pid 6539] exit_group(0) = ? [pid 6541] <... futex resumed>) = ? [pid 6541] +++ exited with 0 +++ [pid 6539] +++ exited with 0 +++ [pid 309] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6539, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 309] umount2("./200", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./200", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 309] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 309] umount2("./200/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./200/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 309] unlink("./200/binderfs") = 0 [pid 309] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6535] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6535] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6531] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6531] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 6531] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6531] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6531] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6560], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6560 [pid 6531] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6531] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6558] <... write resumed>) = 1048576 [pid 6558] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6535] exit_group(0 [pid 6538] <... futex resumed>) = ? [pid 6535] <... exit_group resumed>) = ? [pid 6538] +++ exited with 0 +++ [pid 6558] +++ exited with 0 +++ [pid 6535] +++ exited with 0 +++ ./strace-static-x86_64: Process 6560 attached [pid 306] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6535, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 6560] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 306] umount2("./209", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./209", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 306] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 306] umount2("./209/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] lstat("./209/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 306] unlink("./209/binderfs") = 0 [ 152.278477][ T6540] ext4 filesystem being mounted at /root/syzkaller.NTm2ZB/207/bus supports timestamps until 2038 (0x7fffffff) [ 152.297782][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 306] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6560] <... write resumed>) = 1048576 [pid 6560] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 6560] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6531] <... futex resumed>) = 0 [pid 6537] <... mount resumed>) = 0 [pid 6537] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6537] chdir("./bus") = 0 [pid 6537] ioctl(4, LOOP_CLR_FD) = 0 [pid 6537] close(4) = 0 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] chdir("./file0") = 0 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000 [pid 6540] <... mount resumed>) = 0 [pid 6540] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 6540] chdir("./bus") = 0 [pid 6540] ioctl(4, LOOP_CLR_FD) = 0 [pid 6540] close(4) = 0 [pid 6540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] <... futex resumed>) = 1 [pid 6540] chdir("./file0" [pid 6537] <... open resumed>) = 4 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6 [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] <... futex resumed>) = 0 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6537] <... futex resumed>) = 1 [pid 6537] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6540] <... chdir resumed>) = 0 [pid 6540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] <... futex resumed>) = 1 [ 152.320355][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 152.333363][ T6532] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm syz-executor130: Invalid inode table block 0 in block_group 0 [ 152.349489][ T381] EXT4-fs error (device loop1): __ext4_get_inode_loc:4715: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [pid 6540] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4 [pid 6537] <... write resumed>) = 262144 [pid 6530] <... write resumed>) = 1048576 [pid 6540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6530] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6529] exit_group(0 [pid 6540] <... futex resumed>) = 1 [pid 6530] <... futex resumed>) = ? [pid 6529] <... exit_group resumed>) = ? [pid 6540] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6533] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6530] +++ exited with 0 +++ [pid 6529] +++ exited with 0 +++ [pid 6537] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 6533] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6529, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 6537] write(5, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651 [pid 6540] <... futex resumed>) = 0 [pid 6534] <... futex resumed>) = 1 [pid 6533] <... futex resumed>) = 0 [pid 6540] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL) = 0 [pid 307] umount2("./205", MNT_DETACH|UMOUNT_NOFOLLOW [ 152.379325][ T92] EXT4-fs error (device loop4): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 152.393775][ T6532] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6071: Corrupt filesystem [ 152.405627][ T6532] EXT4-fs error (device loop0): __ext4_get_inode_loc:4715: comm syz-executor130: Invalid inode table block 0 in block_group 0 [pid 6540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 6540] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6533] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 6534] futex(0x7f19bd6dd7a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6540] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c [pid 6537] <... write resumed>) = 1048576 [pid 307] openat(AT_FDCWD, "./205", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 6537] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] <... openat resumed>) = 3 [pid 6537] <... futex resumed>) = 1 [pid 307] fstat(3, [pid 6537] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 307] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 307] umount2("./205/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 307] lstat("./205/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 307] unlink("./205/binderfs") = 0 [pid 307] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 6533] <... futex resumed>) = 0 [pid 6533] exit_group(0 [pid 6537] <... futex resumed>) = ? [pid 6533] <... exit_group resumed>) = ? [ 152.430823][ T6532] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6071: Corrupt filesystem [ 152.445369][ T6532] ------------[ cut here ]------------ [ 152.450875][ T6532] kernel BUG at fs/ext4/ext4.h:2980! [ 152.456367][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 152.461843][ T6532] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 152.470205][ T92] EXT4-fs error (device loop2): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 152.475189][ T6532] CPU: 0 PID: 6532 Comm: syz-executor130 Not tainted 5.4.225-syzkaller-00003-gf4e4be09c27c #0 [ 152.475195][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 152.475212][ T6532] RIP: 0010:ext4_mb_load_buddy_gfp+0xf29/0xf40 [ 152.475223][ T6532] Code: ff e8 1b 1b ce ff e9 0a f3 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 52 f3 ff ff e8 21 1b ce ff e9 48 f3 ff ff e8 77 99 a0 ff <0f> 0b e8 70 99 a0 ff 0f 0b e8 69 99 a0 ff 0f 0b e8 62 99 a0 ff 0f [ 152.475235][ T6532] RSP: 0018:ffff8881db0af0e8 EFLAGS: 00010293 [ 152.540269][ T6532] RAX: ffffffff81c29d89 RBX: 0000000000000001 RCX: ffff8881e6f4bf00 [ 152.548225][ T6532] RDX: 0000000000000000 RSI: 00000000fffffac6 RDI: 0000000000000001 [ 152.556183][ T6532] RBP: ffff8881f38d1000 R08: ffffffff81c28f32 R09: ffffed103b6e736c [ 152.564149][ T6532] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103e71a67e [ 152.572116][ T6532] R13: dffffc0000000000 R14: 00000000fffffac6 R15: ffff8881f38d33f0 [ 152.580108][ T6532] FS: 00007f19bd604700(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 152.589031][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.595628][ T6532] CR2: 00007f19bd6a98d8 CR3: 00000001eb076000 CR4: 00000000003406f0 [ 152.603593][ T6532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.611567][ T6532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.619520][ T6532] Call Trace: [ 152.622994][ T6532] ? ext4_get_group_number+0xdd/0x190 [ 152.628357][ T6532] ext4_discard_preallocations+0x603/0xb90 [ 152.634151][ T6532] ? ext4_exit_mballoc+0xf0/0xf0 [ 152.639076][ T6532] ? __ext4_journal_start_sb+0x295/0x460 [ 152.644692][ T6532] ext4_truncate+0xa12/0x12c0 [ 152.649356][ T6532] ? ext4_mark_inode_dirty+0x7a0/0x7a0 [ 152.654799][ T6532] ? ext4_should_dioread_nolock+0x94/0x500 [ 152.660594][ T6532] ? __ext4_journal_stop+0x2f/0x190 [ 152.665778][ T6532] ext4_write_begin+0xd5e/0x1900 [ 152.670746][ T6532] ? ext4_readpages+0x110/0x110 [ 152.675593][ T6532] ? __sync_dirty_buffer+0x2d7/0x320 [ 152.680868][ T6532] ? ext4_commit_super+0x86c/0xa00 [ 152.685982][ T6532] ? ext4_handle_error+0x213/0x3d0 [ 152.691096][ T6532] ? __ext4_std_error+0x20e/0x4a0 [ 152.696117][ T6532] ? ext4_get_inode_loc+0x60/0x60 [ 152.701129][ T6532] ? ext4_decode_error+0x1a0/0x1a0 [ 152.706232][ T6532] ext4_da_write_begin+0x4a3/0xfe0 [ 152.711331][ T6532] ? ext4_write_end+0x595/0xe90 [ 152.716168][ T6532] ? ext4_mark_inode_dirty+0x146/0x7a0 [ 152.721610][ T6532] ? ext4_set_page_dirty+0x190/0x190 [ 152.726899][ T6532] ? ext4_blocks_for_truncate+0x210/0x210 [ 152.732612][ T6532] ? __mark_inode_dirty+0x135/0xa70 [ 152.737805][ T6532] ? iov_iter_advance+0x258/0xb20 [ 152.742913][ T6532] ? up_read+0x1b0/0x1b0 [ 152.747153][ T6532] ? check_preemption_disabled+0x9f/0x320 [ 152.752871][ T6532] ? debug_smp_processor_id+0x20/0x20 [ 152.758235][ T6532] ? iov_iter_fault_in_readable+0x313/0x4c0 [ 152.764128][ T6532] ? asan.module_dtor+0x20/0x20 [ 152.768973][ T6532] ? balance_dirty_pages_ratelimited+0x36c/0x530 [ 152.775283][ T6532] generic_perform_write+0x2c7/0x560 [ 152.780555][ T6532] ? grab_cache_page_write_begin+0x90/0x90 [ 152.786345][ T6532] ? file_remove_privs+0x640/0x640 [ 152.791458][ T6532] ? debug_smp_processor_id+0x20/0x20 [ 152.796823][ T6532] ? down_write_trylock+0xd7/0x130 [ 152.801928][ T6532] __generic_file_write_iter+0x239/0x490 [ 152.807556][ T6532] ext4_file_write_iter+0x499/0x10e0 [ 152.812834][ T6532] ? ext4_file_read_iter+0x140/0x140 [ 152.818107][ T6532] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 152.823202][ T6532] ? _raw_spin_lock_irqsave+0x210/0x210 [ 152.828731][ T6532] ? cgroup_update_frozen+0x157/0xab0 [ 152.834088][ T6532] ? cgroup_update_frozen+0x157/0xab0 [ 152.839443][ T6532] ? cgroup_leave_frozen+0x13c/0x290 [ 152.844711][ T6532] ? iov_iter_init+0x82/0x160 [ 152.849373][ T6532] __vfs_write+0x5d3/0x750 [ 152.853895][ T6532] ? __kernel_write+0x350/0x350 [ 152.858732][ T6532] ? check_preemption_disabled+0x9f/0x320 [ 152.864435][ T6532] ? debug_smp_processor_id+0x20/0x20 [ 152.869793][ T6532] ? selinux_file_permission+0x2be/0x530 [ 152.875412][ T6532] vfs_write+0x206/0x4e0 [pid 6534] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 6534] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f19b52c3000 [pid 6534] mprotect(0x7f19b52c4000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 6534] clone(child_stack=0x7f19b52e33f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[6561], tls=0x7f19b52e3700, child_tidptr=0x7f19b52e39d0) = 6561 [pid 6534] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 6561 attached [pid 6561] set_robust_list(0x7f19b52e39e0, 24) = 0 [pid 6561] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 [pid 309] <... umount2 resumed>) = 0 [pid 309] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] lstat("./200/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] umount2("./200/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 309] openat(AT_FDCWD, "./200/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 309] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 309] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 309] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 309] close(4) = 0 [pid 309] rmdir("./200/bus") = 0 [pid 309] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 309] close(3) = 0 [pid 309] rmdir("./200") = 0 [pid 309] mkdir("./201", 0777) = 0 [pid 309] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 6561] <... openat resumed>) = 6 [pid 6561] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... futex resumed>) = 1 [pid 6561] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = 262144 [pid 6561] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6534] futex(0x7f19bd6dd7b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 6534] futex(0x7f19bd6dd7bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 6561] <... futex resumed>) = 1 [pid 6561] write(-1, "\x2e\x2f\x62\x75\x73\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 34136651) = -1 EBADF (Bad file descriptor) [pid 6561] futex(0x7f19bd6dd7bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 6534] <... futex resumed>) = 0 [pid 6561] <... futex resumed>) = 1 [ 152.879642][ T6532] ksys_write+0x199/0x2c0 [ 152.883959][ T6532] ? do_syscall_64+0x1c0/0x1c0 [ 152.888708][ T6532] ? __ia32_sys_read+0x80/0x80 [ 152.893457][ T6532] do_syscall_64+0xca/0x1c0 [ 152.897958][ T6532] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 152.903834][ T6532] Modules linked in: [ 152.908027][ T6532] ---[ end trace cc75f54ce7912dc8 ]--- [ 152.913827][ T6532] RIP: 0010:ext4_mb_load_buddy_gfp+0xf29/0xf40 [pid 6561] futex(0x7f19bd6dd7b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6540] <... open resumed>) = 5 [pid 6537] +++ exited with 0 +++ [pid 6533] +++ exited with 0 +++ [pid 309] <... openat resumed>) = 3 [pid 6540] futex(0x7f19bd6dd7ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 152.920683][ T6532] Code: ff e8 1b 1b ce ff e9 0a f3 ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 52 f3 ff ff e8 21 1b ce ff e9 48 f3 ff ff e8 77 99 a0 ff <0f> 0b e8 70 99 a0 ff 0f 0b e8 69 99 a0 ff 0f 0b e8 62 99 a0 ff 0f [ 152.940575][ T6532] RSP: 0018:ffff8881db0af0e8 EFLAGS: 00010293 [ 152.946792][ T6532] RAX: ffffffff81c29d89 RBX: 0000000000000001 RCX: ffff8881e6f4bf00 [ 152.954803][ T6532] RDX: 0000000000000000 RSI: 00000000fffffac6 RDI: 0000000000000001 [ 152.962784][ T6532] RBP: ffff8881f38d1000 R08: ffffffff81c28f32 R09: ffffed103b6e736c [pid 6540] futex(0x7f19bd6dd7a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 6534] exit_group(0 [pid 309] ioctl(3, LOOP_CLR_FD [pid 308] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6533, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 306] <... umount2 resumed>) = 0 [pid 6561] <... futex resumed>) = ? [pid 6540] <... futex resumed>) = ? [pid 6534] <... exit_group resumed>) = ? [pid 6561] +++ exited with 0 +++ [pid 6540] +++ exited with 0 +++ [pid 306] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 308] umount2("./206", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] openat(AT_FDCWD, "./206", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 308] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 308] getdents64(3, 0x55555748f620 /* 4 entries */, 32768) = 104 [pid 308] umount2("./206/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 308] lstat("./206/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 308] unlink("./206/binderfs") = 0 [pid 308] umount2("./206/bus", MNT_DETACH|UMOUNT_NOFOLLOW [pid 306] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 306] lstat("./209/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] umount2("./209/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 306] openat(AT_FDCWD, "./209/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 306] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 306] getdents64(4, 0x555557497660 /* 2 entries */, 32768) = 48 [pid 306] getdents64(4, 0x555557497660 /* 0 entries */, 32768) = 0 [pid 306] close(4) = 0 [pid 306] rmdir("./209/bus") = 0 [pid 306] getdents64(3, 0x55555748f620 /* 0 entries */, 32768) = 0 [pid 306] close(3) = 0 [pid 306] rmdir("./209") = 0 [pid 306] mkdir("./210", 0777) = 0 [ 152.977361][ T6532] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1103e71a67e [ 152.985953][ T6532] R13: dffffc0000000000 R14: 00000000fffffac6 R15: ffff8881f38d33f0 [ 152.994948][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [ 152.998086][ T6532] FS: 00007f19bd604700(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 153.008774][ T92] EXT4-fs error (device loop3): __ext4_get_inode_loc:4715: comm kworker/u4:1: Invalid inode table block 0 in block_group 0 [pid 306] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 307] <... umount2 resumed>) = 0 [pid 307] umount2("./205/bus", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 153.017402][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.036774][ T6532] CR2: 000055555749f668 CR3: 00000001eb076000 CR4: 00000000003406e0 [ 153.044784][ T6532] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 153.053328][ T6532] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 153.061311][ T6532] Kernel panic - not syncing: Fatal exception [ 153.067434][ T6532] Kernel Offset: disabled [ 153.071751][ T6532] Rebooting in 86400 seconds..