./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3100235171 <...> Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. execve("./syz-executor3100235171", ["./syz-executor3100235171"], 0x7ffee4a21e50 /* 10 vars */) = 0 brk(NULL) = 0x555561035000 brk(0x555561035d40) = 0x555561035d40 arch_prctl(ARCH_SET_FS, 0x5555610353c0) = 0 set_tid_address(0x555561035690) = 5225 set_robust_list(0x5555610356a0, 24) = 0 rseq(0x555561035ce0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3100235171", 4096) = 28 getrandom("\x67\x52\x25\x6e\xdc\x1b\x05\x80", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555561035d40 brk(0x555561056d40) = 0x555561056d40 brk(0x555561057000) = 0x555561057000 mprotect(0x7fb1730a3000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5226 attached , child_tidptr=0x555561035690) = 5226 [pid 5225] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5226] set_robust_list(0x5555610356a0, 24) = 0 ./strace-static-x86_64: Process 5227 attached [pid 5226] mkdir("./syzkaller.kv5kYZ", 0700 [pid 5227] set_robust_list(0x5555610356a0, 24) = 0 [pid 5225] <... clone resumed>, child_tidptr=0x555561035690) = 5227 [pid 5227] mkdir("./syzkaller.UR1rMC", 0700 [pid 5225] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5228 attached [pid 5227] <... mkdir resumed>) = 0 [pid 5226] <... mkdir resumed>) = 0 [pid 5225] <... clone resumed>, child_tidptr=0x555561035690) = 5228 [pid 5228] set_robust_list(0x5555610356a0, 24 [pid 5226] chmod("./syzkaller.kv5kYZ", 0777 [pid 5225] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5228] <... set_robust_list resumed>) = 0 [pid 5227] chmod("./syzkaller.UR1rMC", 0777 [pid 5228] mkdir("./syzkaller.dXcExo", 0700 [pid 5226] <... chmod resumed>) = 0 ./strace-static-x86_64: Process 5229 attached [pid 5225] <... clone resumed>, child_tidptr=0x555561035690) = 5229 [pid 5227] <... chmod resumed>) = 0 [pid 5226] chdir("./syzkaller.kv5kYZ" [pid 5227] chdir("./syzkaller.UR1rMC" [pid 5226] <... chdir resumed>) = 0 [pid 5227] <... chdir resumed>) = 0 [pid 5229] set_robust_list(0x5555610356a0, 24 [pid 5227] mkdir("./0", 0777 [pid 5226] mkdir("./0", 0777 [pid 5225] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5229] <... set_robust_list resumed>) = 0 [pid 5229] mkdir("./syzkaller.GK65gr", 0700 [pid 5227] <... mkdir resumed>) = 0 [pid 5226] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 5230 attached [pid 5227] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 5226] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5229] <... mkdir resumed>) = 0 [pid 5227] <... openat resumed>) = 3 [pid 5226] <... openat resumed>) = 3 [pid 5230] set_robust_list(0x5555610356a0, 24 [pid 5225] <... clone resumed>, child_tidptr=0x555561035690) = 5230 [pid 5230] <... set_robust_list resumed>) = 0 [pid 5229] chmod("./syzkaller.GK65gr", 0777 [pid 5228] <... mkdir resumed>) = 0 [pid 5227] ioctl(3, LOOP_CLR_FD [pid 5226] ioctl(3, LOOP_CLR_FD [pid 5230] mkdir("./syzkaller.kLHgp1", 0700 [pid 5228] chmod("./syzkaller.dXcExo", 0777 [pid 5226] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5226] close(3 [pid 5229] <... chmod resumed>) = 0 [pid 5228] <... chmod resumed>) = 0 [pid 5226] <... close resumed>) = 0 [pid 5230] <... mkdir resumed>) = 0 [pid 5229] chdir("./syzkaller.GK65gr" [pid 5228] chdir("./syzkaller.dXcExo" [pid 5227] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5226] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5229] <... chdir resumed>) = 0 [pid 5228] <... chdir resumed>) = 0 [pid 5229] mkdir("./0", 0777 [pid 5228] mkdir("./0", 0777 [pid 5227] close(3./strace-static-x86_64: Process 5231 attached [pid 5230] chmod("./syzkaller.kLHgp1", 0777 [pid 5229] <... mkdir resumed>) = 0 [pid 5228] <... mkdir resumed>) = 0 [pid 5227] <... close resumed>) = 0 [pid 5230] <... chmod resumed>) = 0 [pid 5227] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5232 attached [pid 5231] set_robust_list(0x5555610356a0, 24) = 0 [pid 5231] chdir("./0" [pid 5230] chdir("./syzkaller.kLHgp1" [pid 5229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5231] <... chdir resumed>) = 0 [pid 5232] set_robust_list(0x5555610356a0, 24 [pid 5231] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] <... set_robust_list resumed>) = 0 [pid 5231] <... prctl resumed>) = 0 [pid 5232] chdir("./0" [pid 5231] setpgid(0, 0 [pid 5230] <... chdir resumed>) = 0 [pid 5229] <... openat resumed>) = 3 [pid 5228] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5231] <... setpgid resumed>) = 0 [pid 5230] mkdir("./0", 0777 [pid 5228] <... openat resumed>) = 3 [pid 5227] <... clone resumed>, child_tidptr=0x555561035690) = 5232 [pid 5226] <... clone resumed>, child_tidptr=0x555561035690) = 5231 [pid 5230] <... mkdir resumed>) = 0 [pid 5229] ioctl(3, LOOP_CLR_FD [pid 5228] ioctl(3, LOOP_CLR_FD [pid 5229] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5228] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5229] close(3) = 0 [pid 5228] close(3) = 0 [pid 5230] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5229] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5228] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached [pid 5232] <... chdir resumed>) = 0 [pid 5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5232] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5233 attached [pid 5235] set_robust_list(0x5555610356a0, 24 [pid 5232] <... prctl resumed>) = 0 [pid 5231] <... openat resumed>) = 3 [pid 5230] <... openat resumed>) = 3 [pid 5232] setpgid(0, 0 [pid 5231] write(3, "1000", 4 [pid 5230] ioctl(3, LOOP_CLR_FD [pid 5233] set_robust_list(0x5555610356a0, 24 [pid 5232] <... setpgid resumed>) = 0 [pid 5231] <... write resumed>) = 4 [pid 5233] <... set_robust_list resumed>) = 0 [pid 5231] close(3 [pid 5235] <... set_robust_list resumed>) = 0 [pid 5233] chdir("./0" [pid 5232] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5231] <... close resumed>) = 0 [pid 5230] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 5229] <... clone resumed>, child_tidptr=0x555561035690) = 5233 [pid 5235] chdir("./0" [pid 5233] <... chdir resumed>) = 0 [pid 5232] <... openat resumed>) = 3 [pid 5231] symlink("/dev/binderfs", "./binderfs" [pid 5230] close(3 [pid 5235] <... chdir resumed>) = 0 [pid 5233] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] write(3, "1000", 4 [pid 5230] <... close resumed>) = 0 [pid 5228] <... clone resumed>, child_tidptr=0x555561035690) = 5235 [pid 5235] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5233] <... prctl resumed>) = 0 [pid 5232] <... write resumed>) = 4 [pid 5231] <... symlink resumed>) = 0 [pid 5230] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5235] <... prctl resumed>) = 0 [pid 5233] setpgid(0, 0 [pid 5232] close(3 [pid 5231] write(1, "executing program\n", 18 [pid 5235] setpgid(0, 0) = 0 [pid 5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5230] <... clone resumed>, child_tidptr=0x555561035690) = 5236 [pid 5235] write(3, "1000", 4) = 4 [pid 5235] close(3) = 0 [pid 5235] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5235] write(1, "executing program\n", 18./strace-static-x86_64: Process 5236 attached [pid 5233] <... setpgid resumed>) = 0 [pid 5232] <... close resumed>) = 0 [pid 5231] <... write resumed>) = 18 [pid 5235] <... write resumed>) = 18 [pid 5232] symlink("/dev/binderfs", "./binderfs"executing program [pid 5231] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5235] <... futex resumed>) = 0 [pid 5233] <... openat resumed>) = 3 [pid 5231] <... futex resumed>) = 0 [pid 5235] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, NULL, 8) = 0 [pid 5232] <... symlink resumed>) = 0 [pid 5231] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, [pid 5233] write(3, "1000", 4 [pid 5235] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5231] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5236] set_robust_list(0x5555610356a0, 24 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 executing program [pid 5233] <... write resumed>) = 4 [pid 5232] write(1, "executing program\n", 18 [pid 5231] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5236] <... set_robust_list resumed>) = 0 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5233] close(3 [pid 5232] <... write resumed>) = 18 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5235] <... mmap resumed>) = 0x7fb172fb2000 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5233] <... close resumed>) = 0 [pid 5235] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE [pid 5231] <... mmap resumed>) = 0x7fb172fb2000 [pid 5236] chdir("./0" [pid 5233] symlink("/dev/binderfs", "./binderfs" [pid 5232] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE [pid 5236] <... chdir resumed>) = 0 [pid 5235] <... mprotect resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5233] <... symlink resumed>) = 0 [pid 5231] <... mprotect resumed>) = 0 [pid 5236] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5232] <... futex resumed>) = 0 [pid 5235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0} [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5236] <... prctl resumed>) = 0 [pid 5232] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 ./strace-static-x86_64: Process 5237 attached [pid 5237] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053 [pid 5236] setpgid(0, 0 [pid 5235] <... clone3 resumed> => {parent_tid=[5237]}, 88) = 5237 [pid 5232] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0} [pid 5237] <... rseq resumed>) = 0 [pid 5236] <... setpgid resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5237] set_robust_list(0x7fb172fd29a0, 24) = 0 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5238 attached [pid 5237] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053 [pid 5237] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5236] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 5235] <... futex resumed>) = 0 [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5231] <... clone3 resumed> => {parent_tid=[5238]}, 88) = 5238 [pid 5238] <... rseq resumed>) = 0 [pid 5237] memfd_create("syzkaller", 0 [pid 5235] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] <... mmap resumed>) = 0x7fb172fb2000 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE [pid 5238] set_robust_list(0x7fb172fd29a0, 24 [pid 5237] <... memfd_create resumed>) = 3 [pid 5236] <... openat resumed>) = 3 [pid 5232] <... mprotect resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5238] <... set_robust_list resumed>) = 0 [pid 5238] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5237] <... mmap resumed>) = 0x7fb16aa00000 executing program [pid 5236] write(3, "1000", 4 [pid 5233] write(1, "executing program\n", 18 [pid 5232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] memfd_create("syzkaller", 0) = 3 [pid 5231] <... futex resumed>) = 0 [pid 5231] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0} [pid 5233] <... write resumed>) = 18 [pid 5233] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... write resumed>) = 4 [pid 5236] close(3) = 0 [pid 5233] <... futex resumed>) = 0 [pid 5233] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, [pid 5236] symlink("/dev/binderfs", "./binderfs" [pid 5233] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5236] <... symlink resumed>) = 0 [pid 5232] <... clone3 resumed> => {parent_tid=[5239]}, 88) = 5239 [pid 5233] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5232] rt_sigprocmask(SIG_SETMASK, [], [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172fb2000 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE [pid 5232] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5239 attached [pid 5233] <... mprotect resumed>) = 0 [pid 5232] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}executing program [pid 5236] write(1, "executing program\n", 18 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5236] <... write resumed>) = 18 [pid 5233] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5236] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0}./strace-static-x86_64: Process 5240 attached [pid 5239] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053 [pid 5238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5236] <... futex resumed>) = 0 [pid 5240] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053 [pid 5238] <... mmap resumed>) = 0x7fb16aa00000 [pid 5240] <... rseq resumed>) = 0 [pid 5239] <... rseq resumed>) = 0 [pid 5236] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, [pid 5233] <... clone3 resumed> => {parent_tid=[5240]}, 88) = 5240 [pid 5239] set_robust_list(0x7fb172fd29a0, 24 [pid 5236] <... rt_sigaction resumed>NULL, 8) = 0 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], [pid 5239] <... set_robust_list resumed>) = 0 [pid 5236] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], [pid 5233] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5239] rt_sigprocmask(SIG_SETMASK, [], [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5233] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5240] set_robust_list(0x7fb172fd29a0, 24 [pid 5239] memfd_create("syzkaller", 0 [pid 5233] <... futex resumed>) = 0 [pid 5240] <... set_robust_list resumed>) = 0 [pid 5239] <... memfd_create resumed>) = 3 [pid 5236] <... mmap resumed>) = 0x7fb172fb2000 [pid 5233] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5240] rt_sigprocmask(SIG_SETMASK, [], [pid 5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 5236] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE [pid 5240] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5239] <... mmap resumed>) = 0x7fb16aa00000 [pid 5236] <... mprotect resumed>) = 0 [pid 5240] memfd_create("syzkaller", 0) = 3 [pid 5240] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb16aa00000 [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0} => {parent_tid=[5241]}, 88) = 5241 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5236] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5241 attached [pid 5241] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053) = 0 [pid 5241] set_robust_list(0x7fb172fd29a0, 24) = 0 [pid 5241] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5241] memfd_create("syzkaller", 0) = 3 [pid 5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb16aa00000 [pid 5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5240] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 [pid 5239] <... write resumed>) = 16777216 [pid 5239] munmap(0x7fb16aa00000, 138412032) = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5237] <... write resumed>) = 16777216 [pid 5239] close(3 [pid 5237] munmap(0x7fb16aa00000, 138412032 [pid 5239] <... close resumed>) = 0 [pid 5239] close(4 [pid 5237] <... munmap resumed>) = 0 [pid 5239] <... close resumed>) = 0 [pid 5239] mkdir("./bus", 0777 [pid 5237] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 5239] <... mkdir resumed>) = 0 [pid 5239] mount("/dev/loop1", "./bus", "btrfs", MS_NOEXEC, "autodefrag,autodefrag,ref_verify,acl,clear_cache,discard,noenospc_debug,barrier,nodatacow," [pid 5237] <... openat resumed>) = 4 [pid 5237] ioctl(4, LOOP_SET_FD, 3) = 0 syzkaller login: [ 56.053283][ T5239] loop1: detected capacity change from 0 to 32768 [ 56.089771][ T5237] loop2: detected capacity change from 0 to 32768 [pid 5237] close(3) = 0 [pid 5241] <... write resumed>) = 16777216 [pid 5240] <... write resumed>) = 16777216 [pid 5237] close(4) = 0 [pid 5237] mkdir("./bus", 0777) = 0 [pid 5237] mount("/dev/loop2", "./bus", "btrfs", MS_NOEXEC, "autodefrag,autodefrag,ref_verify,acl,clear_cache,discard,noenospc_debug,barrier,nodatacow," [pid 5240] munmap(0x7fb16aa00000, 138412032 [pid 5241] munmap(0x7fb16aa00000, 138412032 [pid 5238] <... write resumed>) = 16777216 [ 56.096815][ T5239] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor310 (5239) [ 56.141673][ T5237] BTRFS: device /dev/loop2 (7:2) using temp-fsid 234b8887-266c-4d31-8114-10fd79217bab [pid 5238] munmap(0x7fb16aa00000, 138412032 [pid 5241] <... munmap resumed>) = 0 [pid 5241] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 5241] ioctl(4, LOOP_SET_FD, 3 [pid 5240] <... munmap resumed>) = 0 [pid 5238] <... munmap resumed>) = 0 [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5238] ioctl(4, LOOP_SET_FD, 3 [pid 5241] <... ioctl resumed>) = 0 [pid 5241] close(3) = 0 [pid 5241] close(4) = 0 [pid 5241] mkdir("./bus", 0777) = 0 [pid 5241] mount("/dev/loop4", "./bus", "btrfs", MS_NOEXEC, "autodefrag,autodefrag,ref_verify,acl,clear_cache,discard,noenospc_debug,barrier,nodatacow," [pid 5238] <... ioctl resumed>) = 0 [ 56.158199][ T5239] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.170231][ T5241] loop4: detected capacity change from 0 to 32768 [ 56.172022][ T5237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor310 (5237) [ 56.184266][ T5238] loop0: detected capacity change from 0 to 32768 [ 56.190753][ T5239] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [pid 5240] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 5238] close(3 [pid 5240] ioctl(4, LOOP_SET_FD, 3 [pid 5238] <... close resumed>) = 0 [pid 5238] close(4) = 0 [pid 5238] mkdir("./bus", 0777) = 0 [ 56.217775][ T5241] BTRFS: device /dev/loop4 (7:4) using temp-fsid c604a643-e2bc-4723-b779-82cc4155b3b9 [ 56.229934][ T5237] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.240550][ T5239] BTRFS info (device loop1): using free-space-tree [ 56.250684][ T5241] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor310 (5241) [pid 5238] mount("/dev/loop0", "./bus", "btrfs", MS_NOEXEC, "autodefrag,autodefrag,ref_verify,acl,clear_cache,discard,noenospc_debug,barrier,nodatacow," [pid 5240] <... ioctl resumed>) = 0 [ 56.258862][ T5240] loop3: detected capacity change from 0 to 32768 [ 56.283194][ T5237] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 56.293248][ T5237] BTRFS info (device loop2): using free-space-tree [pid 5240] close(3) = 0 [pid 5240] close(4) = 0 [pid 5240] mkdir("./bus", 0777) = 0 [ 56.310236][ T5238] BTRFS: device /dev/loop0 (7:0) using temp-fsid 4c81ece9-9624-40af-9d46-1e60987bbfaf [ 56.322960][ T5241] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.334613][ T5241] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 56.344323][ T5241] BTRFS info (device loop4): using free-space-tree [ 56.352221][ T5238] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor310 (5238) [ 56.398170][ T5240] BTRFS: device /dev/loop3 (7:3) using temp-fsid 767b9d26-0362-4b6e-bda8-efaebcb18df9 [ 56.440425][ T5238] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.458670][ T5240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor310 (5240) [ 56.486403][ T5238] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 56.518385][ T5238] BTRFS info (device loop0): using free-space-tree [ 56.548788][ T5240] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 56.572071][ T5240] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 56.594528][ T5239] BTRFS info (device loop1): rebuilding free space tree [ 56.617742][ T5237] BTRFS info (device loop2): rebuilding free space tree [ 56.625560][ T5240] BTRFS info (device loop3): using free-space-tree [ 56.654205][ T5241] BTRFS info (device loop4): rebuilding free space tree [pid 5240] mount("/dev/loop3", "./bus", "btrfs", MS_NOEXEC, "autodefrag,autodefrag,ref_verify,acl,clear_cache,discard,noenospc_debug,barrier,nodatacow," [pid 5237] <... mount resumed>) = 0 [pid 5237] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] <... mount resumed>) = 0 [pid 5239] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5239] chdir("./bus") = 0 [pid 5239] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 5239] ioctl(4, LOOP_CLR_FD) = 0 [ 56.692727][ T5238] BTRFS info (device loop0): rebuilding free space tree [pid 5239] close(4 [pid 5241] <... mount resumed>) = 0 [pid 5239] <... close resumed>) = 0 [pid 5237] chdir("./bus" [pid 5239] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5237] <... chdir resumed>) = 0 [pid 5237] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 5241] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5239] <... futex resumed>) = 1 [pid 5237] ioctl(4, LOOP_CLR_FD [pid 5232] <... futex resumed>) = 0 [pid 5241] <... openat resumed>) = 3 [pid 5239] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5237] <... ioctl resumed>) = 0 [pid 5232] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] chdir("./bus" [pid 5237] close(4 [pid 5232] <... futex resumed>) = 0 [pid 5241] <... chdir resumed>) = 0 [pid 5237] <... close resumed>) = 0 [pid 5232] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 5237] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] <... openat resumed>) = 4 [pid 5237] <... futex resumed>) = 1 [pid 5237] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5239] <... open resumed>) = 4 [pid 5241] ioctl(4, LOOP_CLR_FD [pid 5235] <... futex resumed>) = 0 [pid 5241] <... ioctl resumed>) = 0 [pid 5235] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] close(4 [pid 5237] <... futex resumed>) = 0 [pid 5235] <... futex resumed>) = 1 [pid 5241] <... close resumed>) = 0 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5235] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5241] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5237] <... open resumed>) = 4 [pid 5239] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... mount resumed>) = 0 [pid 5237] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = 0 [pid 5238] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5237] <... futex resumed>) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5239] <... futex resumed>) = 1 [pid 5238] <... openat resumed>) = 3 [pid 5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5236] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] chdir("./bus" [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5237] <... open resumed>) = 5 [pid 5238] <... chdir resumed>) = 0 [pid 5237] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 5237] <... futex resumed>) = 1 [pid 5235] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5239] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5238] <... openat resumed>) = 4 [pid 5237] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294966868 [pid 5236] <... futex resumed>) = 1 [pid 5235] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5238] ioctl(4, LOOP_CLR_FD [pid 5235] <... futex resumed>) = 0 [pid 5241] <... open resumed>) = 4 [pid 5238] <... ioctl resumed>) = 0 [pid 5236] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = 0 [ 56.785031][ T29] audit: type=1800 audit(1729224705.921:2): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor310" name="bus" dev="loop1" ino=263 res=0 errno=0 [pid 5232] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5239] <... futex resumed>) = 0 [pid 5232] <... futex resumed>) = 1 [pid 5239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5232] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5239] <... open resumed>) = 5 [pid 5239] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5232] <... futex resumed>) = 0 [pid 5239] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294966868 [pid 5232] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5232] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5241] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] close(4 [pid 5241] <... futex resumed>) = 1 [pid 5238] <... close resumed>) = 0 [pid 5236] <... futex resumed>) = 0 [ 56.831761][ T29] audit: type=1800 audit(1729224705.941:3): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor310" name="bus" dev="loop2" ino=263 res=0 errno=0 [pid 5238] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5238] <... futex resumed>) = 1 [pid 5236] <... futex resumed>) = 0 [pid 5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5238] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5236] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] <... futex resumed>) = 0 [pid 5241] <... open resumed>) = 5 [pid 5235] futex(0x7fb1730a96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5236] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5241] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5235] <... mmap resumed>) = 0x7fb172f91000 [pid 5235] mprotect(0x7fb172f92000, 131072, PROT_READ|PROT_WRITE [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5236] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... mprotect resumed>) = 0 [pid 5232] futex(0x7fb1730a96dc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... futex resumed>) = 0 [pid 5241] <... futex resumed>) = 0 [pid 5238] <... open resumed>) = 4 [pid 5236] <... futex resumed>) = 1 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5232] <... futex resumed>) = 0 [pid 5231] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fb1990, parent_tid=0x7fb172fb1990, exit_signal=0, stack=0x7fb172f91000, stack_size=0x20300, tls=0x7fb172fb16c0} [pid 5236] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f91000 [pid 5232] mprotect(0x7fb172f92000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 5327 attached [pid 5241] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294966868 [pid 5238] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... mprotect resumed>) = 0 [pid 5327] rseq(0x7fb172fb1fe0, 0x20, 0, 0x53053053 [pid 5238] <... futex resumed>) = 1 [pid 5235] <... clone3 resumed> => {parent_tid=[5327]}, 88) = 5327 [pid 5232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] <... futex resumed>) = 0 [ 56.878744][ T5240] BTRFS info (device loop3): rebuilding free space tree [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5327] <... rseq resumed>) = 0 [pid 5238] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] set_robust_list(0x7fb172fb19a0, 24 [pid 5235] futex(0x7fb1730a96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5327] <... set_robust_list resumed>) = 0 [pid 5235] <... futex resumed>) = 0 [pid 5235] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5327] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5238] <... open resumed>) = 5 [pid 5232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fb1990, parent_tid=0x7fb172fb1990, exit_signal=0, stack=0x7fb172f91000, stack_size=0x20300, tls=0x7fb172fb16c0} [pid 5231] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5328 attached [pid 5327] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5238] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] rseq(0x7fb172fb1fe0, 0x20, 0, 0x53053053 [pid 5238] <... futex resumed>) = 0 [pid 5232] <... clone3 resumed> => {parent_tid=[5328]}, 88) = 5328 [pid 5231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5328] <... rseq resumed>) = 0 [pid 5238] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294966868 [pid 5232] rt_sigprocmask(SIG_SETMASK, [], [pid 5231] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5328] set_robust_list(0x7fb172fb19a0, 24 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5328] <... set_robust_list resumed>) = 0 [pid 5232] futex(0x7fb1730a96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] <... futex resumed>) = 0 [pid 5328] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5328] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5236] futex(0x7fb1730a96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f91000 [pid 5236] mprotect(0x7fb172f92000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fb1990, parent_tid=0x7fb172fb1990, exit_signal=0, stack=0x7fb172f91000, stack_size=0x20300, tls=0x7fb172fb16c0}./strace-static-x86_64: Process 5330 attached => {parent_tid=[5330]}, 88) = 5330 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5236] futex(0x7fb1730a96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5330] rseq(0x7fb172fb1fe0, 0x20, 0, 0x53053053 [pid 5236] <... futex resumed>) = 0 [pid 5330] <... rseq resumed>) = 0 [pid 5236] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5330] set_robust_list(0x7fb172fb19a0, 24) = 0 [pid 5330] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [ 56.947228][ T29] audit: type=1800 audit(1729224705.951:4): pid=5241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor310" name="bus" dev="loop4" ino=263 res=0 errno=0 [pid 5330] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7fb1730a96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f91000 [pid 5231] mprotect(0x7fb172f92000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5232] futex(0x7fb1730a96ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5232] <... futex resumed>) = 0 [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fb1990, parent_tid=0x7fb172fb1990, exit_signal=0, stack=0x7fb172f91000, stack_size=0x20300, tls=0x7fb172fb16c0} [pid 5232] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f70000 [pid 5231] <... clone3 resumed> => {parent_tid=[5332]}, 88) = 5332 [pid 5232] mprotect(0x7fb172f71000, 131072, PROT_READ|PROT_WRITE [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5232] <... mprotect resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5232] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5231] futex(0x7fb1730a96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5232] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5232] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172f90990, parent_tid=0x7fb172f90990, exit_signal=0, stack=0x7fb172f70000, stack_size=0x20300, tls=0x7fb172f906c0} [pid 5231] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 5332 attached [pid 5232] <... clone3 resumed> => {parent_tid=[5333]}, 88) = 5333 ./strace-static-x86_64: Process 5333 attached [pid 5232] rt_sigprocmask(SIG_SETMASK, [], [pid 5332] rseq(0x7fb172fb1fe0, 0x20, 0, 0x53053053 [pid 5232] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] <... rseq resumed>) = 0 [pid 5232] futex(0x7fb1730a96e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5332] set_robust_list(0x7fb172fb19a0, 24 [pid 5232] <... futex resumed>) = 0 [pid 5332] <... set_robust_list resumed>) = 0 [pid 5232] futex(0x7fb1730a96ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5333] rseq(0x7fb172f90fe0, 0x20, 0, 0x53053053 [pid 5332] rt_sigprocmask(SIG_SETMASK, [], [pid 5333] <... rseq resumed>) = 0 [pid 5332] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5332] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5333] set_robust_list(0x7fb172f909a0, 24) = 0 [pid 5333] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5333] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x61\x63\x6c"..., iov_len=12288}], 1, 30720, RWF_HIPRI|RWF_DSYNC [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5235] futex(0x7fb1730a96ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5236] futex(0x7fb1730a96ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 5236] <... futex resumed>) = 0 [pid 5236] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f70000 [pid 5236] mprotect(0x7fb172f71000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5236] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5236] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172f90990, parent_tid=0x7fb172f90990, exit_signal=0, stack=0x7fb172f70000, stack_size=0x20300, tls=0x7fb172f906c0} => {parent_tid=[5334]}, 88) = 5334 [pid 5235] <... mmap resumed>) = 0x7fb172f70000 ./strace-static-x86_64: Process 5334 attached [pid 5240] <... mount resumed>) = 0 [pid 5236] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] mprotect(0x7fb172f71000, 131072, PROT_READ|PROT_WRITE [pid 5236] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5236] futex(0x7fb1730a96e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5235] <... mprotect resumed>) = 0 [pid 5240] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY [pid 5236] <... futex resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5240] <... openat resumed>) = 3 [pid 5236] futex(0x7fb1730a96ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5240] chdir("./bus" [pid 5334] rseq(0x7fb172f90fe0, 0x20, 0, 0x53053053 [pid 5240] <... chdir resumed>) = 0 [pid 5334] <... rseq resumed>) = 0 [pid 5240] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5334] set_robust_list(0x7fb172f909a0, 24 [pid 5240] <... openat resumed>) = 4 [pid 5334] <... set_robust_list resumed>) = 0 [pid 5240] ioctl(4, LOOP_CLR_FD [pid 5334] rt_sigprocmask(SIG_SETMASK, [], [pid 5240] <... ioctl resumed>) = 0 [pid 5334] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5240] close(4 [pid 5334] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x61\x63\x6c"..., iov_len=12288}], 1, 30720, RWF_HIPRI|RWF_DSYNC [pid 5240] <... close resumed>) = 0 [pid 5235] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5235] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172f90990, parent_tid=0x7fb172f90990, exit_signal=0, stack=0x7fb172f70000, stack_size=0x20300, tls=0x7fb172f906c0} [pid 5240] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 ./strace-static-x86_64: Process 5335 attached [pid 5233] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] rseq(0x7fb172f90fe0, 0x20, 0, 0x53053053 [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_DIRECT|O_NOFOLLOW|O_NOATIME, 000 [pid 5235] <... clone3 resumed> => {parent_tid=[5335]}, 88) = 5335 [pid 5233] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5335] <... rseq resumed>) = 0 [pid 5235] rt_sigprocmask(SIG_SETMASK, [], [pid 5335] set_robust_list(0x7fb172f909a0, 24 [pid 5235] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5335] <... set_robust_list resumed>) = 0 [pid 5235] futex(0x7fb1730a96e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5240] <... open resumed>) = 4 [pid 5233] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5232] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] futex(0x7fb1730a96ec, FUTEX_WAKE_PRIVATE, 1000000 [pid 5335] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x61\x63\x6c"..., iov_len=12288}], 1, 30720, RWF_HIPRI|RWF_DSYNC [pid 5235] <... futex resumed>) = 0 [pid 5231] <... futex resumed>) = 0 [pid 5235] futex(0x7fb1730a96ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f70000 [pid 5240] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000 [pid 5236] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] mprotect(0x7fb172f71000, 131072, PROT_READ|PROT_WRITE [pid 5240] <... futex resumed>) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5231] <... mprotect resumed>) = 0 [pid 5233] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] rt_sigprocmask(SIG_BLOCK, ~[], [pid 5240] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000 [pid 5233] <... futex resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>[], 8) = 0 [pid 5240] <... open resumed>) = 5 [pid 5233] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172f90990, parent_tid=0x7fb172f90990, exit_signal=0, stack=0x7fb172f70000, stack_size=0x20300, tls=0x7fb172f906c0} [pid 5240] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5233] <... futex resumed>) = 0 [pid 5231] <... clone3 resumed> => {parent_tid=[5337]}, 88) = 5337 [ 57.086921][ T29] audit: type=1800 audit(1729224706.051:5): pid=5238 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor310" name="bus" dev="loop0" ino=263 res=0 errno=0 [pid 5240] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4294966868 [pid 5233] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5231] rt_sigprocmask(SIG_SETMASK, [], [pid 5235] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5233] <... futex resumed>) = 0 [pid 5231] <... rt_sigprocmask resumed>NULL, 8) = 0 ./strace-static-x86_64: Process 5337 attached [pid 5233] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5231] futex(0x7fb1730a96e8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5337] rseq(0x7fb172f90fe0, 0x20, 0, 0x53053053 [pid 5231] <... futex resumed>) = 0 [pid 5337] <... rseq resumed>) = 0 [pid 5231] futex(0x7fb1730a96ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5337] set_robust_list(0x7fb172f909a0, 24) = 0 [pid 5337] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5337] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x61\x63\x6c"..., iov_len=12288}], 1, 30720, RWF_HIPRI|RWF_DSYNC [pid 5233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5231] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5233] futex(0x7fb1730a96dc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f91000 [pid 5233] mprotect(0x7fb172f92000, 131072, PROT_READ|PROT_WRITE) = 0 [ 57.191430][ T29] audit: type=1800 audit(1729224706.211:6): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor310" name="bus" dev="loop3" ino=263 res=0 errno=0 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fb1990, parent_tid=0x7fb172fb1990, exit_signal=0, stack=0x7fb172f91000, stack_size=0x20300, tls=0x7fb172fb16c0} => {parent_tid=[5338]}, 88) = 5338 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], ./strace-static-x86_64: Process 5338 attached NULL, 8) = 0 [pid 5338] rseq(0x7fb172fb1fe0, 0x20, 0, 0x53053053 [pid 5233] futex(0x7fb1730a96d8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5338] <... rseq resumed>) = 0 [pid 5233] <... futex resumed>) = 0 [pid 5338] set_robust_list(0x7fb172fb19a0, 24 [pid 5233] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5338] <... set_robust_list resumed>) = 0 [pid 5338] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5338] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000 [pid 5233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5233] futex(0x7fb1730a96dc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 5233] futex(0x7fb1730a96ec, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172f70000 [pid 5233] mprotect(0x7fb172f71000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5233] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5233] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172f90990, parent_tid=0x7fb172f90990, exit_signal=0, stack=0x7fb172f70000, stack_size=0x20300, tls=0x7fb172f906c0} => {parent_tid=[5340]}, 88) = 5340 [pid 5233] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ./strace-static-x86_64: Process 5340 attached [pid 5233] futex(0x7fb1730a96e8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5233] futex(0x7fb1730a96ec, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5340] rseq(0x7fb172f90fe0, 0x20, 0, 0x53053053) = 0 [pid 5340] set_robust_list(0x7fb172f909a0, 24) = 0 [pid 5340] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5340] pwritev2(4, [{iov_base="\x85\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x61\x75\x74\x6f\x64\x65\x66\x72\x61\x67\x2c\x72\x65\x66\x5f\x76\x65\x72\x69\x66\x79\x2c\x61\x63\x6c"..., iov_len=12288}], 1, 30720, RWF_HIPRI|RWF_DSYNC [pid 5233] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 5232] exit_group(0) = ? [pid 5236] exit_group(0) = ? [pid 5231] exit_group(0) = ? [pid 5237] <... write resumed>) = 8388608 [pid 5237] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5237] futex(0x7fb1730a96c8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5233] exit_group(0) = ? [pid 5235] exit_group(0) = ? [pid 5237] <... futex resumed>) = ? [pid 5237] +++ exited with 0 +++ [pid 5338] <... open resumed>) = ? [pid 5327] <... open resumed>) = ? [pid 5240] <... write resumed>) = ? [pid 5327] +++ exited with 0 +++ [pid 5240] +++ exited with 0 +++ [pid 5338] +++ exited with 0 +++ [pid 5335] <... pwritev2 resumed>) = ? [pid 5335] +++ exited with 0 +++ [pid 5235] +++ exited with 0 +++ [pid 5228] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=62 /* 0.62 s */} --- [pid 5228] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 5228] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5228] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5228] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5228] getdents64(3, 0x555561036730 /* 4 entries */, 32768) = 104 [pid 5228] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5228] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5228] unlink("./0/binderfs") = 0 [pid 5228] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5328] <... open resumed>) = ? [pid 5340] <... pwritev2 resumed>) = ? [pid 5333] <... pwritev2 resumed>) = ? [pid 5333] +++ exited with 0 +++ [pid 5340] +++ exited with 0 +++ [pid 5233] +++ exited with 0 +++ [pid 5229] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=68 /* 0.68 s */} --- [pid 5229] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5229] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5229] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5229] getdents64(3, 0x555561036730 /* 4 entries */, 32768) = 104 [pid 5229] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5229] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5229] unlink("./0/binderfs") = 0 [pid 5229] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5328] +++ exited with 0 +++ [ 58.536801][ T5229] BTRFS info (device loop3): last unmount of filesystem 767b9d26-0362-4b6e-bda8-efaebcb18df9 [pid 5239] <... write resumed>) = ? [pid 5239] +++ exited with 0 +++ [pid 5232] +++ exited with 0 +++ [pid 5227] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5232, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=61 /* 0.61 s */} --- [pid 5227] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.658275][ T5228] BTRFS info (device loop2): last unmount of filesystem 234b8887-266c-4d31-8114-10fd79217bab [ 58.691228][ T5337] assertion failed: block_start != EXTENT_MAP_HOLE, in fs/btrfs/extent_io.c:1303 [pid 5227] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5227] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5227] getdents64(3, 0x555561036730 /* 4 entries */, 32768) = 104 [pid 5227] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5227] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5227] unlink("./0/binderfs") = 0 [ 58.722221][ T5337] ------------[ cut here ]------------ [ 58.728118][ T5337] kernel BUG at fs/btrfs/extent_io.c:1303! [pid 5334] <... pwritev2 resumed>) = ? [pid 5330] <... open resumed>) = ? [pid 5229] <... umount2 resumed>) = 0 [pid 5227] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5334] +++ exited with 0 +++ [pid 5330] +++ exited with 0 +++ [pid 5229] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 58.764520][ T5337] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 58.771515][ T5337] CPU: 0 UID: 0 PID: 5337 Comm: syz-executor310 Not tainted 6.12.0-rc3-syzkaller-00183-g6efbea77b390 #0 [ 58.782634][ T5337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 58.792707][ T5337] RIP: 0010:extent_writepage_io+0xca2/0xd20 [ 58.798647][ T5337] Code: fe 07 90 0f 0b e8 1e 28 d9 fd 48 c7 c7 80 0d 4d 8c 48 c7 c6 60 1b 4d 8c 48 c7 c2 20 0d 4d 8c b9 17 05 00 00 e8 5f f7 fe 07 90 <0f> 0b e8 f7 27 d9 fd eb 5f e8 f0 27 d9 fd 48 c7 c7 80 0d 4d 8c 48 [ 58.818267][ T5337] RSP: 0018:ffffc90003d5eec0 EFLAGS: 00010246 [ 58.824347][ T5337] RAX: 000000000000004e RBX: 0000000000001000 RCX: 9329e60525732e00 [ 58.832306][ T5337] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 58.840270][ T5337] RBP: ffffc90003d5f030 R08: ffffffff8174af9c R09: 1ffff920007abd74 [ 58.848230][ T5337] R10: dffffc0000000000 R11: fffff520007abd75 R12: fffffffffffffffd [ 58.856193][ T5337] R13: 0000000000007000 R14: dffffc0000000000 R15: ffffea0001cc8f00 [ 58.864153][ T5337] FS: 00007fb172f906c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 58.873074][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.879647][ T5337] CR2: 000055963fa790e0 CR3: 00000000745b0000 CR4: 00000000003526f0 [ 58.887612][ T5337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.895581][ T5337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.903551][ T5337] Call Trace: [ 58.906822][ T5337] [ 58.909745][ T5337] ? __die_body+0x5f/0xb0 [ 58.914066][ T5337] ? die+0x9e/0xc0 [ 58.917778][ T5337] ? do_trap+0x15a/0x3a0 [ 58.922018][ T5337] ? extent_writepage_io+0xca2/0xd20 [ 58.927296][ T5337] ? do_error_trap+0x1dc/0x2c0 [ 58.932060][ T5337] ? extent_writepage_io+0xca2/0xd20 [ 58.937341][ T5337] ? __pfx_do_error_trap+0x10/0x10 [ 58.942450][ T5337] ? report_bug+0x3e8/0x500 [ 58.946963][ T5337] ? handle_invalid_op+0x34/0x40 [ 58.951892][ T5337] ? extent_writepage_io+0xca2/0xd20 [ 58.957166][ T5337] ? exc_invalid_op+0x38/0x50 [ 58.961834][ T5337] ? asm_exc_invalid_op+0x1a/0x20 [ 58.966855][ T5337] ? __wake_up_klogd+0xcc/0x110 [ 58.971699][ T5337] ? extent_writepage_io+0xca2/0xd20 [ 58.976976][ T5337] ? __pfx_extent_writepage_io+0x10/0x10 [ 58.982595][ T5337] ? folio_wait_writeback+0x1a8/0x1e0 [ 58.987961][ T5337] btrfs_writepages+0x11c4/0x2370 [ 58.992983][ T5337] ? __pfx_btrfs_writepages+0x10/0x10 [ 58.998349][ T5337] ? lockdep_hardirqs_on+0x99/0x150 [ 59.003537][ T5337] ? __pfx_end_bbio_data_write+0x10/0x10 [ 59.009162][ T5337] ? __pfx_btrfs_writepages+0x10/0x10 [ 59.014522][ T5337] do_writepages+0x35d/0x870 [ 59.019107][ T5337] ? __pfx_do_writepages+0x10/0x10 [ 59.024229][ T5337] ? wbc_attach_and_unlock_inode+0x317/0x580 [ 59.030213][ T5337] ? __pfx_lock_release+0x10/0x10 [ 59.035236][ T5337] ? do_raw_spin_unlock+0x13c/0x8b0 [ 59.040436][ T5337] ? wbc_attach_and_unlock_inode+0x369/0x580 [ 59.046411][ T5337] filemap_fdatawrite_wbc+0x125/0x180 [ 59.051781][ T5337] filemap_fdatawrite_range+0x11a/0x180 [ 59.057323][ T5337] ? pagecache_isize_extended+0x145/0x2a0 [ 59.063042][ T5337] ? __pfx_filemap_fdatawrite_range+0x10/0x10 [ 59.069103][ T5337] ? btrfs_buffered_write+0x10d1/0x1360 [ 59.074652][ T5337] ? __pfx_up_write+0x10/0x10 [ 59.079324][ T5337] btrfs_fdatawrite_range+0x53/0xe0 [ 59.084518][ T5337] btrfs_direct_write+0x565/0xa70 [ 59.089543][ T5337] ? __pfx_btrfs_direct_write+0x10/0x10 [ 59.095085][ T5337] ? __lock_acquire+0x1384/0x2050 [ 59.100108][ T5337] btrfs_do_write_iter+0x2a0/0x760 [ 59.105209][ T5337] ? mark_lock+0x9a/0x360 [ 59.109528][ T5337] ? __pfx_btrfs_do_write_iter+0x10/0x10 [ 59.115153][ T5337] do_iter_readv_writev+0x600/0x880 [ 59.120359][ T5337] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 59.126070][ T5337] ? rcu_read_lock_any_held+0xb7/0x160 [ 59.131522][ T5337] vfs_writev+0x376/0xba0 [ 59.135845][ T5337] ? __pfx_lock_acquire+0x10/0x10 [ 59.140860][ T5337] ? __pfx_vfs_writev+0x10/0x10 [ 59.145706][ T5337] ? __fget_files+0x29/0x470 [ 59.150289][ T5337] ? __fget_files+0x29/0x470 [ 59.154872][ T5337] __se_sys_pwritev2+0x1ca/0x2d0 [ 59.159804][ T5337] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 59.165254][ T5337] ? do_syscall_64+0x100/0x230 [ 59.170005][ T5337] ? __x64_sys_pwritev2+0x21/0xf0 [ 59.175021][ T5337] do_syscall_64+0xf3/0x230 [ 59.179511][ T5337] ? clear_bhb_loop+0x35/0x90 [ 59.184174][ T5337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.190062][ T5337] RIP: 0033:0x7fb17301bdc9 [ 59.194479][ T5337] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 59.214073][ T5337] RSP: 002b:00007fb172f90208 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 59.222478][ T5337] RAX: ffffffffffffffda RBX: 00007fb1730a96e8 RCX: 00007fb17301bdc9 [ 59.230441][ T5337] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000004 [ 59.238398][ T5337] RBP: 00007fb1730a96e0 R08: 0000000000000000 R09: 0000000000000003 [ 59.246444][ T5337] R10: 0000000000007800 R11: 0000000000000246 R12: 00007fb173075664 [ 59.254403][ T5337] R13: 726665646f747561 R14: 697265765f666572 R15: 00000000fffffe54 [ 59.262371][ T5337] [pid 5229] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5229] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5229] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5241] <... write resumed>) = ? [pid 5229] <... openat resumed>) = 4 [pid 5229] newfstatat(4, "", [pid 5241] +++ exited with 0 +++ [pid 5236] +++ exited with 0 +++ [pid 5229] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5230] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5236, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=72 /* 0.72 s */} --- [pid 5230] restart_syscall(<... resuming interrupted clone ...> [pid 5229] getdents64(4, [pid 5230] <... restart_syscall resumed>) = 0 [pid 5229] <... getdents64 resumed>0x55556103e770 /* 2 entries */, 32768) = 48 [pid 5229] getdents64(4, [pid 5230] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5229] <... getdents64 resumed>0x55556103e770 /* 0 entries */, 32768) = 0 [pid 5230] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5229] close(4) = 0 [pid 5230] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [ 59.265377][ T5337] Modules linked in: [ 59.269686][ T5337] ---[ end trace 0000000000000000 ]--- [ 59.284442][ T5227] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 59.287830][ T5337] RIP: 0010:extent_writepage_io+0xca2/0xd20 [pid 5229] rmdir("./0/bus") = 0 [pid 5230] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5229] getdents64(3, 0x555561036730 /* 0 entries */, 32768) = 0 [pid 5230] getdents64(3, [pid 5229] close(3) = 0 [pid 5230] <... getdents64 resumed>0x555561036730 /* 4 entries */, 32768) = 104 [pid 5229] rmdir("./0" [pid 5230] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5229] <... rmdir resumed>) = 0 [pid 5228] <... umount2 resumed>) = 0 [pid 5230] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5229] mkdir("./1", 0777 [pid 5228] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5230] newfstatat(AT_FDCWD, "./0/binderfs", [pid 5229] <... mkdir resumed>) = 0 [pid 5228] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5229] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 5228] newfstatat(AT_FDCWD, "./0/bus", [pid 5229] <... openat resumed>) = 3 [pid 5228] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5230] unlink("./0/binderfs" [pid 5229] ioctl(3, LOOP_CLR_FD [pid 5228] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5230] <... unlink resumed>) = 0 [pid 5229] <... ioctl resumed>) = -1 ENXIO (No such device or address) [ 59.323498][ T5337] Code: fe 07 90 0f 0b e8 1e 28 d9 fd 48 c7 c7 80 0d 4d 8c 48 c7 c6 60 1b 4d 8c 48 c7 c2 20 0d 4d 8c b9 17 05 00 00 e8 5f f7 fe 07 90 <0f> 0b e8 f7 27 d9 fd eb 5f e8 f0 27 d9 fd 48 c7 c7 80 0d 4d 8c 48 [ 59.348995][ T5337] RSP: 0018:ffffc90003d5eec0 EFLAGS: 00010246 [ 59.355516][ T5337] RAX: 000000000000004e RBX: 0000000000001000 RCX: 9329e60525732e00 [pid 5229] close(3 [pid 5228] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 5230] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW [pid 5229] <... close resumed>) = 0 [pid 5228] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 5229] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 5228] <... openat resumed>) = 4 [pid 5228] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5228] getdents64(4, 0x55556103e770 /* 2 entries */, 32768) = 48 [pid 5228] getdents64(4, 0x55556103e770 /* 0 entries */, 32768) = 0 [pid 5228] close(4) = 0 [pid 5229] <... clone resumed>, child_tidptr=0x555561035690) = 5341 [pid 5228] rmdir("./0/bus") = 0 [pid 5228] getdents64(3, ./strace-static-x86_64: Process 5341 attached [pid 5341] set_robust_list(0x5555610356a0, 24 [pid 5228] <... getdents64 resumed>0x555561036730 /* 0 entries */, 32768) = 0 [pid 5228] close(3) = 0 [pid 5228] rmdir("./0") = 0 [pid 5228] mkdir("./1", 0777) = 0 [pid 5228] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 5228] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5228] close(3) = 0 [pid 5228] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5342 attached , child_tidptr=0x555561035690) = 5342 [pid 5342] set_robust_list(0x5555610356a0, 24) = 0 [pid 5342] chdir("./1" [pid 5341] <... set_robust_list resumed>) = 0 [pid 5342] <... chdir resumed>) = 0 [pid 5342] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5341] chdir("./1" [pid 5342] <... prctl resumed>) = 0 [pid 5341] <... chdir resumed>) = 0 [pid 5342] setpgid(0, 0) = 0 [pid 5342] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5342] write(3, "1000", 4) = 4 [pid 5342] close(3) = 0 [pid 5342] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5342] write(1, "executing program\n", 18) = 18 [pid 5342] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5342] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, NULL, 8) = 0 [pid 5342] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5342] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172fb2000 [pid 5342] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5342] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5342] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0} [pid 5341] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5342] <... clone3 resumed> => {parent_tid=[5343]}, 88) = 5343 [pid 5342] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5342] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] <... prctl resumed>) = 0 [pid 5342] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 5343 attached [pid 5343] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053) = 0 [pid 5343] set_robust_list(0x7fb172fd29a0, 24) = 0 [pid 5343] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5343] memfd_create("syzkaller", 0) = 3 [pid 5343] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb16aa00000 [pid 5341] setpgid(0, 0) = 0 [ 59.368454][ T5337] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 59.379480][ T5337] RBP: ffffc90003d5f030 R08: ffffffff8174af9c R09: 1ffff920007abd74 [ 59.387530][ T5337] R10: dffffc0000000000 R11: fffff520007abd75 R12: fffffffffffffffd [ 59.396462][ T5230] BTRFS info (device loop4): last unmount of filesystem c604a643-e2bc-4723-b779-82cc4155b3b9 [ 59.403942][ T5337] R13: 0000000000007000 R14: dffffc0000000000 R15: ffffea0001cc8f00 [pid 5341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5341] write(3, "1000", 4) = 4 [pid 5341] close(3) = 0 [pid 5341] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5341] write(1, "executing program\n", 18executing program ) = 18 [pid 5341] futex(0x7fb1730a96cc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5341] rt_sigaction(SIGRT_1, {sa_handler=0x7fb1730421e0, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fb173033390}, NULL, 8) = 0 [pid 5341] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fb172fb2000 [pid 5341] mprotect(0x7fb172fb3000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5341] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5341] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fb172fd2990, parent_tid=0x7fb172fd2990, exit_signal=0, stack=0x7fb172fb2000, stack_size=0x20300, tls=0x7fb172fd26c0}./strace-static-x86_64: Process 5344 attached => {parent_tid=[5344]}, 88) = 5344 [pid 5344] rseq(0x7fb172fd2fe0, 0x20, 0, 0x53053053 [pid 5341] rt_sigprocmask(SIG_SETMASK, [], [pid 5344] <... rseq resumed>) = 0 [pid 5341] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5344] set_robust_list(0x7fb172fd29a0, 24 [pid 5341] futex(0x7fb1730a96c8, FUTEX_WAKE_PRIVATE, 1000000 [pid 5344] <... set_robust_list resumed>) = 0 [pid 5341] <... futex resumed>) = 0 [pid 5344] rt_sigprocmask(SIG_SETMASK, [], [pid 5341] futex(0x7fb1730a96cc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5344] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 5344] memfd_create("syzkaller", 0) = 3 [pid 5344] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb16aa00000 [ 59.447026][ T5337] FS: 00007fb172f906c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 59.474367][ T5337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 59.488246][ T5337] CR2: 00007fb16abe1000 CR3: 00000000745b0000 CR4: 00000000003526f0 [ 59.507512][ T5337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 59.527971][ T5337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 59.547868][ T5337] Kernel panic - not syncing: Fatal exception [ 59.557359][ T5337] Kernel Offset: disabled [ 59.561679][ T5337] Rebooting in 86400 seconds..