./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1490498771 <...> Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. execve("./syz-executor1490498771", ["./syz-executor1490498771"], 0x7ffd6095feb0 /* 10 vars */) = 0 brk(NULL) = 0x5555574f3000 brk(0x5555574f3c40) = 0x5555574f3c40 arch_prctl(ARCH_SET_FS, 0x5555574f3300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555574f35d0) = 3603 set_robust_list(0x5555574f35e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f7b891eaaf0, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f7b891eb1c0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f7b891eab90, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f7b891eb1c0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1490498771", 4096) = 28 brk(0x555557514c40) = 0x555557514c40 brk(0x555557515000) = 0x555557515000 mprotect(0x7f7b892b2000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3604 attached , child_tidptr=0x5555574f35d0) = 3604 [pid 3604] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3604] setpgid(0, 0) = 0 [pid 3604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3604] write(3, "1000", 4) = 4 [pid 3604] close(3) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3604] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3604] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3605 attached , parent_tid=[3605], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3605 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3605] creat("./file0", 000) = 3 [pid 3605] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3605] futex(0x7f7b892b84c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... futex resumed>) = 0 [pid 3605] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 4 [pid 3605] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000004,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"...) = 0 [pid 3605] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... futex resumed>) = 1 [pid 3605] read(4, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3605] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... futex resumed>) = 1 [pid 3605] write(4, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 3605] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... futex resumed>) = 1 [pid 3605] read(4, [pid 3604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3604] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3604] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3607], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3607 [pid 3604] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3607 attached [pid 3607] set_robust_list(0x7f7b891b99e0, 24) = 0 [pid 3607] read(4, [pid 3604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3604] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3604] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3608], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3608 [pid 3604] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3608 attached [pid 3608] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3608] read(4, [pid 3604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3604] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3604] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3604] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3609], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3609 [pid 3604] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3609 attached [pid 3609] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3609] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3605] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3605] write(4, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3609] <... openat resumed>) = 5 [pid 3605] read(4, [pid 3609] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3604] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3609] <... futex resumed>) = 1 [pid 3609] write(5, "\x6c\x70\x00", 3 [pid 3607] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3607] write(4, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3607] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3607] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3608] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3608] write(4, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 3608] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3608] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3609] <... write resumed>) = 3 [pid 3609] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3609] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3604] <... futex resumed>) = 0 [pid 3604] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3607] <... futex resumed>) = 0 [pid 3605] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3604] <... futex resumed>) = 1 [pid 3607] open("./file0", O_RDONLY [pid 3605] read(4, [pid 3604] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3608] <... futex resumed>) = 0 [pid 3605] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x17\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3604] <... futex resumed>) = 1 [pid 3608] creat("./file0", 000 [pid 3605] write(4, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3604] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3605] <... write resumed>) = 32 [pid 3605] read(4, [pid 3604] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3604] exit_group(0 [pid 3609] <... futex resumed>) = 230 [pid 3604] <... exit_group resumed>) = ? [pid 3609] +++ exited with 0 +++ [pid 3605] <... read resumed> ) = ? [pid 3605] +++ exited with 0 +++ [pid 3603] kill(-3604, SIGKILL) = 0 [pid 3603] kill(3604, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 3 entries */, 32768) = 72 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3608] <... creat resumed>) = ? [pid 3607] <... open resumed>) = ? [pid 3603] close(4) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 [pid 3603] close(3) = 0 [pid 3608] +++ exited with 0 +++ [pid 3607] +++ exited with 0 +++ [pid 3604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3604, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3610 attached , child_tidptr=0x5555574f35d0) = 3610 [pid 3610] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3610] setpgid(0, 0) = 0 [pid 3610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3610] write(3, "1000", 4) = 4 [pid 3610] close(3) = 0 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3610] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3611], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3611 [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3611 attached [pid 3611] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3611] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3611] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3611] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000 [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... openat resumed>) = 3 [pid 3610] <... futex resumed>) = 0 [pid 3611] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... futex resumed>) = 0 [pid 3610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3611] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"... [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3611] <... mount resumed>) = 0 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] <... futex resumed>) = 0 [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... futex resumed>) = 1 [pid 3611] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3611] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3611] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80 [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... write resumed>) = 80 [pid 3610] <... futex resumed>) = 0 [pid 3611] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... futex resumed>) = 0 [pid 3610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3611] read(3, [pid 3610] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 syzkaller login: [ 53.743216][ T28] audit: type=1804 audit(1653779721.966:2): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 53.743243][ T28] audit: type=1800 audit(1653779721.966:3): pid=3607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3610] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3610] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3610] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3613], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3613 [pid 3610] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3613 attached [pid 3613] set_robust_list(0x7f7b891b99e0, 24) = 0 [pid 3613] read(3, [pid 3610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3610] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3610] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3610] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3614], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3614 [pid 3610] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3614 attached [pid 3614] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3614] read(3, [pid 3610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3610] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3610] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3610] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3615 attached [pid 3615] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3610] <... clone resumed>, parent_tid=[3615], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3615 [pid 3615] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3610] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3615] <... futex resumed>) = 0 [pid 3615] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3611] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3611] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3610] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... write resumed>) = 32 [pid 3611] read(3, [pid 3615] <... openat resumed>) = 4 [pid 3615] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3610] <... futex resumed>) = 0 [pid 3615] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3610] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3610] <... futex resumed>) = 0 [pid 3615] write(4, "\x6c\x70\x00", 3 [pid 3610] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3613] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3613] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3614] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3613] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24 [pid 3613] <... futex resumed>) = 0 [pid 3614] <... write resumed>) = 24 [pid 3613] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3615] <... write resumed>) = 3 [pid 3614] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3611] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3614] <... futex resumed>) = 0 [pid 3611] read(3, [pid 3614] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3615] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3610] <... futex resumed>) = 0 [pid 3615] <... futex resumed>) = 1 [pid 3610] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3615] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3613] <... futex resumed>) = 0 [pid 3610] <... futex resumed>) = 1 [pid 3613] open("./file0", O_RDONLY [pid 3610] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3614] <... futex resumed>) = 0 [pid 3611] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1d\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3610] <... futex resumed>) = 1 [pid 3614] creat("./file0", 000 [pid 3611] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3610] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3611] <... write resumed>) = 32 [pid 3611] read(3, [pid 3610] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3610] exit_group(0 [pid 3615] <... futex resumed>) = ? [pid 3611] <... read resumed> ) = ? [pid 3610] <... exit_group resumed>) = ? [pid 3611] +++ exited with 0 +++ [pid 3615] +++ exited with 0 +++ [pid 3603] kill(-3610, SIGKILL) = 0 [pid 3603] kill(3610, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 4 entries */, 32768) = 96 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY [pid 3614] <... creat resumed>) = ? [pid 3613] <... open resumed>) = ? [pid 3603] <... openat resumed>) = 4 [pid 3614] +++ exited with 0 +++ [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 [pid 3603] close(3) = 0 [pid 3613] +++ exited with 0 +++ [pid 3610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3610, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3616 attached , child_tidptr=0x5555574f35d0) = 3616 [pid 3616] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3616] setpgid(0, 0) = 0 [pid 3616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3616] write(3, "1000", 4) = 4 [pid 3616] close(3) = 0 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3616] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3617], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3617 [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3617 attached [pid 3617] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3617] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3617] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = 0 [pid 3617] <... futex resumed>) = 1 [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... openat resumed>) = 3 [pid 3617] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f7b892b84c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = 1 [pid 3617] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"... [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... mount resumed>) = 0 [pid 3617] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3616] <... futex resumed>) = 0 [pid 3617] read(3, [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... read resumed>"\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80 [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3617] <... write resumed>) = 80 [pid 3616] <... futex resumed>) = 0 [pid 3617] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3617] read(3, [pid 3616] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 58.915504][ T28] audit: type=1804 audit(1653779727.136:4): pid=3613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 58.915638][ T28] audit: type=1800 audit(1653779727.136:5): pid=3613 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3616] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3619], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3619 [pid 3616] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3619 attached [pid 3619] set_robust_list(0x7f7b891b99e0, 24) = 0 [pid 3619] read(3, [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3616] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3620], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3620 [pid 3616] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3620 attached [pid 3620] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3620] read(3, [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3616] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3616] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3616] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3621], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3621 [pid 3616] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3621 attached [pid 3621] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3621] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3617] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x25\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3617] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3617] read(3, [pid 3621] <... openat resumed>) = 4 [pid 3621] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3616] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3621] <... futex resumed>) = 1 [pid 3621] write(4, "\x6c\x70\x00", 3 [pid 3619] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x25\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3619] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3619] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3619] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3620] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x25\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3620] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 3620] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3620] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3617] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3617] read(3, [pid 3621] <... write resumed>) = 3 [pid 3621] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3616] <... futex resumed>) = 0 [pid 3616] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3619] <... futex resumed>) = 0 [pid 3616] <... futex resumed>) = 1 [pid 3619] open("./file0", O_RDONLY [pid 3616] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3620] <... futex resumed>) = 0 [pid 3617] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x23\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3616] <... futex resumed>) = 1 [pid 3620] creat("./file0", 000 [pid 3617] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3616] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3617] <... write resumed>) = 32 [pid 3617] read(3, [pid 3621] <... futex resumed>) = 1 [pid 3621] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3616] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3616] exit_group(0 [pid 3621] <... futex resumed>) = ? [pid 3617] <... read resumed> ) = ? [pid 3616] <... exit_group resumed>) = ? [pid 3621] +++ exited with 0 +++ [pid 3617] +++ exited with 0 +++ [pid 3603] kill(-3616, SIGKILL) = 0 [pid 3603] kill(3616, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 5 entries */, 32768) = 120 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/36/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4 [pid 3620] <... creat resumed>) = ? [pid 3619] <... open resumed>) = ? [pid 3603] <... close resumed>) = 0 [pid 3620] +++ exited with 0 +++ [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY [pid 3619] +++ exited with 0 +++ [pid 3616] +++ exited with 0 +++ <... openat resumed>) = 4 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3616, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f35d0) = 3622 ./strace-static-x86_64: Process 3622 attached [pid 3622] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3622] setpgid(0, 0) = 0 [pid 3622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3622] write(3, "1000", 4) = 4 [pid 3622] close(3) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3622] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3623], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3623 [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3623 attached [pid 3623] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3623] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3623] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] <... futex resumed>) = 1 [pid 3623] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 3 [pid 3623] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] <... futex resumed>) = 1 [pid 3623] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"...) = 0 [pid 3623] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] <... futex resumed>) = 1 [pid 3623] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3623] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3622] <... futex resumed>) = 0 [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] <... futex resumed>) = 1 [pid 3623] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 3623] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 3623] read(3, [pid 3622] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 64.058090][ T28] audit: type=1804 audit(1653779732.276:6): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 64.058146][ T28] audit: type=1800 audit(1653779732.276:7): pid=3619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3622] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3625 attached [pid 3625] set_robust_list(0x7f7b891b99e0, 24 [pid 3622] <... clone resumed>, parent_tid=[3625], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3625 [pid 3625] <... set_robust_list resumed>) = 0 [pid 3622] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] read(3, [pid 3622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3622] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3626 attached , parent_tid=[3626], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3626 [pid 3622] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3626] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3626] read(3, [pid 3622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3622] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3622] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3622] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3627], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3627 ./strace-static-x86_64: Process 3627 attached [pid 3627] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3627] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3627] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3623] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2b\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3622] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3623] read(3, [pid 3627] <... openat resumed>) = 4 [pid 3627] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3622] <... futex resumed>) = 0 [pid 3627] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3622] <... futex resumed>) = 0 [pid 3627] write(4, "\x6c\x70\x00", 3 [pid 3625] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2b\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3622] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3625] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3625] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3625] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3626] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2b\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3626] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 3627] <... write resumed>) = 3 [pid 3626] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3623] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3626] <... futex resumed>) = 0 [pid 3623] read(3, [pid 3622] <... futex resumed>) = 0 [pid 3626] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3622] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3627] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3625] <... futex resumed>) = 0 [pid 3622] <... futex resumed>) = 1 [pid 3625] open("./file0", O_RDONLY [pid 3622] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3626] <... futex resumed>) = 0 [pid 3623] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x29\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3622] <... futex resumed>) = 1 [pid 3626] creat("./file0", 000 [pid 3623] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3622] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3623] <... write resumed>) = 32 [pid 3623] read(3, [pid 3622] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3622] exit_group(0 [pid 3627] <... futex resumed>) = ? [pid 3623] <... read resumed> ) = ? [pid 3622] <... exit_group resumed>) = ? [pid 3627] +++ exited with 0 +++ [pid 3623] +++ exited with 0 +++ [pid 3603] kill(-3622, SIGKILL) = 0 [pid 3603] kill(3622, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 6 entries */, 32768) = 144 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/37/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/36/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 [pid 3603] close(3) = 0 [pid 3626] <... creat resumed>) = ? [pid 3625] <... open resumed>) = ? [pid 3626] +++ exited with 0 +++ [pid 3625] +++ exited with 0 +++ [pid 3622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3622, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3628 attached , child_tidptr=0x5555574f35d0) = 3628 [pid 3628] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3628] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3628] setpgid(0, 0) = 0 [pid 3628] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3628] write(3, "1000", 4) = 4 [pid 3628] close(3) = 0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3628] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3628] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3629], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3629 [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3629 attached [pid 3629] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3629] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3629] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] <... futex resumed>) = 0 [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] <... futex resumed>) = 1 [pid 3629] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 3 [pid 3629] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3628] <... futex resumed>) = 0 [pid 3629] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"... [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... mount resumed>) = 0 [pid 3628] <... futex resumed>) = 0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] <... futex resumed>) = 0 [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] <... futex resumed>) = 1 [pid 3629] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3629] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3628] <... futex resumed>) = 0 [pid 3629] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80 [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] <... write resumed>) = 80 [pid 3628] <... futex resumed>) = 0 [pid 3629] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] <... futex resumed>) = 0 [pid 3628] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3629] read(3, [pid 3628] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 69.238208][ T28] audit: type=1804 audit(1653779737.456:8): pid=3625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 69.238247][ T28] audit: type=1800 audit(1653779737.456:9): pid=3625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3628] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 ETIMEDOUT (Connection timed out) [pid 3628] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3628] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3628] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3631 attached [pid 3631] set_robust_list(0x7f7b891b99e0, 24 [pid 3628] <... clone resumed>, parent_tid=[3631], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3631 [pid 3631] <... set_robust_list resumed>) = 0 [pid 3628] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] read(3, [pid 3628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3628] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3628] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3628] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3628] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3632], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3632 [pid 3628] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 3632 attached ) = 0 [pid 3632] set_robust_list(0x7f7b891989e0, 24 [pid 3628] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3632] <... set_robust_list resumed>) = 0 [pid 3632] read(3, [pid 3628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3628] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3628] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3628] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3628] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3633 attached [pid 3633] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3633] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3628] <... clone resumed>, parent_tid=[3633], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3633 [pid 3628] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... futex resumed>) = 0 [pid 3628] <... futex resumed>) = 1 [pid 3628] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3633] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3629] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x31\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3629] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3629] read(3, [pid 3633] <... openat resumed>) = 4 [pid 3633] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3628] <... futex resumed>) = 0 [pid 3633] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3628] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3633] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3628] <... futex resumed>) = 0 [pid 3633] write(4, "\x6c\x70\x00", 3 [pid 3628] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3631] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x31\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3631] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120 [pid 3632] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x31\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3631] <... write resumed>) = 120 [pid 3632] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24 [pid 3631] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3632] <... write resumed>) = 24 [pid 3631] <... futex resumed>) = 0 [pid 3632] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3632] <... futex resumed>) = 0 [pid 3632] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3633] <... write resumed>) = 3 [pid 3633] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3628] <... futex resumed>) = 0 [pid 3633] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3628] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3631] <... futex resumed>) = 0 [pid 3628] <... futex resumed>) = 1 [pid 3631] open("./file0", O_RDONLY [pid 3629] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x2f\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3628] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3629] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3632] <... futex resumed>) = 0 [pid 3629] <... write resumed>) = 32 [pid 3628] <... futex resumed>) = 1 [pid 3632] creat("./file0", 000 [pid 3629] read(3, [pid 3628] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3629] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3629] read(3, [pid 3628] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3628] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3628] exit_group(0) = ? [pid 3629] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 230 [pid 3633] <... futex resumed>) = ? [pid 3633] +++ exited with 0 +++ [pid 3629] +++ exited with 0 +++ [pid 3603] kill(-3628, SIGKILL) = 0 [pid 3603] kill(3628, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 7 entries */, 32768) = 168 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/38/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3632] <... creat resumed>) = ? [pid 3631] <... open resumed>) = ? [pid 3603] close(4 [pid 3632] +++ exited with 0 +++ [pid 3631] +++ exited with 0 +++ [pid 3628] +++ exited with 0 +++ <... close resumed>) = 0 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3628, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- openat(AT_FDCWD, "/sys/fs/fuse/connections/37/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/36/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3634 attached , child_tidptr=0x5555574f35d0) = 3634 [pid 3634] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3634] setpgid(0, 0) = 0 [pid 3634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3634] write(3, "1000", 4) = 4 [pid 3634] close(3) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3634] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3634] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3635], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3635 [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3635 attached [pid 3635] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3635] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3635] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... futex resumed>) = 1 [pid 3635] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 3 [pid 3635] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] <... futex resumed>) = 1 [pid 3635] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"...) = 0 [pid 3635] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3635] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3635] futex(0x7f7b892b84c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3635] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3635] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 3635] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 74.415487][ T28] audit: type=1804 audit(1653779742.636:10): pid=3631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 74.415514][ T28] audit: type=1800 audit(1653779742.636:11): pid=3631 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3635] read(3, [pid 3634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3634] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3634] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3637], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3637 [pid 3634] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3637 attached [pid 3637] set_robust_list(0x7f7b891b99e0, 24) = 0 [pid 3637] read(3, [pid 3634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3634] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3634] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3638], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3638 [pid 3634] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3638 attached [pid 3638] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3638] read(3, [pid 3634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3634] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3634] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3634] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 3639 attached [pid 3639] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3639] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3634] <... clone resumed>, parent_tid=[3639], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3639 [pid 3634] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3634] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 0 [pid 3639] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3635] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x37\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3635] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3635] read(3, [pid 3639] <... openat resumed>) = 4 [pid 3639] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3634] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3639] write(4, "\x6c\x70\x00", 3 [pid 3637] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x37\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3637] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3637] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3637] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3638] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x37\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3638] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 3638] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3638] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3639] <... write resumed>) = 3 [pid 3639] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3635] <... read resumed>"\x53\x00\x00\x00\x10\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x6c\x70\x00", 8192) = 83 [pid 3635] read(3, [pid 3634] <... futex resumed>) = 0 [pid 3634] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3637] <... futex resumed>) = 0 [pid 3634] <... futex resumed>) = 1 [pid 3637] open("./file0", O_RDONLY [pid 3634] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3638] <... futex resumed>) = 0 [pid 3635] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x35\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3634] <... futex resumed>) = 1 [pid 3638] creat("./file0", 000 [pid 3635] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3634] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3639] <... futex resumed>) = 1 [pid 3635] <... write resumed>) = 32 [pid 3639] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3635] read(3, [pid 3634] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3634] exit_group(0 [pid 3639] <... futex resumed>) = ? [pid 3634] <... exit_group resumed>) = ? [pid 3639] +++ exited with 0 +++ [pid 3635] <... read resumed> ) = ? [pid 3635] +++ exited with 0 +++ [ 76.144077][ T23] cfg80211: failed to load regulatory.db [pid 3603] kill(-3634, SIGKILL) = 0 [pid 3603] kill(3634, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 8 entries */, 32768) = 192 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/39/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3638] <... creat resumed>) = ? [pid 3603] close(4 [pid 3638] +++ exited with 0 +++ [pid 3637] <... open resumed>) = ? [pid 3603] <... close resumed>) = 0 [pid 3637] +++ exited with 0 +++ [pid 3634] +++ exited with 0 +++ openat(AT_FDCWD, "/sys/fs/fuse/connections/38/abort", O_WRONLY) = 4 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3634, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/37/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/36/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 write(4, "/", 1) = 1 close(4) = 0 getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555574f35d0) = 3641 ./strace-static-x86_64: Process 3641 attached [pid 3641] set_robust_list(0x5555574f35e0, 24) = 0 [pid 3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3641] setpgid(0, 0) = 0 [pid 3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3641] write(3, "1000", 4) = 4 [pid 3641] close(3) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b891ba000 [pid 3641] mprotect(0x7f7b891bb000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3641] clone(child_stack=0x7f7b891da3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3642], tls=0x7f7b891da700, child_tidptr=0x7f7b891da9d0) = 3642 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3642 attached [pid 3642] set_robust_list(0x7f7b891da9e0, 24) = 0 [pid 3642] creat("./file0", 000) = -1 ENOTCONN (Transport endpoint is not connected) [pid 3642] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] <... futex resumed>) = 1 [pid 3642] openat(AT_FDCWD, "/dev/fuse", O_RDWR|O_CREAT, 000) = 3 [pid 3642] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = 1 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000003,rootmode=000000000100000,user_id=00000000000000000000,group_id=000000000000000"...) = 0 [pid 3642] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = 1 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] read(3, "\x68\x00\x00\x00\x1a\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x24\x00\x00\x00\x00\x00\x02\x00\xfb\xff\xff\x73\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8224) = 104 [pid 3642] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3642] futex(0x7f7b892b84c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3642] write(3, "\x50\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x07\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x08\x04\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 80) = 80 [pid 3642] futex(0x7f7b892b84cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 79.635094][ T28] audit: type=1804 audit(1653779747.856:12): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor149" name="/root/file0" dev="fuse" ino=0 res=1 errno=0 [ 79.635162][ T28] audit: type=1800 audit(1653779747.856:13): pid=3637 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor149" name="/" dev="fuse" ino=0 res=0 errno=0 [pid 3642] read(3, [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] futex(0x7f7b892b84cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 3641] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89199000 [pid 3641] mprotect(0x7f7b8919a000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3641] clone(child_stack=0x7f7b891b93f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3643], tls=0x7f7b891b9700, child_tidptr=0x7f7b891b99d0) = 3643 [pid 3641] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3643 attached [pid 3643] set_robust_list(0x7f7b891b99e0, 24) = 0 [pid 3643] read(3, [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89178000 [pid 3641] mprotect(0x7f7b89179000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3641] clone(child_stack=0x7f7b891983f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3644], tls=0x7f7b89198700, child_tidptr=0x7f7b891989d0) = 3644 [pid 3641] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3644 attached [pid 3644] set_robust_list(0x7f7b891989e0, 24) = 0 [pid 3644] read(3, [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f7b89157000 [pid 3641] mprotect(0x7f7b89158000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 3641] clone(child_stack=0x7f7b891773f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[3645], tls=0x7f7b89177700, child_tidptr=0x7f7b891779d0) = 3645 [pid 3641] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 3645 attached [pid 3645] set_robust_list(0x7f7b891779e0, 24) = 0 [pid 3645] openat(AT_FDCWD, "./file0", O_WRONLY|O_NOCTTY|O_CLOEXEC [pid 3642] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3d\x0e\x00\x00\x00\x00\x00\x00\x01\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3642] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3642] read(3, [pid 3645] <... openat resumed>) = 4 [pid 3645] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84f8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3641] futex(0x7f7b892b84fc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3645] <... futex resumed>) = 1 [pid 3645] write(4, "\x6c\x70\x00", 3 [pid 3643] <... read resumed>"\x38\x00\x00\x00\x03\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3d\x0e\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 8192) = 56 [pid 3643] write(3, "\x78\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00"..., 120) = 120 [pid 3643] futex(0x7f7b892b84dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3643] futex(0x7f7b892b84d8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3644] <... read resumed>"\x44\x00\x00\x00\x16\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3d\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x73\x65\x63\x75\x72\x69\x74\x79\x2e\x63\x61\x70\x61\x62\x69\x6c\x69\x74\x79\x00", 8192) = 68 [pid 3644] write(3, "\x18\x00\x00\x00\x00\x00\x00\x00\x08\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 24) = 24 [pid 3644] futex(0x7f7b892b84ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 3644] futex(0x7f7b892b84e8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3645] <... write resumed>) = 3 [pid 3645] futex(0x7f7b892b84fc, FUTEX_WAKE_PRIVATE, 1000000 [pid 3641] <... futex resumed>) = 0 [pid 3641] futex(0x7f7b892b84d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3643] <... futex resumed>) = 0 [pid 3641] <... futex resumed>) = 1 [pid 3643] open("./file0", O_RDONLY [pid 3641] futex(0x7f7b892b84e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 3644] <... futex resumed>) = 0 [pid 3642] <... read resumed>"\x30\x00\x00\x00\x0e\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3b\x0e\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3641] <... futex resumed>) = 1 [pid 3644] creat("./file0", 000 [pid 3642] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32 [pid 3641] futex(0x7f7b892b84ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 3645] <... futex resumed>) = 1 [pid 3642] <... write resumed>) = 32 [pid 3645] futex(0x7f7b892b84f8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 3642] read(3, "\x30\x00\x00\x00\x0e\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x3c\x0e\x00\x00\x00\x00\x00\x00\x01\x82\x00\x00\x00\x00\x00\x00", 8192) = 48 [pid 3642] write(3, "\x20\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 32) = 32 [pid 3642] read(3, [pid 3641] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 3641] exit_group(0 [pid 3642] <... read resumed>) = ? [pid 3641] <... exit_group resumed>) = ? [pid 3645] <... futex resumed>) = 231 [pid 3645] +++ exited with 0 +++ [pid 3642] +++ exited with 0 +++ [pid 3603] kill(-3641, SIGKILL) = 0 [pid 3603] kill(3641, SIGKILL) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 3603] fstat(3, {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 9 entries */, 32768) = 216 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/40/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/39/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/38/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/37/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/36/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/35/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] openat(AT_FDCWD, "/sys/fs/fuse/connections/34/abort", O_WRONLY) = 4 [pid 3603] write(4, "/", 1) = 1 [pid 3603] close(4) = 0 [pid 3603] getdents64(3, 0x5555574f4620 /* 0 entries */, 32768) = 0 [pid 3603] close(3) = 0 [ 286.051530][ T29] INFO: task syz-executor149:3643 blocked for more than 143 seconds. [ 286.059836][ T29] Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 286.067270][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.076062][ T29] task:syz-executor149 state:D stack:27656 pid: 3643 ppid: 3603 flags:0x00004004 [ 286.085409][ T29] Call Trace: [ 286.088709][ T29] [ 286.091723][ T29] __schedule+0xa00/0x4b30 [ 286.096203][ T29] ? find_held_lock+0x2d/0x110 [ 286.100994][ T29] ? fuse_range_is_writeback+0x175/0x1f0 [ 286.106721][ T29] ? lock_downgrade+0x6e0/0x6e0 [ 286.111674][ T29] ? io_schedule_timeout+0x140/0x140 [ 286.116970][ T29] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 286.122928][ T29] ? do_raw_spin_unlock+0x171/0x230 [ 286.128264][ T29] schedule+0xd2/0x1f0 [ 286.132406][ T29] fuse_wait_on_page_writeback+0x11e/0x170 [ 286.138416][ T29] ? fuse_file_llseek+0x140/0x140 [ 286.143532][ T29] ? folio_flags.constprop.0+0x58/0x150 [ 286.149197][ T29] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 286.155221][ T29] ? fuse_writepage_locked+0xa54/0xd40 [ 286.160704][ T29] ? fuse_writepage_locked+0xd40/0xd40 [ 286.166254][ T29] fuse_launder_folio+0xeb/0x130 [ 286.171204][ T29] invalidate_inode_pages2_range+0x99a/0xde0 [ 286.177344][ T29] ? fuse_send_open+0x200/0x2a0 [ 286.182266][ T29] ? generic_error_remove_page+0x390/0x390 [ 286.188089][ T29] ? fuse_range_is_writeback+0x1f0/0x1f0 [ 286.194051][ T29] ? __init_waitqueue_head+0x6b/0xd0 [ 286.199372][ T29] ? fuse_file_open+0x2b6/0x630 [ 286.204381][ T29] fuse_finish_open+0x2fd/0x4d0 [ 286.209300][ T29] fuse_open_common+0x2f0/0x500 [ 286.214268][ T29] do_dentry_open+0x4a1/0x11f0 [ 286.219086][ T29] ? fuse_open_common+0x500/0x500 [ 286.224172][ T29] ? may_open+0x1f6/0x420 [ 286.228546][ T29] path_openat+0x1c71/0x2910 [ 286.233215][ T29] ? path_lookupat+0x860/0x860 [ 286.237990][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.244140][ T29] do_filp_open+0x1aa/0x400 [ 286.248708][ T29] ? may_open_dev+0xf0/0xf0 [ 286.253279][ T29] ? alloc_fd+0x2f0/0x670 [ 286.257635][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 286.262644][ T29] ? _find_next_bit+0x1e3/0x260 [ 286.267604][ T29] ? _raw_spin_unlock+0x24/0x40 [ 286.272545][ T29] ? alloc_fd+0x2f0/0x670 [ 286.277013][ T29] do_sys_openat2+0x16d/0x4c0 [ 286.281783][ T29] ? build_open_flags+0x6f0/0x6f0 [ 286.286826][ T29] ? ptrace_notify+0xfa/0x140 [ 286.291640][ T29] ? lock_downgrade+0x6e0/0x6e0 [ 286.296523][ T29] __x64_sys_open+0x119/0x1c0 [ 286.301204][ T29] ? do_sys_open+0x140/0x140 [ 286.305896][ T29] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.311090][ T29] ? ptrace_notify+0xfa/0x140 [ 286.316289][ T29] do_syscall_64+0x35/0xb0 [ 286.320765][ T29] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.326845][ T29] RIP: 0033:0x7f7b892293c9 [ 286.331350][ T29] RSP: 002b:00007f7b891b92f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 286.339779][ T29] RAX: ffffffffffffffda RBX: 00007f7b892b84d8 RCX: 00007f7b892293c9 [ 286.347818][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 286.355867][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.363912][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b892b84d0 [ 286.372050][ T29] R13: 00007ffc24e5c05f R14: 00007f7b8928514c R15: 0030656c69662f2e [ 286.380036][ T29] [ 286.383152][ T29] INFO: task syz-executor149:3644 blocked for more than 143 seconds. [ 286.391324][ T29] Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 286.398607][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 286.407331][ T29] task:syz-executor149 state:D stack:28224 pid: 3644 ppid: 3603 flags:0x00004004 [ 286.416622][ T29] Call Trace: [ 286.419902][ T29] [ 286.423272][ T29] __schedule+0xa00/0x4b30 [ 286.427718][ T29] ? mark_held_locks+0x9f/0xe0 [ 286.432555][ T29] ? asm_common_interrupt+0x27/0x40 [ 286.437766][ T29] ? io_schedule_timeout+0x140/0x140 [ 286.443111][ T29] ? asm_common_interrupt+0x27/0x40 [ 286.448326][ T29] schedule+0xd2/0x1f0 [ 286.452477][ T29] io_schedule+0xba/0x130 [ 286.456821][ T29] folio_wait_bit_common+0x4f2/0xa90 [ 286.462174][ T29] ? next_uptodate_page+0x810/0x810 [ 286.467390][ T29] ? __filemap_get_folio+0x25f/0xf00 [ 286.472741][ T29] ? folio_unlock+0xc0/0xc0 [ 286.477261][ T29] __filemap_get_folio+0xca5/0xf00 [ 286.482443][ T29] ? filemap_add_folio+0x1d0/0x1d0 [ 286.487577][ T29] truncate_inode_pages_range+0x37d/0x1530 [ 286.493467][ T29] ? truncate_inode_partial_folio+0xdf0/0xdf0 [ 286.499560][ T29] ? __up_read+0x194/0x720 [ 286.504037][ T29] ? down_read+0x198/0x440 [ 286.508469][ T29] ? up_write+0x470/0x470 [ 286.512879][ T29] ? unmap_mapping_range+0x105/0x280 [ 286.518236][ T29] ? fuse_finish_open+0x391/0x4d0 [ 286.523324][ T29] ? unmap_mapping_pages+0x270/0x270 [ 286.528755][ T29] ? do_raw_spin_lock+0x120/0x2a0 [ 286.534071][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 286.539029][ T29] truncate_pagecache+0x63/0x90 [ 286.544126][ T29] fuse_finish_open+0x39b/0x4d0 [ 286.549012][ T29] fuse_open_common+0x2f0/0x500 [ 286.553948][ T29] do_dentry_open+0x4a1/0x11f0 [ 286.558751][ T29] ? fuse_open_common+0x500/0x500 [ 286.563944][ T29] ? may_open+0x1f6/0x420 [ 286.568295][ T29] path_openat+0x1c71/0x2910 [ 286.572976][ T29] ? path_lookupat+0x860/0x860 [ 286.577753][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 286.583840][ T29] do_filp_open+0x1aa/0x400 [ 286.588352][ T29] ? may_open_dev+0xf0/0xf0 [ 286.592918][ T29] ? alloc_fd+0x2f0/0x670 [ 286.597267][ T29] ? rwlock_bug.part.0+0x90/0x90 [ 286.602289][ T29] ? _find_next_bit+0x1e3/0x260 [ 286.607155][ T29] ? _raw_spin_unlock+0x24/0x40 [ 286.612078][ T29] ? alloc_fd+0x2f0/0x670 [ 286.616427][ T29] do_sys_openat2+0x16d/0x4c0 [ 286.621101][ T29] ? find_held_lock+0x2d/0x110 [ 286.625945][ T29] ? build_open_flags+0x6f0/0x6f0 [ 286.630983][ T29] ? ptrace_notify+0xfa/0x140 [ 286.635726][ T29] ? lock_downgrade+0x6e0/0x6e0 [ 286.640602][ T29] __x64_sys_creat+0xc9/0x120 [ 286.645361][ T29] ? __x64_compat_sys_openat+0x1f0/0x1f0 [ 286.651009][ T29] ? _raw_spin_unlock_irq+0x2a/0x40 [ 286.656276][ T29] ? ptrace_notify+0xfa/0x140 [ 286.660963][ T29] ? syscall_trace_enter.constprop.0+0xb0/0x240 [ 286.667374][ T29] do_syscall_64+0x35/0xb0 [ 286.671899][ T29] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 286.677822][ T29] RIP: 0033:0x7f7b892293c9 [ 286.682329][ T29] RSP: 002b:00007f7b891982f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 286.690768][ T29] RAX: ffffffffffffffda RBX: 00007f7b892b84e8 RCX: 00007f7b892293c9 [ 286.698808][ T29] RDX: 00007f7b892293c9 RSI: 0000000000000000 RDI: 00000000200001c0 [ 286.706850][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 286.714873][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b892b84e0 [ 286.714873][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7b892b84e0 [ 286.714900][ T29] R13: 00007ffc24e5c05f R14: 00007f7b8928514c R15: 0030656c69662f2e [ 286.714936][ T29] [ 286.714951][ T29] [ 286.714951][ T29] Showing all locks held in the system: [ 286.714971][ T29] 2 locks held by pr/ttyS0/16: [ 286.714990][ T29] 1 lock held by khungtaskd/29: [ 286.715004][ T29] #0: ffffffff8bd86860 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 286.715166][ T29] 2 locks held by getty/3282: [ 286.715181][ T29] #0: ffff88814bbdf098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80 [ 286.715316][ T29] #1: ffffc90002cd62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xcea/0x1230 [ 286.715391][ T29] 2 locks held by syz-executor149/3644: [ 286.715406][ T29] #0: ffff888074660460 (sb_writers#9){.+.+}-{0:0}, at: path_openat+0x1b3c/0x2910 [ 286.715484][ T29] #1: ffff888072ef9c50 (&sb->s_type->i_mutex_key#15){+.+.}-{3:3}, at: fuse_open_common+0x35d/0x500 [ 286.715580][ T29] [ 286.715587][ T29] ============================================= [ 286.715587][ T29] [ 286.715625][ T29] NMI backtrace for cpu 0 [ 286.715637][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 286.715661][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.715675][ T29] Call Trace: [ 286.715684][ T29] [ 286.715693][ T29] dump_stack_lvl+0xcd/0x134 [ 286.715752][ T29] nmi_cpu_backtrace.cold+0x47/0x144 [ 286.715784][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 286.715846][ T29] nmi_trigger_cpumask_backtrace+0x1e6/0x230 [ 286.715882][ T29] watchdog+0xc22/0xf90 [ 286.715922][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.715953][ T29] kthread+0x2e9/0x3a0 [ 286.715994][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.716022][ T29] ret_from_fork+0x1f/0x30 [ 286.716069][ T29] [ 286.716079][ T29] Sending NMI from CPU 0 to CPUs 1: [ 286.716108][ C1] NMI backtrace for cpu 1 [ 286.716116][ C1] CPU: 1 PID: 16 Comm: pr/ttyS0 Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 286.716136][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.716145][ C1] RIP: 0010:io_serial_in+0x83/0xa0 [ 286.716188][ C1] Code: 53 1a fd 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 16 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 e8 20 10 67 fd eb a6 e8 49 10 67 fd eb e3 [ 286.716205][ C1] RSP: 0018:ffffc90000157ac0 EFLAGS: 00000002 [ 286.716218][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 286.716231][ C1] RDX: 00000000000003fd RSI: ffffffff84601dcc RDI: ffffffff908cd3a0 [ 286.716243][ C1] RBP: ffffffff908cd360 R08: 0000000000000001 R09: 000000000000001f [ 286.716255][ C1] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000 [ 286.716266][ C1] R13: fffffbfff2119abf R14: fffffbfff2119a76 R15: 0000000000000000 [ 286.716278][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 286.716295][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.716308][ C1] CR2: 00007ffe2f39f108 CR3: 00000000237d6000 CR4: 00000000003506e0 [ 286.716319][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.716330][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.716341][ C1] Call Trace: [ 286.716346][ C1] [ 286.716353][ C1] wait_for_xmitr+0x9a/0x210 [ 286.716372][ C1] serial8250_console_putchar+0x1d/0x60 [ 286.716391][ C1] uart_console_write+0x59/0x100 [ 286.716419][ C1] ? wait_for_xmitr+0x210/0x210 [ 286.716438][ C1] serial8250_console_write+0xa57/0xc30 [ 286.716460][ C1] ? serial8250_startup+0x80/0x80 [ 286.716480][ C1] ? prb_read_valid+0x75/0xa0 [ 286.716497][ C1] ? prb_final_commit+0xa0/0xa0 [ 286.716518][ C1] __console_emit_next_record+0x896/0xa60 [ 286.716543][ C1] ? devkmsg_read+0x730/0x730 [ 286.716563][ C1] ? printk_kthread_func.cold+0x57b/0x73d [ 286.716590][ C1] ? mutex_lock_io_nested+0x1190/0x1190 [ 286.716617][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 286.716642][ C1] printk_kthread_func.cold+0x702/0x73d [ 286.716666][ C1] ? register_console+0x970/0x970 [ 286.716688][ C1] ? prepare_to_wait_exclusive+0x2b0/0x2b0 [ 286.716713][ C1] ? __kthread_parkme+0x15f/0x220 [ 286.716735][ C1] ? register_console+0x970/0x970 [ 286.716756][ C1] kthread+0x2e9/0x3a0 [ 286.716772][ C1] ? kthread_complete_and_exit+0x40/0x40 [ 286.716791][ C1] ret_from_fork+0x1f/0x30 [ 286.716816][ C1] [ 286.717103][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 286.717115][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 5.18.0-syzkaller-10643-g9d004b2f4fea #0 [ 286.717138][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.717151][ T29] Call Trace: [ 286.717158][ T29] [ 286.717166][ T29] dump_stack_lvl+0xcd/0x134 [ 286.717190][ T29] panic+0x2d7/0x636 [ 286.717210][ T29] ? panic_print_sys_info.part.0+0x10b/0x10b [ 286.717252][ T29] ? irq_work_claim+0x76/0x90 [ 286.717303][ T29] ? lapic_can_unplug_cpu+0x80/0x80 [ 286.717326][ T29] ? irq_work_queue+0x29/0x80 [ 286.717347][ T29] ? __wake_up_klogd.part.0+0x99/0xf0 [ 286.717372][ T29] ? watchdog.cold+0x5/0x143 [ 286.717423][ T29] watchdog.cold+0x16/0x143 [ 286.717451][ T29] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 286.717479][ T29] kthread+0x2e9/0x3a0 [ 286.717498][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 286.717528][ T29] ret_from_fork+0x1f/0x30 [ 286.717566][ T29] [ 286.723685][ T29] Kernel Offset: disabled