./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2175513087 <...> [ 12.961615][ T28] audit: type=1400 audit(1684300319.473:63): avc: denied { write } for pid=223 comm="sh" path="pipe:[13680]" dev="pipefs" ino=13680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.968966][ T28] audit: type=1400 audit(1684300319.473:64): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.974693][ T28] audit: type=1400 audit(1684300319.473:65): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.191' (ECDSA) to the list of known hosts. execve("./syz-executor2175513087", ["./syz-executor2175513087"], 0x7ffd5a4196a0 /* 10 vars */) = 0 brk(NULL) = 0x555555694000 brk(0x555555694c40) = 0x555555694c40 arch_prctl(ARCH_SET_FS, 0x555555694300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555556945d0) = 293 set_robust_list(0x5555556945e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7fc5247ec700, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7fc5247ecdd0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7fc5247ec7a0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc5247ecdd0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2175513087", 4096) = 28 brk(0x5555556b5c40) = 0x5555556b5c40 brk(0x5555556b6000) = 0x5555556b6000 mprotect(0x7fc5248ae000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 294 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 295 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 296 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 297 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 298 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 299 ./strace-static-x86_64: Process 299 attached [pid 299] set_robust_list(0x5555556945e0, 24) = 0 [pid 299] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 299] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 299] close(3) = 0 [pid 299] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 301 ./strace-static-x86_64: Process 298 attached [pid 298] set_robust_list(0x5555556945e0, 24) = 0 [pid 298] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 298] close(3) = 0 ./strace-static-x86_64: Process 294 attached ./strace-static-x86_64: Process 295 attached ./strace-static-x86_64: Process 296 attached ./strace-static-x86_64: Process 297 attached [pid 296] set_robust_list(0x5555556945e0, 24 [pid 295] set_robust_list(0x5555556945e0, 24 [pid 297] set_robust_list(0x5555556945e0, 24 [pid 296] <... set_robust_list resumed>) = 0 [pid 295] <... set_robust_list resumed>) = 0 [pid 294] set_robust_list(0x5555556945e0, 24./strace-static-x86_64: Process 301 attached [pid 297] <... set_robust_list resumed>) = 0 [pid 296] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 295] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 294] <... set_robust_list resumed>) = 0 [pid 297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 296] <... openat resumed>) = 3 [pid 297] <... openat resumed>) = 3 [pid 296] ioctl(3, LOOP_CLR_FD [pid 295] <... openat resumed>) = 3 [pid 294] <... openat resumed>) = 3 [pid 301] set_robust_list(0x5555556945e0, 24 [pid 297] ioctl(3, LOOP_CLR_FD [pid 296] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 295] ioctl(3, LOOP_CLR_FD [pid 294] ioctl(3, LOOP_CLR_FD [pid 298] <... clone resumed>, child_tidptr=0x5555556945d0) = 302 ./strace-static-x86_64: Process 302 attached [pid 302] set_robust_list(0x5555556945e0, 24) = 0 [pid 302] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 302] setpgid(0, 0) = 0 [pid 302] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 302] write(3, "1000", 4) = 4 [pid 302] close(3) = 0 [pid 302] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 302] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 302] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[304], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 304 [pid 302] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 302] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 297] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 22.723926][ T28] audit: type=1400 audit(1684300329.243:66): avc: denied { execmem } for pid=293 comm="syz-executor217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.732005][ T28] audit: type=1400 audit(1684300329.253:67): avc: denied { read write } for pid=299 comm="syz-executor217" name="loop5" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.743893][ T28] audit: type=1400 audit(1684300329.253:68): avc: denied { open } for pid=299 comm="syz-executor217" path="/dev/loop5" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 ./strace-static-x86_64: Process 304 attached [pid 301] <... set_robust_list resumed>) = 0 [pid 297] close(3 [pid 296] close(3 [pid 295] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 294] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 297] <... close resumed>) = 0 [pid 296] <... close resumed>) = 0 [pid 295] close(3 [pid 294] close(3 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 295] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 296] <... clone resumed>, child_tidptr=0x5555556945d0) = 305 [pid 295] <... clone resumed>, child_tidptr=0x5555556945d0) = 307 [pid 294] <... clone resumed>, child_tidptr=0x5555556945d0) = 308 [pid 297] <... clone resumed>, child_tidptr=0x5555556945d0) = 306 [pid 301] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 301] setpgid(0, 0) = 0 [pid 301] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 301] write(3, "1000", 4) = 4 [pid 301] close(3) = 0 [pid 301] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 301] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 301] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[309], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 309 [pid 301] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 304] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 304] memfd_create("syzkaller", 0) = 3 [pid 304] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc51c3bb000 ./strace-static-x86_64: Process 308 attached [pid 308] set_robust_list(0x5555556945e0, 24) = 0 [pid 308] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 308] setpgid(0, 0) = 0 [pid 308] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 308] write(3, "1000", 4) = 4 [pid 308] close(3) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 304] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 308] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 308] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 306 attached [pid 306] set_robust_list(0x5555556945e0, 24 [pid 308] <... clone resumed>, parent_tid=[310], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 310 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 306] <... set_robust_list resumed>) = 0 [pid 306] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 306] setpgid(0, 0) = 0 [pid 306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 306] write(3, "1000", 4) = 4 [pid 306] close(3) = 0 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 306] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 306] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[311], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 311 [pid 306] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 304] <... write resumed>) = 524288 [pid 304] munmap(0x7fc51c3bb000, 524288) = 0 [pid 304] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 304] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 310 attached [pid 310] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 310] memfd_create("syzkaller", 0) = 3 [pid 310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc51c3bb000 ./strace-static-x86_64: Process 311 attached [pid 311] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 311] memfd_create("syzkaller", 0./strace-static-x86_64: Process 307 attached [pid 307] set_robust_list(0x5555556945e0, 24) = 0 ./strace-static-x86_64: Process 305 attached [pid 311] <... memfd_create resumed>) = 3 [pid 311] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 305] set_robust_list(0x5555556945e0, 24 [pid 307] setpgid(0, 0) = 0 [pid 305] <... set_robust_list resumed>) = 0 [pid 311] <... mmap resumed>) = 0x7fc51c3bb000 [pid 307] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 307] <... openat resumed>) = 3 [pid 305] <... prctl resumed>) = 0 [pid 307] write(3, "1000", 4 [pid 305] setpgid(0, 0 [pid 307] <... write resumed>) = 4 [pid 305] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 309 attached [pid 307] close(3 [pid 305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 307] <... close resumed>) = 0 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] set_robust_list(0x7fc5247db9e0, 24 [pid 305] <... openat resumed>) = 3 [pid 309] <... set_robust_list resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 305] write(3, "1000", 4 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] <... write resumed>) = 4 [pid 309] memfd_create("syzkaller", 0) = 3 [pid 307] <... mmap resumed>) = 0x7fc5247bb000 [pid 305] close(3 [pid 307] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 305] <... close resumed>) = 0 [pid 309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 307] <... mprotect resumed>) = 0 [pid 305] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] <... mmap resumed>) = 0x7fc51c3bb000 [pid 307] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] <... futex resumed>) = 0 [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 307] <... clone resumed>, parent_tid=[312], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 312 [pid 305] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... mprotect resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 305] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 305] <... clone resumed>, parent_tid=[313], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 313 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 305] <... futex resumed>) = 0 [pid 310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 310] <... write resumed>) = 524288 [pid 310] munmap(0x7fc51c3bb000, 524288) = 0 [pid 310] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 311] <... write resumed>) = 524288 [pid 310] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 313 attached [ 22.768899][ T28] audit: type=1400 audit(1684300329.253:69): avc: denied { ioctl } for pid=299 comm="syz-executor217" path="/dev/loop5" dev="devtmpfs" ino=118 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 22.788758][ T304] loop4: detected capacity change from 0 to 1024 ./strace-static-x86_64: Process 312 attached [pid 309] <... write resumed>) = 524288 [pid 304] <... ioctl resumed>) = 0 [pid 313] set_robust_list(0x7fc5247db9e0, 24 [pid 312] set_robust_list(0x7fc5247db9e0, 24 [pid 309] munmap(0x7fc51c3bb000, 524288 [pid 304] close(3 [pid 313] <... set_robust_list resumed>) = 0 [pid 312] <... set_robust_list resumed>) = 0 [pid 309] <... munmap resumed>) = 0 [pid 313] memfd_create("syzkaller", 0 [pid 312] memfd_create("syzkaller", 0 [pid 309] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 304] <... close resumed>) = 0 [pid 313] <... memfd_create resumed>) = 3 [pid 312] <... memfd_create resumed>) = 3 [pid 309] <... openat resumed>) = 4 [pid 304] mkdir("./file0", 0777 [pid 313] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 312] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 309] ioctl(4, LOOP_SET_FD, 3 [pid 304] <... mkdir resumed>) = 0 [pid 313] <... mmap resumed>) = 0x7fc51c3bb000 [pid 312] <... mmap resumed>) = 0x7fc51c3bb000 [pid 311] munmap(0x7fc51c3bb000, 524288 [pid 310] <... ioctl resumed>) = 0 [pid 311] <... munmap resumed>) = 0 [pid 310] close(3 [pid 311] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 310] <... close resumed>) = 0 [pid 311] <... openat resumed>) = 4 [pid 310] mkdir("./file0", 0777 [pid 311] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 313] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 312] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 309] <... ioctl resumed>) = 0 [pid 304] mount("/dev/loop4", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 311] <... ioctl resumed>) = 0 [pid 310] mount("/dev/loop0", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 311] close(3) = 0 [pid 311] mkdir("./file0", 0777) = -1 EEXIST (File exists) [ 22.828803][ T310] loop0: detected capacity change from 0 to 1024 [ 22.836694][ T309] loop5: detected capacity change from 0 to 1024 [ 22.839972][ T311] loop3: detected capacity change from 0 to 1024 [ 22.851031][ T28] audit: type=1400 audit(1684300329.373:70): avc: denied { mounton } for pid=308 comm="syz-executor217" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [pid 311] mount("/dev/loop3", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 313] <... write resumed>) = 524288 [pid 312] <... write resumed>) = 524288 [pid 309] close(3 [pid 313] munmap(0x7fc51c3bb000, 524288 [pid 312] munmap(0x7fc51c3bb000, 524288 [pid 309] <... close resumed>) = 0 [pid 312] <... munmap resumed>) = 0 [pid 309] mkdir("./file0", 0777 [pid 310] <... mount resumed>) = 0 [pid 310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 313] <... munmap resumed>) = 0 [pid 309] <... mkdir resumed>) = -1 EEXIST (File exists) [pid 310] <... openat resumed>) = 3 [pid 310] chdir("./file0") = 0 [pid 310] ioctl(4, LOOP_CLR_FD) = 0 [pid 310] close(4 [pid 313] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 312] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 309] mount("/dev/loop5", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 310] <... close resumed>) = 0 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 310] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 313] <... openat resumed>) = 4 [pid 312] <... openat resumed>) = 4 [pid 313] ioctl(4, LOOP_SET_FD, 3 [pid 312] ioctl(4, LOOP_SET_FD, 3 [pid 310] <... open resumed>) = 4 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 310] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 310] ftruncate(5, 33587199) = 0 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] <... futex resumed>) = 1 [pid 310] sendfile(4, 5, NULL, 281474978811909 [pid 304] <... mount resumed>) = 0 [pid 304] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 304] chdir("./file0") = 0 [pid 304] ioctl(4, LOOP_CLR_FD) = 0 [ 22.855182][ T310] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 22.885034][ T311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 22.895405][ T313] loop2: detected capacity change from 0 to 1024 [ 22.895676][ T304] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 22.901909][ T312] loop1: detected capacity change from 0 to 1024 [ 22.919035][ T309] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [pid 304] close(4) = 0 [pid 304] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 304] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 311] <... mount resumed>) = 0 [pid 311] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 311] chdir("./file0") = 0 [pid 311] ioctl(4, LOOP_CLR_FD) = 0 [pid 311] close(4 [pid 302] <... futex resumed>) = 0 [pid 302] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... futex resumed>) = 0 [pid 304] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 311] <... close resumed>) = 0 [pid 311] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 306] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 1 [pid 311] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 312] <... ioctl resumed>) = 0 [pid 312] close(3) = 0 [pid 312] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 312] mount("/dev/loop1", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 304] <... open resumed>) = 4 [pid 311] <... open resumed>) = 4 [pid 311] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 304] <... futex resumed>) = 1 [pid 302] <... futex resumed>) = 0 [pid 311] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 306] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 302] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... open resumed>) = 5 [pid 306] <... futex resumed>) = 0 [pid 304] <... open resumed>) = 5 [pid 302] <... futex resumed>) = 0 [pid 311] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] ftruncate(5, 33587199 [pid 306] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] ftruncate(5, 33587199 [pid 302] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] <... ftruncate resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 304] <... ftruncate resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 311] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 311] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 304] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 311] sendfile(4, 5, NULL, 281474978811909 [pid 310] <... sendfile resumed>) = 376832 [pid 306] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 304] sendfile(4, 5, NULL, 281474978811909 [pid 302] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 306] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... ioctl resumed>) = 0 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 308] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 310] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5) = 1099 [pid 310] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 308] <... futex resumed>) = 0 [pid 308] exit_group(0) = ? [pid 310] +++ exited with 0 +++ [pid 308] +++ exited with 0 +++ [ 22.928454][ T28] audit: type=1400 audit(1684300329.403:71): avc: denied { mount } for pid=308 comm="syz-executor217" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 22.957469][ T28] audit: type=1400 audit(1684300329.403:72): avc: denied { write } for pid=308 comm="syz-executor217" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 313] close(3 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=308, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 309] <... mount resumed>) = 0 [pid 309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 309] chdir("./file0") = 0 [pid 309] ioctl(4, LOOP_CLR_FD) = 0 [pid 309] close(4) = 0 [pid 309] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 301] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 309] <... futex resumed>) = 1 [pid 309] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 313] <... close resumed>) = 0 [pid 313] mkdir("./file0", 0777) = -1 EEXIST (File exists) [pid 313] mount("/dev/loop2", "./file0", "ext4", MS_NOSUID|MS_SILENT|MS_STRICTATIME, "grpquota,debug_want_extra_isize=0x0000000000000082,nodiscard,nojournal_checksum,data=ordered,init_it"... [pid 294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 294] ioctl(3, LOOP_CLR_FD) = 0 [pid 294] close(3) = 0 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 321 [ 22.979845][ T28] audit: type=1400 audit(1684300329.403:73): avc: denied { add_name } for pid=308 comm="syz-executor217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.000554][ T28] audit: type=1400 audit(1684300329.403:74): avc: denied { create } for pid=308 comm="syz-executor217" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 23.002342][ T312] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. ./strace-static-x86_64: Process 321 attached [pid 306] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 301] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 309] <... open resumed>) = 4 [pid 306] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 0 [pid 306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 302] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 306] <... mmap resumed>) = 0x7fc51c41a000 [pid 302] <... mmap resumed>) = 0x7fc51c41a000 [pid 301] <... mmap resumed>) = 0x7fc51c41a000 [pid 306] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 302] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 301] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 306] <... mprotect resumed>) = 0 [pid 302] <... mprotect resumed>) = 0 [pid 301] <... mprotect resumed>) = 0 [pid 309] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 302] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 301] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 306] <... clone resumed>, parent_tid=[323], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 323 [pid 302] <... clone resumed>, parent_tid=[324], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 324 [pid 301] <... clone resumed>, parent_tid=[325], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 325 [pid 321] set_robust_list(0x5555556945e0, 24) = 0 [pid 306] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 306] <... futex resumed>) = 0 [pid 302] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 306] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 323 attached ./strace-static-x86_64: Process 324 attached ./strace-static-x86_64: Process 325 attached [pid 324] set_robust_list(0x7fc51c43a9e0, 24 [pid 325] set_robust_list(0x7fc51c43a9e0, 24 [pid 324] <... set_robust_list resumed>) = 0 [pid 323] set_robust_list(0x7fc51c43a9e0, 24 [pid 321] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 325] <... set_robust_list resumed>) = 0 [pid 324] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 323] <... set_robust_list resumed>) = 0 [pid 321] <... prctl resumed>) = 0 [pid 313] <... mount resumed>) = 0 [pid 312] <... mount resumed>) = 0 [pid 321] setpgid(0, 0 [pid 313] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 312] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 321] <... setpgid resumed>) = 0 [pid 313] <... openat resumed>) = 3 [pid 312] <... openat resumed>) = 3 [pid 321] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 313] chdir("./file0" [pid 312] chdir("./file0" [pid 321] <... openat resumed>) = 3 [pid 313] <... chdir resumed>) = 0 [pid 312] <... chdir resumed>) = 0 [pid 321] write(3, "1000", 4 [pid 313] ioctl(4, LOOP_CLR_FD [pid 312] ioctl(4, LOOP_CLR_FD [pid 321] <... write resumed>) = 4 [pid 313] <... ioctl resumed>) = 0 [pid 312] <... ioctl resumed>) = 0 [pid 321] close(3 [pid 313] close(4 [pid 312] close(4 [pid 321] <... close resumed>) = 0 [pid 313] <... close resumed>) = 0 [pid 312] <... close resumed>) = 0 [pid 321] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 313] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... mmap resumed>) = 0x7fc5247bb000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 321] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 313] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 312] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... mprotect resumed>) = 0 [pid 321] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[326], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 326 [pid 321] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... open resumed>) = 4 [pid 312] <... open resumed>) = 4 [pid 321] <... futex resumed>) = 0 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 313] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... open resumed>) = 5 [pid 312] <... open resumed>) = 5 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] ftruncate(5, 33587199 [pid 312] ftruncate(5, 33587199 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] <... ftruncate resumed>) = 0 [pid 312] <... ftruncate resumed>) = 0 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 1 [pid 312] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 313] sendfile(4, 5, NULL, 281474978811909 [pid 312] sendfile(4, 5, NULL, 281474978811909 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 325] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 301] <... futex resumed>) = 0 [pid 301] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 325] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 324] <... mount resumed>) = 0 [pid 324] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 302] <... futex resumed>) = 0 [pid 324] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 323] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 302] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... mount resumed>) = 0 [pid 302] <... futex resumed>) = 1 [pid 323] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 323] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 326 attached [pid 324] <... futex resumed>) = 0 [pid 309] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = 0 [pid 302] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 309] ftruncate(5, 33587199 [pid 326] memfd_create("syzkaller", 0 [pid 309] <... ftruncate resumed>) = 0 [pid 326] <... memfd_create resumed>) = 3 [pid 309] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 309] <... futex resumed>) = 1 [pid 326] <... mmap resumed>) = 0x7fc51c3bb000 [pid 309] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 326] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 306] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = 0 [pid 323] <... futex resumed>) = 0 [pid 306] <... futex resumed>) = 1 [pid 301] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 306] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 301] <... futex resumed>) = 1 [pid 309] <... futex resumed>) = 0 [pid 323] <... open resumed>) = 6 [pid 309] sendfile(4, 5, NULL, 281474978811909 [pid 301] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 323] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... write resumed>) = 524288 [pid 326] munmap(0x7fc51c3bb000, 524288) = 0 [pid 323] <... futex resumed>) = 1 [pid 306] <... futex resumed>) = 0 [pid 323] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 306] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 306] <... futex resumed>) = 0 [pid 323] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 306] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 323] <... writev resumed>) = 1099 [pid 326] <... openat resumed>) = 4 [pid 326] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 326] ioctl(4, LOOP_CLR_FD) = 0 [pid 323] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 306] <... futex resumed>) = 0 [pid 323] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6 [pid 326] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 326] close(4) = 0 [pid 326] close(3) = 0 [pid 326] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 324] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 326] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 324] <... futex resumed>) = 1 [pid 321] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 302] <... futex resumed>) = 0 [pid 326] <... open resumed>) = 3 [pid 324] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] <... futex resumed>) = 0 [pid 302] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 302] <... futex resumed>) = 0 [pid 326] <... futex resumed>) = 0 [pid 324] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 321] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... open resumed>) = 4 [pid 324] <... writev resumed>) = 1099 [pid 321] <... futex resumed>) = 0 [pid 326] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 324] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 0 [pid 324] <... futex resumed>) = 1 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 302] <... futex resumed>) = 0 [pid 326] ftruncate(4, 33587199 [pid 324] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 326] <... ftruncate resumed>) = 0 [pid 321] <... futex resumed>) = 0 [pid 326] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 326] <... futex resumed>) = 0 [pid 321] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 326] sendfile(3, 4, NULL, 281474978811909 [pid 321] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 23.021391][ T28] audit: type=1400 audit(1684300329.413:75): avc: denied { mounton } for pid=301 comm="syz-executor217" path="/root/file0" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 23.053263][ T313] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 304] <... sendfile resumed>) = 327680 [pid 304] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 304] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 305] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 307] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 302] exit_group(0 [pid 301] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... sendfile resumed>) = 376832 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 324] <... futex resumed>) = ? [pid 304] <... futex resumed>) = ? [pid 302] <... exit_group resumed>) = ? [pid 307] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 1 [pid 324] +++ exited with 0 +++ [pid 325] <... futex resumed>) = 0 [pid 307] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 305] <... futex resumed>) = 0 [pid 304] +++ exited with 0 +++ [pid 301] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] mount("/dev/loop5", "./bus", NULL, MS_BIND, NULL [pid 302] +++ exited with 0 +++ [pid 305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 307] <... mmap resumed>) = 0x7fc51c41a000 [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=302, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 305] <... mmap resumed>) = 0x7fc51c41a000 [pid 298] restart_syscall(<... resuming interrupted clone ...> [pid 305] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 307] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 298] <... restart_syscall resumed>) = 0 [pid 305] <... mprotect resumed>) = 0 [pid 307] <... mprotect resumed>) = 0 [pid 307] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 305] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 298] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = 0 [pid 307] <... clone resumed>, parent_tid=[327], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 327 [pid 305] <... clone resumed>, parent_tid=[328], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 328 [pid 298] close(3 [pid 307] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 298] <... close resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 307] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 305] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 298] <... clone resumed>, child_tidptr=0x5555556945d0) = 329 [pid 313] <... sendfile resumed>) = 376832 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 329 attached [pid 329] set_robust_list(0x5555556945e0, 24) = 0 [pid 329] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 329] setpgid(0, 0) = 0 [pid 329] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 329] write(3, "1000", 4) = 4 [pid 329] close(3) = 0 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 321] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) ./strace-static-x86_64: Process 327 attached [pid 325] <... mount resumed>) = 0 [pid 321] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] set_robust_list(0x7fc51c43a9e0, 24 [pid 325] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = 1 [pid 321] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 301] <... futex resumed>) = 0 ./strace-static-x86_64: Process 328 attached [pid 327] <... set_robust_list resumed>) = 0 [pid 325] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] <... mmap resumed>) = 0x7fc51c41a000 [pid 301] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] set_robust_list(0x7fc51c43a9e0, 24 [pid 327] mount("/dev/loop1", "./bus", NULL, MS_BIND, NULL [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 301] <... futex resumed>) = 0 [pid 325] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 321] <... mprotect resumed>) = 0 [pid 301] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 325] <... open resumed>) = 6 [pid 321] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 325] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 328] <... set_robust_list resumed>) = 0 [pid 327] <... mount resumed>) = 0 [pid 325] <... futex resumed>) = 1 [pid 321] <... clone resumed>, parent_tid=[330], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 330 [pid 301] <... futex resumed>) = 0 [pid 328] mount("/dev/loop2", "./bus", NULL, MS_BIND, NULL [pid 327] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 325] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 321] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 327] <... futex resumed>) = 1 [pid 325] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 321] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 0 [pid 301] <... futex resumed>) = 0 [pid 327] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 325] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 321] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 301] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 328] <... mount resumed>) = 0 [pid 325] <... writev resumed>) = 1099 [pid 329] <... mmap resumed>) = 0x7fc5247bb000 [pid 325] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 325] <... futex resumed>) = 1 [ 23.100221][ T311] EXT4-fs error (device loop3): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [ 23.113448][ T304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [ 23.115726][ T311] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5841: Corrupt filesystem [pid 301] <... futex resumed>) = 0 [pid 329] <... mprotect resumed>) = 0 [pid 325] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 329] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[331], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 331 [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 330 attached [pid 330] set_robust_list(0x7fc51c43a9e0, 24) = 0 [pid 330] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0 [pid 330] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 330] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 321] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 321] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 330] <... futex resumed>) = 1 [pid 330] writev(5, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5) = 1099 [pid 330] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 321] <... futex resumed>) = 0 [pid 330] <... futex resumed>) = 1 [pid 330] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 331 attached [pid 331] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 331] memfd_create("syzkaller", 0) = 3 [pid 331] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc51c3bb000 [pid 331] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 312] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = 1 [pid 312] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 328] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... open resumed>) = 6 [pid 328] <... futex resumed>) = 1 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 305] <... futex resumed>) = 0 [pid 328] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] <... futex resumed>) = 1 [pid 307] <... futex resumed>) = 0 [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 307] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 313] <... futex resumed>) = 0 [pid 305] <... futex resumed>) = 1 [pid 313] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 312] <... writev resumed>) = 1099 [pid 307] <... futex resumed>) = 0 [pid 313] <... open resumed>) = 6 [pid 312] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 307] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 312] <... futex resumed>) = 0 [pid 307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 313] <... futex resumed>) = 0 [pid 312] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 307] exit_group(0 [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 312] <... futex resumed>) = ? [pid 307] <... exit_group resumed>) = ? [pid 305] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] <... write resumed>) = 524288 [pid 327] <... futex resumed>) = ? [pid 305] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 305] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 327] +++ exited with 0 +++ [pid 331] munmap(0x7fc51c3bb000, 524288) = 0 [pid 331] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 331] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 313] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 312] +++ exited with 0 +++ [pid 307] +++ exited with 0 +++ [pid 295] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=307, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 295] restart_syscall(<... resuming interrupted clone ...> [pid 331] ioctl(4, LOOP_CLR_FD [pid 295] <... restart_syscall resumed>) = 0 [pid 295] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 295] ioctl(3, LOOP_CLR_FD) = 0 [pid 295] close(3) = 0 [pid 295] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 332 [pid 331] <... ioctl resumed>) = 0 [pid 313] writev(6, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 331] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 331] close(4) = 0 [pid 331] close(3 [pid 313] <... writev resumed>) = 1099 [pid 313] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 305] <... futex resumed>) = 0 [pid 313] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 305] exit_group(0 [pid 328] <... futex resumed>) = ? [pid 313] <... futex resumed>) = ? [pid 305] <... exit_group resumed>) = ? [pid 328] +++ exited with 0 +++ [pid 313] +++ exited with 0 +++ [pid 305] +++ exited with 0 +++ [pid 296] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=305, si_uid=0, si_status=0, si_utime=0, si_stime=1} --- [pid 296] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 296] ioctl(3, LOOP_CLR_FD) = 0 [pid 296] close(3) = 0 [pid 296] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 333 ./strace-static-x86_64: Process 332 attached [ 23.156841][ T309] EXT4-fs error (device loop5): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [ 23.177361][ T309] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5841: Corrupt filesystem [ 23.186986][ T311] EXT4-fs error (device loop3): ext4_dirty_inode:6045: inode #18: comm syz-executor217: mark_inode_dirty error ./strace-static-x86_64: Process 333 attached [pid 332] set_robust_list(0x5555556945e0, 24 [pid 331] <... close resumed>) = 0 [pid 311] <... sendfile resumed>) = 376832 [pid 333] set_robust_list(0x5555556945e0, 24 [pid 332] <... set_robust_list resumed>) = 0 [pid 333] <... set_robust_list resumed>) = 0 [pid 332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 333] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 332] <... prctl resumed>) = 0 [pid 333] <... prctl resumed>) = 0 [pid 332] setpgid(0, 0 [pid 333] setpgid(0, 0 [pid 332] <... setpgid resumed>) = 0 [pid 333] <... setpgid resumed>) = 0 [pid 332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 333] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 332] <... openat resumed>) = 3 [pid 333] <... openat resumed>) = 3 [pid 332] write(3, "1000", 4 [pid 333] write(3, "1000", 4 [pid 332] <... write resumed>) = 4 [pid 333] <... write resumed>) = 4 [pid 332] close(3 [pid 333] close(3 [pid 332] <... close resumed>) = 0 [pid 333] <... close resumed>) = 0 [pid 332] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 311] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 0 [pid 332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 311] <... futex resumed>) = 0 [pid 333] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 332] <... mmap resumed>) = 0x7fc5247bb000 [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... mmap resumed>) = 0x7fc5247bb000 [pid 332] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 311] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 333] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE [pid 332] <... mprotect resumed>) = 0 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 333] <... mprotect resumed>) = 0 [pid 332] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 331] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 331] <... open resumed>) = 3 [pid 329] <... futex resumed>) = 0 [pid 332] <... clone resumed>, parent_tid=[334], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 334 [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 333] <... clone resumed>, parent_tid=[335], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 335 [pid 332] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 333] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] <... futex resumed>) = 0 [pid 331] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 333] <... futex resumed>) = 0 [pid 332] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 331] <... open resumed>) = 4 [pid 329] <... futex resumed>) = 0 [pid 306] exit_group(0 [pid 333] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 323] <... futex resumed>) = ? [pid 311] <... futex resumed>) = ? [pid 306] <... exit_group resumed>) = ? [pid 331] ftruncate(4, 33587199 [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 323] +++ exited with 0 +++ [pid 331] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 329] <... futex resumed>) = 0 [pid 311] +++ exited with 0 +++ [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] <... futex resumed>) = 0 [pid 329] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 331] sendfile(3, 4, NULL, 281474978811909 [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 335 attached ./strace-static-x86_64: Process 334 attached ) = 0 [pid 306] +++ exited with 0 +++ [pid 335] set_robust_list(0x7fc5247db9e0, 24 [pid 334] set_robust_list(0x7fc5247db9e0, 24 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=306, si_uid=0, si_status=0, si_utime=0, si_stime=9} --- [pid 335] <... set_robust_list resumed>) = 0 [pid 334] <... set_robust_list resumed>) = 0 [pid 335] memfd_create("syzkaller", 0 [pid 334] memfd_create("syzkaller", 0 [pid 335] <... memfd_create resumed>) = 3 [pid 334] <... memfd_create resumed>) = 3 [pid 297] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 335] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 297] <... openat resumed>) = 3 [pid 335] <... mmap resumed>) = 0x7fc51c3bb000 [pid 334] <... mmap resumed>) = 0x7fc51c3bb000 [pid 297] ioctl(3, LOOP_CLR_FD [pid 334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 297] <... ioctl resumed>) = 0 [pid 335] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288 [pid 297] close(3 [pid 331] <... sendfile resumed>) = 524288 [pid 309] <... sendfile resumed>) = 262144 [pid 297] <... close resumed>) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 336 [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 309] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 331] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 309] <... futex resumed>) = 0 ./strace-static-x86_64: Process 336 attached [pid 334] <... write resumed>) = 524288 [pid 331] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... write resumed>) = 524288 [pid 309] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 301] exit_group(0 [pid 336] set_robust_list(0x5555556945e0, 24 [pid 335] munmap(0x7fc51c3bb000, 524288 [pid 334] munmap(0x7fc51c3bb000, 524288 [pid 331] mount("/dev/loop4", "./bus", NULL, MS_BIND, NULL [pid 329] <... futex resumed>) = 0 [pid 325] <... futex resumed>) = ? [pid 309] <... futex resumed>) = ? [pid 301] <... exit_group resumed>) = ? [pid 336] <... set_robust_list resumed>) = 0 [pid 335] <... munmap resumed>) = 0 [pid 334] <... munmap resumed>) = 0 [pid 331] <... mount resumed>) = 0 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 23.209982][ T309] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #18: comm syz-executor217: mark_inode_dirty error [ 23.234035][ T309] EXT4-fs error (device loop5): __ext4_get_inode_loc:4492: comm syz-executor217: Invalid inode table block 5 in block_group 0 [pid 325] +++ exited with 0 +++ [pid 309] +++ exited with 0 +++ [pid 336] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 335] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 334] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... prctl resumed>) = 0 [pid 336] setpgid(0, 0) = 0 [pid 334] <... openat resumed>) = 4 [pid 331] <... futex resumed>) = 1 [pid 329] <... futex resumed>) = 0 [pid 336] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 329] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 336] <... openat resumed>) = 3 [pid 329] <... futex resumed>) = 0 [pid 336] write(3, "1000", 4 [pid 329] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 336] <... write resumed>) = 4 [pid 336] close(3) = 0 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 336] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[337], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 337 [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 337 attached [pid 337] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 337] memfd_create("syzkaller", 0) = 3 [pid 337] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 335] <... openat resumed>) = 4 [pid 334] ioctl(4, LOOP_SET_FD, 3 [pid 331] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 337] <... mmap resumed>) = 0x7fc51c3bb000 [ 23.272297][ T309] syz-executor217 (309) used greatest stack depth: 21392 bytes left [ 23.286140][ T301] ------------[ cut here ]------------ [ 23.291469][ T301] kernel BUG at fs/ext4/ext4.h:3331! [ 23.296841][ T301] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 23.302739][ T301] CPU: 0 PID: 301 Comm: syz-executor217 Not tainted 6.1.25-syzkaller-00172-g10e4c804f2f9 #0 [ 23.312631][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [pid 337] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 337] munmap(0x7fc51c3bb000, 524288) = 0 [pid 337] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 337] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 337] ioctl(4, LOOP_CLR_FD) = 0 [pid 337] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 337] close(4) = 0 [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 337] close(3 [pid 329] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... close resumed>) = 0 [pid 329] <... futex resumed>) = 0 [pid 329] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc51c41a000 [pid 329] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] <... mprotect resumed>) = 0 [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 329] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 329] <... clone resumed>, parent_tid=[338], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 338 [pid 337] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... open resumed>) = 3 [pid 329] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 329] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... futex resumed>) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 337] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... open resumed>) = 4 [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 337] ftruncate(4, 33587199 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... ftruncate resumed>) = -1 EINVAL (Invalid argument) [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [ 23.322532][ T301] RIP: 0010:ext4_mb_load_buddy_gfp+0xef8/0xf10 [ 23.328518][ T301] Code: ae 6f c6 ff e9 de f3 ff ff e8 f4 0c 81 ff 48 c7 c7 20 84 8b 86 4c 89 ee 48 89 da e8 52 32 a7 00 e9 50 f2 ff ff e8 d8 0c 81 ff <0f> 0b e8 d1 0c 81 ff 0f 0b e8 ca 0c 81 ff 0f 0b 0f 1f 84 00 00 00 [ 23.348059][ T301] RSP: 0018:ffffc90000e77988 EFLAGS: 00010293 [ 23.353958][ T301] RAX: ffffffff81f28bf8 RBX: 0000000000000001 RCX: ffff88810ce74c00 [ 23.361772][ T301] RDX: 0000000000000000 RSI: 00000000ffff821c RDI: 0000000000000001 [pid 337] sendfile(3, 4, NULL, 281474978811909 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 23.369582][ T301] RBP: ffffc90000e77a10 R08: ffffffff81f27dec R09: ffffed10225b8b22 [ 23.377400][ T301] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffff821c [ 23.385203][ T301] R13: ffff88810d0be000 R14: ffff88810993f3a8 R15: ffff88810993f018 [ 23.393013][ T301] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.401786][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.408202][ T301] CR2: 00007fc5247ec8d0 CR3: 000000010fa7b000 CR4: 00000000003506b0 [pid 336] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 336] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc51c41a000 [pid 336] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 336] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[339], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 339 [pid 336] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 336] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... sendfile resumed>) = 524288 [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 339 attached [pid 339] set_robust_list(0x7fc51c43a9e0, 24) = 0 [pid 339] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL) = 0 [pid 339] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 339] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = 0 [pid 336] <... futex resumed>) = 1 [pid 337] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 337] <... open resumed>) = 5 [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 337] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 336] <... futex resumed>) = 0 [pid 321] exit_group(0 [pid 337] writev(5, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 336] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 321] <... exit_group resumed>) = ? [pid 337] <... writev resumed>) = 1099 [pid 337] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 336] <... futex resumed>) = 0 [pid 337] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 336] exit_group(0 [pid 339] <... futex resumed>) = ? [pid 337] <... futex resumed>) = ? [pid 336] <... exit_group resumed>) = ? [ 23.416017][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 23.423823][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.431638][ T301] Call Trace: [ 23.434826][ T301] [ 23.437541][ T301] ? _raw_spin_trylock_bh+0x190/0x190 [ 23.442748][ T301] ext4_discard_preallocations+0x79c/0xef0 [ 23.448389][ T301] ? mb_clear_bits+0x130/0x130 [ 23.452984][ T301] ? rwsem_write_trylock+0x15b/0x290 [ 23.458111][ T301] ? __kasan_slab_free+0x11/0x20 [ 23.462886][ T301] ext4_release_file+0x16e/0x310 [ 23.467660][ T301] ? ext4_file_open+0x750/0x750 [pid 326] <... sendfile resumed>) = ? [pid 339] +++ exited with 0 +++ [pid 337] +++ exited with 0 +++ [pid 336] +++ exited with 0 +++ [pid 326] +++ exited with 0 +++ [pid 297] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=336, si_uid=0, si_status=0, si_utime=0, si_stime=4} --- [pid 297] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 297] ioctl(3, LOOP_CLR_FD) = 0 [pid 297] close(3) = 0 [pid 297] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 340 ./strace-static-x86_64: Process 340 attached [pid 340] set_robust_list(0x5555556945e0, 24) = 0 [pid 340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 340] setpgid(0, 0) = 0 [pid 340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 340] write(3, "1000", 4) = 4 [pid 340] close(3) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc5247bb000 [pid 340] mprotect(0x7fc5247bc000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] clone(child_stack=0x7fc5247db3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[341], tls=0x7fc5247db700, child_tidptr=0x7fc5247db9d0) = 341 [pid 340] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 341 attached [pid 341] set_robust_list(0x7fc5247db9e0, 24) = 0 [pid 341] memfd_create("syzkaller", 0) = 3 [pid 341] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc51c3bb000 [pid 341] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 524288) = 524288 [pid 341] munmap(0x7fc51c3bb000, 524288) = 0 [pid 341] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 341] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 341] ioctl(4, LOOP_CLR_FD) = 0 [pid 341] ioctl(4, LOOP_SET_FD, 3) = -1 EBUSY (Device or resource busy) [pid 341] close(4) = 0 [ 23.472343][ T301] __fput+0x3ab/0x870 [ 23.476164][ T301] ____fput+0x15/0x20 [ 23.479982][ T301] task_work_run+0x24d/0x2e0 [ 23.484411][ T301] ? task_work_cancel+0x2b0/0x2b0 [ 23.489272][ T301] ? __kasan_check_write+0x14/0x20 [ 23.494231][ T301] ? exit_task_namespaces+0xc2/0xd0 [ 23.499250][ T301] do_exit+0xbb0/0x2910 [ 23.503242][ T301] ? put_task_struct+0x80/0x80 [ 23.507842][ T301] ? __kasan_check_write+0x14/0x20 [ 23.512788][ T301] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 23.517817][ T301] ? wake_up_state+0xb/0x10 [pid 341] close(3) = 0 [pid 341] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 3 [pid 341] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4 [pid 341] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] ftruncate(4, 33587199) = -1 EINVAL (Invalid argument) [pid 341] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 340] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 341] <... futex resumed>) = 1 [pid 341] sendfile(3, 4, NULL, 281474978811909 [pid 335] ioctl(4, LOOP_SET_FD, 3 [pid 334] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 330] <... futex resumed>) = ? [pid 335] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 334] ioctl(4, LOOP_CLR_FD [pid 330] +++ exited with 0 +++ [pid 321] +++ exited with 0 +++ [pid 335] ioctl(4, LOOP_CLR_FD [pid 334] <... ioctl resumed>) = 0 [pid 335] <... ioctl resumed>) = 0 [pid 294] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=321, si_uid=0, si_status=0, si_utime=0, si_stime=6} --- [pid 294] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [ 23.522154][ T301] ? zap_other_threads+0x292/0x2d0 [ 23.527109][ T301] do_group_exit+0x21a/0x2d0 [ 23.531531][ T301] __x64_sys_exit_group+0x3f/0x40 [ 23.536390][ T301] do_syscall_64+0x3d/0xb0 [ 23.540648][ T301] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 23.546367][ T301] RIP: 0033:0x7fc52482e229 [ 23.550629][ T301] Code: Unable to access opcode bytes at 0x7fc52482e1ff. [ 23.557569][ T301] RSP: 002b:00007fff4673a6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 23.565817][ T301] RAX: ffffffffffffffda RBX: 00007fc5248b4470 RCX: 00007fc52482e229 [pid 334] ioctl(4, LOOP_SET_FD, 3 [pid 294] ioctl(3, LOOP_CLR_FD [pid 335] ioctl(4, LOOP_SET_FD, 3 [pid 334] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 294] <... ioctl resumed>) = 0 [pid 335] <... ioctl resumed>) = -1 EBUSY (Device or resource busy) [pid 334] close(4 [pid 294] close(3 [pid 335] close(4 [pid 334] <... close resumed>) = 0 [pid 294] <... close resumed>) = 0 [pid 335] <... close resumed>) = 0 [pid 334] close(3 [pid 294] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 335] close(3 [pid 334] <... close resumed>) = 0 [pid 340] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... close resumed>) = 0 [pid 334] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 294] <... clone resumed>, child_tidptr=0x5555556945d0) = 342 [pid 340] <... futex resumed>) = 0 [pid 335] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] <... futex resumed>) = 1 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 335] <... futex resumed>) = 1 [pid 334] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... mmap resumed>) = 0x7fc51c41a000 [pid 335] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] mprotect(0x7fc51c41b000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] clone(child_stack=0x7fc51c43a3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[343], tls=0x7fc51c43a700, child_tidptr=0x7fc51c43a9d0) = 343 [pid 340] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 343 attached ./strace-static-x86_64: Process 342 attached ./strace-static-x86_64: Process 338 attached [pid 333] <... futex resumed>) = 0 [pid 332] <... futex resumed>) = 0 [pid 331] <... open resumed>) = 5 [ 23.573636][ T301] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 23.581442][ T301] RBP: 0000000000000000 R08: ffffffffffffffb8 R09: 0000000000f0b5ff [ 23.589249][ T301] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc5248b4470 [ 23.597063][ T301] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 23.604877][ T301] [ 23.607734][ T301] Modules linked in: [ 23.611862][ T301] ---[ end trace 0000000000000000 ]--- [ 23.617349][ T301] RIP: 0010:ext4_mb_load_buddy_gfp+0xef8/0xf10 [pid 343] set_robust_list(0x7fc51c43a9e0, 24) = 0 [pid 342] set_robust_list(0x5555556945e0, 24 [pid 338] set_robust_list(0x7fc51c43a9e0, 24 [pid 333] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 343] mount("/dev/loop3", "./bus", NULL, MS_BIND, NULL [pid 342] <... set_robust_list resumed>) = 0 [pid 338] <... set_robust_list resumed>) = 0 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 1 [pid 331] <... futex resumed>) = 0 [pid 343] <... mount resumed>) = 0 [pid 335] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 334] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 335] <... open resumed>) = 3 [pid 334] <... open resumed>) = 3 [pid 335] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 340] futex(0x7fc5248b47cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 338] writev(5, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 343] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 333] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 331] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 340] <... mmap resumed>) = 0x7fc51c3f9000 [pid 340] mprotect(0x7fc51c3fa000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 340] clone(child_stack=0x7fc51c4193f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[346], tls=0x7fc51c419700, child_tidptr=0x7fc51c4199d0) = 346 [pid 340] futex(0x7fc5248b47c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 340] futex(0x7fc5248b47cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 343] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 329] exit_group(0) = ? ./strace-static-x86_64: Process 346 attached [ 23.623372][ T301] Code: ae 6f c6 ff e9 de f3 ff ff e8 f4 0c 81 ff 48 c7 c7 20 84 8b 86 4c 89 ee 48 89 da e8 52 32 a7 00 e9 50 f2 ff ff e8 d8 0c 81 ff <0f> 0b e8 d1 0c 81 ff 0f 0b e8 ca 0c 81 ff 0f 0b 0f 1f 84 00 00 00 [ 23.643231][ T301] RSP: 0018:ffffc90000e77988 EFLAGS: 00010293 [ 23.651090][ T301] RAX: ffffffff81f28bf8 RBX: 0000000000000001 RCX: ffff88810ce74c00 [ 23.659302][ T301] RDX: 0000000000000000 RSI: 00000000ffff821c RDI: 0000000000000001 [pid 346] set_robust_list(0x7fc51c4199e0, 24 [pid 343] futex(0x7fc5248b47b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 342] <... prctl resumed>) = 0 [pid 333] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 331] <... futex resumed>) = ? [pid 346] <... set_robust_list resumed>) = 0 [pid 346] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5 [pid 346] futex(0x7fc5248b47cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 340] <... futex resumed>) = 0 [pid 346] futex(0x7fc5248b47c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 341] <... sendfile resumed>) = 524288 [pid 340] futex(0x7fc5248b47b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 341] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 340] <... futex resumed>) = 0 [pid 343] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 342] setpgid(0, 0 [pid 341] <... futex resumed>) = 0 [pid 340] futex(0x7fc5248b47bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 338] <... writev resumed>) = ? [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 1 [pid 331] +++ exited with 0 +++ [pid 341] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 335] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 334] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000 [pid 335] <... open resumed>) = 4 [pid 334] <... open resumed>) = 4 [pid 335] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 334] futex(0x7fc5248b47ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 335] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 334] futex(0x7fc5248b47a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 343] writev(5, [{iov_base="\x46\xbd\x26\x2b\x9e\x1b\xd9\xd3\x26\x37\x9b\x13\x50\x4d\xd6\xfd\xac\xc6\xcd\x5c\x17\x5a\xf2\xf8\x3d\x3a\x25\xb3\x2e\xa9\x45\xdb\x18\x66\x51\x15\x58\xa3\x92\x3f\xd7\xe7\x7e\xa6\x78\x86\xda\x01\x84\x34\x97\x0f\x86\x4b\x4c\x1a\x9c\x55\xcc\x54\xda\xf1\x12\x18\xab\x55\x1b\xe9\xde\xac\x81\xf1\x65\x69\xe1\xaa\x70\x43\x8e\xc3\x22\xed\x93\xf4\xc0\x4b\xa6\xe8\xb6\xe2\x84\x79\x03\xf8\x58\x76\xe9\x86\x0c\x5f"..., iov_len=110}, {iov_base="\xc1\x3f\x4e\x2a\xf2\x9b\xb0\x30\x8e\x36\x30\x3a\x7b\x03\x07\xff\x53\x78\x57\xa1\x6d\xd7\x4e\x47\xe6\x96\xf9\xc7\xae\xb7\x27\x65\xad\xba\xd6\x1d\x04\xf9\x3e\x4a\x5e\xb4\x13\x71\x31\x71\xdf\xd3\x73\x1b\x74\xf0\xc9\x3a\xd2\x70\x2a\x1c\x9d\x49\x28\x98\x77\x69\xf2\x25\xe4\xdc\x5d\xd8\xe8\xae\x3c\x31\xc0\x8d\x5d\x1e\x0b\x49\x27\xb0\x26\x15\x35\x2b\x6b\x55\x7b\x48\x9e\x35\x2d\x07\x87\x94\x37\x47\x8d\xc8"..., iov_len=132}, {iov_base="\x34\xee\x3a\x2c\x11\x7e\x44\x32\x79\xe6\x7b\xfc\xba\x85\xae\xb6\xdb\x8c\x5b\x21\x8f\xcc\x1d\xca\xc5\x59\xe0\x50\x48\xcd\x76\xcc\xd8\x54\xd7\x37\xc4\x62\x2b\xc8\xc9\xb8\x2f\x51\x77\xf2\x27\x84\x1f\xe1\xf5\x3f\x0f\x8f\x7c\x3a\x80\x03\x7c\xcb\x36\xb4\x17\x6e\xbe\x9a\xe1\x11\xe8\x40\xd9\xaa\xeb\x99\xb6\xf2\x46\xea\xc6\x9a\x85\xa3\xb5\x2a\xff\x52\x0e\x11\x30\xdd\x72\x1b\xa2\x94\xe5\x5b\xcf\x3b\xdb\xba"..., iov_len=107}, {iov_base="\x6f\x90\x8a\xac\xf0\xcd\x92\x31\x69\xf3\x7d\xc7\x3a\x11\xe2\x5b\x26\x19\xc4\xd9\x1a\x04\xf2\x63\xb3\xae\xa7\xf4\xfd\x5f\x01\xe6\x24\x96\xe4\x4b\x83\x1e\xdd\x5d\x30\x8a\x6c\x79\xe7\xc4\x59\x94\x23\x86\x48\x8a\xd9\x3a\xe3\x73\x40\x83\x57\xbd\x80\x46\xdf\x53\x40\x7d\x3d\x76\x32\x45\x45\x98\x58\x72\x63\x6d\x29\xbb\xf1\x30\xa5\xff\x4b\x4a\x57\x85\x84\xc8\x24\x5c\x5a\x12\x7c\xb3\x6c\x64\x5b\xb3\x4c\x74"..., iov_len=176}, {iov_base="\xd3\x25\xd5\x12\x13\x6e\xfa\xc1\x9c\x33\x47\x09\xcf\x13\xf9\xa9\xac\x3d\x2d\x36\x20\x64\x0a\x56\xdf\x58\xa5\x62\xea\x3d\x18\x2f\xfa\x18\xdc\x34\x7b\xdd\x8f\xcb\x18\xbb\x6f\x22\x3b\x6f\xe0\xc6\x40\xbf\x1b\xd8\xa3\x55\xb0\x41\xab\xa3\x3b\x90\x0c\x45\x25\xff\x33\xe2\x0e\x34\x9f\xd2\xba\x0b\x3e\x61\x10\xfe\x0e\x4e\x57\x8b\x0b\x20\x65\xd2\x91\x95\x3e\x5c\x09\x2a\x9f\x20\x6e\x04\xe8\xe8\x2b\x1a\xc7\x1b"..., iov_len=574}], 5 [pid 342] <... setpgid resumed>) = 0 [pid 343] <... writev resumed>) = 1099 [pid 342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 338] +++ exited with 0 +++ [pid 333] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 332] futex(0x7fc5248b47ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 329] +++ exited with 0 +++ [pid 298] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=329, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 298] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 298] ioctl(3, LOOP_CLR_FD) = 0 [pid 298] close(3 [pid 343] futex(0x7fc5248b47bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 342] <... openat resumed>) = 3 [pid 333] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 332] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 298] <... close resumed>) = 0 [pid 298] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556945d0) = 347 [pid 342] write(3, "1000", 4 [pid 333] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 332] futex(0x7fc5248b47a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 347 attached [pid 343] <... futex resumed>) = 1 [ 23.667467][ T301] RBP: ffffc90000e77a10 R08: ffffffff81f27dec R09: ffffed10225b8b22 [ 23.675467][ T301] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000ffff821c [ 23.683805][ T301] R13: ffff88810d0be000 R14: ffff88810993f3a8 R15: ffff88810993f018 [ 23.692800][ T301] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 23.701854][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 23.708454][ T301] CR2: 00007fc52488101d CR3: 0000000111bb1000 CR4: 00000000003506b0 [ 23.716441][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 342] <... write resumed>) = 4 [pid 340] <... futex resumed>) = 0 [pid 340] exit_group(0 [pid 346] <... futex resumed>) = ? [pid 341] <... futex resumed>) = ? [pid 340] <... exit_group resumed>) = ? [pid 346] +++ exited with 0 +++ [pid 341] +++ exited with 0 +++ [pid 342] close(3 [pid 335] <... futex resumed>) = 0 [pid 334] <... futex resumed>) = 0 [pid 333] <... futex resumed>) = 1 [pid 332] <... futex resumed>) = 1 [ 23.724615][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 23.733718][ T301] Kernel panic - not syncing: Fatal exception [ 23.739774][ T301] Kernel Offset: disabled [ 23.743907][ T301] Rebooting in 86400 seconds..