./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor800797254 <...> OK syzkaller syzkaller login: [ 11.526040][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 11.526047][ T23] audit: type=1400 audit(1669521277.969:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.531500][ T23] audit: type=1400 audit(1669521277.979:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[10618]" dev="pipefs" ino=10618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 12.417552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 12.668139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. execve("./syz-executor800797254", ["./syz-executor800797254"], 0x7ffe05dd02f0 /* 10 vars */) = 0 brk(NULL) = 0x555556949000 brk(0x555556949c40) = 0x555556949c40 arch_prctl(ARCH_SET_FS, 0x555556949300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555569495d0) = 371 set_robust_list(0x5555569495e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f70f5fee500, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f70f5feebd0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f70f5fee5a0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f70f5feebd0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor800797254", 4096) = 27 brk(0x55555696ac40) = 0x55555696ac40 brk(0x55555696b000) = 0x55555696b000 mprotect(0x7f70f60b0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 372 ./strace-static-x86_64: Process 372 attached [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] set_robust_list(0x5555569495e0, 24) = 0 ./strace-static-x86_64: Process 373 attached [pid 372] getpid( [pid 373] set_robust_list(0x5555569495e0, 24 [pid 372] <... getpid resumed>) = 372 [pid 373] <... set_robust_list resumed>) = 0 [pid 372] mkdir("./syzkaller.kCEUrk", 0700 [pid 373] getpid( [pid 372] <... mkdir resumed>) = 0 [pid 373] <... getpid resumed>) = 373 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 373 [pid 372] chmod("./syzkaller.kCEUrk", 0777 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] mkdir("./syzkaller.Sa0Rjo", 0700./strace-static-x86_64: Process 374 attached [pid 372] <... chmod resumed>) = 0 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 374 [pid 374] set_robust_list(0x5555569495e0, 24 [pid 373] <... mkdir resumed>) = 0 [pid 374] <... set_robust_list resumed>) = 0 [pid 372] chdir("./syzkaller.kCEUrk" [pid 373] chmod("./syzkaller.Sa0Rjo", 0777 [pid 372] <... chdir resumed>) = 0 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] getpid( [pid 373] <... chmod resumed>) = 0 [pid 372] mkdir("./0", 0777./strace-static-x86_64: Process 375 attached [pid 374] <... getpid resumed>) = 374 [pid 373] chdir("./syzkaller.Sa0Rjo" [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 375 [pid 374] mkdir("./syzkaller.DsT2Mv", 0700 [pid 373] <... chdir resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 375] set_robust_list(0x5555569495e0, 24 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... set_robust_list resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] mkdir("./0", 0777 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] chmod("./syzkaller.DsT2Mv", 0777 [pid 375] getpid( [pid 374] <... chmod resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 376 [pid 375] <... getpid resumed>) = 375 [pid 374] chdir("./syzkaller.DsT2Mv" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] ioctl(3, LOOP_CLR_FD [pid 374] <... chdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] mkdir("./syzkaller.aHmh5z", 0700 [pid 374] mkdir("./0", 0777 [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 375] chmod("./syzkaller.aHmh5z", 0777 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] close(3 [pid 372] <... close resumed>) = 0 [pid 375] <... chmod resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] chdir("./syzkaller.aHmh5z" [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... chdir resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 378 [pid 375] mkdir("./0", 0777 [pid 374] close(3 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 379 [pid 375] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 380 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 381 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 377 ./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555569495e0, 24) = 0 [pid 376] getpid() = 376 [pid 376] mkdir("./syzkaller.LseQLB", 0700) = 0 [pid 376] chmod("./syzkaller.LseQLB", 0777) = 0 [pid 376] chdir("./syzkaller.LseQLB") = 0 [pid 376] mkdir("./0", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 382 ./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x5555569495e0, 24) = 0 [pid 382] chdir("./0") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 382] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 380 attached ./strace-static-x86_64: Process 378 attached ./strace-static-x86_64: Process 377 attached ./strace-static-x86_64: Process 379 attached ./strace-static-x86_64: Process 381 attached [pid 380] set_robust_list(0x5555569495e0, 24 [pid 378] set_robust_list(0x5555569495e0, 24 [pid 377] set_robust_list(0x5555569495e0, 24 [pid 380] <... set_robust_list resumed>) = 0 [pid 379] set_robust_list(0x5555569495e0, 24 [pid 378] <... set_robust_list resumed>) = 0 [pid 377] <... set_robust_list resumed>) = 0 [pid 381] set_robust_list(0x5555569495e0, 24 [pid 380] chdir("./0" [pid 379] <... set_robust_list resumed>) = 0 [pid 378] chdir("./0" [pid 381] <... set_robust_list resumed>) = 0 [pid 377] getpid( [pid 379] chdir("./0" [pid 381] chdir("./0" [pid 382] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 380] <... chdir resumed>) = 0 [pid 379] <... chdir resumed>) = 0 [pid 378] <... chdir resumed>) = 0 [pid 377] <... getpid resumed>) = 377 [pid 381] <... chdir resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 382] <... clone resumed>, parent_tid=[387], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 387 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... prctl resumed>) = 0 [pid 379] <... prctl resumed>) = 0 [pid 378] <... prctl resumed>) = 0 [pid 377] mkdir("./syzkaller.Mq9WhJ", 0700 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... prctl resumed>) = 0 [pid 380] setpgid(0, 0 [pid 379] setpgid(0, 0 [pid 378] setpgid(0, 0 [pid 381] setpgid(0, 0 [pid 379] <... setpgid resumed>) = 0 [pid 378] <... setpgid resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 380] <... setpgid resumed>) = 0 [pid 382] <... futex resumed>) = 0 [pid 381] <... setpgid resumed>) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 380] <... openat resumed>) = 3 [pid 378] <... openat resumed>) = 3 [pid 379] <... openat resumed>) = 3 [pid 381] <... openat resumed>) = 3 [pid 380] write(3, "1000", 4 [pid 379] write(3, "1000", 4 [pid 378] write(3, "1000", 4 [pid 377] chmod("./syzkaller.Mq9WhJ", 0777 [pid 381] write(3, "1000", 4 [pid 380] <... write resumed>) = 4 [pid 379] <... write resumed>) = 4 [pid 378] <... write resumed>) = 4 [pid 377] <... chmod resumed>) = 0 [pid 381] <... write resumed>) = 4 [pid 380] close(3 [pid 379] close(3 [pid 378] close(3 [pid 377] chdir("./syzkaller.Mq9WhJ" [pid 381] close(3 [pid 380] <... close resumed>) = 0 [pid 379] <... close resumed>) = 0 [pid 378] <... close resumed>) = 0 [pid 381] <... close resumed>) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs" [pid 379] symlink("/dev/binderfs", "./binderfs" [pid 378] symlink("/dev/binderfs", "./binderfs" [pid 377] <... chdir resumed>) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs" [pid 380] <... symlink resumed>) = 0 [pid 379] <... symlink resumed>) = 0 [pid 378] <... symlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 379] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./0", 0777 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 381] <... futex resumed>) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 380] <... mmap resumed>) = 0x7f70f5fbd000 [pid 379] <... mmap resumed>) = 0x7f70f5fbd000 [pid 378] <... mmap resumed>) = 0x7f70f5fbd000 [pid 377] <... openat resumed>) = 3 [pid 381] <... mmap resumed>) = 0x7f70f5fbd000 [pid 380] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 379] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 378] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 377] ioctl(3, LOOP_CLR_FD [pid 381] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 380] <... mprotect resumed>) = 0 [pid 379] <... mprotect resumed>) = 0 [pid 378] <... mprotect resumed>) = 0 [pid 381] <... mprotect resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 380] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] close(3 [pid 379] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 378] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... close resumed>) = 0 [pid 381] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 378] <... clone resumed>, parent_tid=[388], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 388 [pid 381] <... clone resumed>, parent_tid=[392], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 392 [pid 380] <... clone resumed>, parent_tid=[390], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 390 [pid 379] <... clone resumed>, parent_tid=[391], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 391 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 389 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 391 attached ./strace-static-x86_64: Process 390 attached ./strace-static-x86_64: Process 392 attached ./strace-static-x86_64: Process 389 attached ./strace-static-x86_64: Process 388 attached ./strace-static-x86_64: Process 387 attached [pid 392] set_robust_list(0x7f70f5fdd9e0, 24 [pid 391] set_robust_list(0x7f70f5fdd9e0, 24 [pid 390] set_robust_list(0x7f70f5fdd9e0, 24 [pid 389] set_robust_list(0x5555569495e0, 24 [pid 388] set_robust_list(0x7f70f5fdd9e0, 24 [pid 387] set_robust_list(0x7f70f5fdd9e0, 24 [pid 392] <... set_robust_list resumed>) = 0 [pid 391] <... set_robust_list resumed>) = 0 [pid 390] <... set_robust_list resumed>) = 0 [pid 389] <... set_robust_list resumed>) = 0 [pid 388] <... set_robust_list resumed>) = 0 [pid 387] <... set_robust_list resumed>) = 0 [pid 391] memfd_create("syzkaller", 0 [pid 390] memfd_create("syzkaller", 0 [pid 388] memfd_create("syzkaller", 0 [pid 387] memfd_create("syzkaller", 0 [pid 391] <... memfd_create resumed>) = 3 [pid 390] <... memfd_create resumed>) = 3 [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 388] <... memfd_create resumed>) = 3 [pid 387] <... memfd_create resumed>) = 3 [pid 391] <... mmap resumed>) = 0x7f70edbbd000 [pid 390] <... mmap resumed>) = 0x7f70edbbd000 [pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 392] memfd_create("syzkaller", 0) = 3 [pid 392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 19.591405][ T23] audit: type=1400 audit(1669521286.039:73): avc: denied { execmem } for pid=371 comm="syz-executor800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.602722][ T23] audit: type=1400 audit(1669521286.049:74): avc: denied { read write } for pid=372 comm="syz-executor800" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.606020][ T23] audit: type=1400 audit(1669521286.049:75): avc: denied { open } for pid=372 comm="syz-executor800" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.610429][ T23] audit: type=1400 audit(1669521286.059:76): avc: denied { ioctl } for pid=372 comm="syz-executor800" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 389] chdir("./0" [pid 388] <... mmap resumed>) = 0x7f70edbbd000 [pid 387] <... mmap resumed>) = 0x7f70edbbd000 [pid 389] <... chdir resumed>) = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 389] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[393], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 393 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 393] memfd_create("syzkaller", 0) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 392] <... write resumed>) = 1048576 [pid 392] munmap(0x7f70edbbd000, 1048576) = 0 [pid 392] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 392] ioctl(4, LOOP_SET_FD, 3 [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 390] <... write resumed>) = 1048576 [pid 391] <... write resumed>) = 1048576 [pid 388] <... write resumed>) = 1048576 [pid 391] munmap(0x7f70edbbd000, 1048576 [pid 390] munmap(0x7f70edbbd000, 1048576 [pid 388] munmap(0x7f70edbbd000, 1048576) = 0 [pid 391] <... munmap resumed>) = 0 [pid 390] <... munmap resumed>) = 0 [pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 390] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 387] <... write resumed>) = 1048576 [pid 387] munmap(0x7f70edbbd000, 1048576) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 392] <... ioctl resumed>) = 0 [pid 391] <... openat resumed>) = 4 [pid 390] <... openat resumed>) = 4 [pid 388] <... openat resumed>) = 4 [pid 391] ioctl(4, LOOP_SET_FD, 3 [pid 390] ioctl(4, LOOP_SET_FD, 3 [pid 388] ioctl(4, LOOP_SET_FD, 3 [pid 387] <... openat resumed>) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3 [pid 388] <... ioctl resumed>) = 0 [pid 388] close(3) = 0 [pid 388] mkdir("./file0", 0777 [pid 392] close(3 [pid 388] <... mkdir resumed>) = 0 [pid 388] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 393] <... write resumed>) = 1048576 [pid 392] <... close resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 392] mkdir("./file0", 0777 [pid 391] close(3 [pid 392] <... mkdir resumed>) = 0 [pid 391] <... close resumed>) = 0 [pid 392] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 391] mkdir("./file0", 0777) = 0 [pid 391] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 393] munmap(0x7f70edbbd000, 1048576) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 393] close(3) = 0 [pid 393] mkdir("./file0", 0777) = 0 [pid 393] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 390] <... ioctl resumed>) = 0 [pid 390] close(3) = 0 [pid 390] mkdir("./file0", 0777) = 0 [pid 390] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 387] <... ioctl resumed>) = 0 [pid 387] close(3) = 0 [pid 387] mkdir("./file0", 0777) = 0 [pid 387] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 387] chdir("./file0") = 0 [pid 387] ioctl(4, LOOP_CLR_FD) = 0 [pid 387] close(4) = 0 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [ 19.705843][ T23] audit: type=1400 audit(1669521286.149:77): avc: denied { mounton } for pid=378 comm="syz-executor800" path="/root/syzkaller.kCEUrk/0/file0" dev="sda1" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 19.742142][ T387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 387] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR) = 5 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 382] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[412], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 412 [pid 382] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] write(4, 0x20000f80, 9) = 9 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 19.756119][ T23] audit: type=1400 audit(1669521286.199:78): avc: denied { mount } for pid=382 comm="syz-executor800" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 19.767862][ T392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 19.781664][ T23] audit: type=1400 audit(1669521286.199:79): avc: denied { write } for pid=382 comm="syz-executor800" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 19.788513][ T388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 19.809725][ T391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 19.818155][ T23] audit: type=1400 audit(1669521286.199:80): avc: denied { add_name } for pid=382 comm="syz-executor800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 387] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] <... mount resumed>) = 0 ./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 412] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 392] <... mount resumed>) = 0 [pid 391] <... mount resumed>) = 0 [pid 388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 388] <... openat resumed>) = 3 [pid 392] <... openat resumed>) = 3 [pid 391] <... openat resumed>) = 3 [pid 388] chdir("./file0" [pid 392] chdir("./file0" [pid 391] chdir("./file0" [pid 388] <... chdir resumed>) = 0 [pid 392] <... chdir resumed>) = 0 [pid 391] <... chdir resumed>) = 0 [pid 388] ioctl(4, LOOP_CLR_FD [pid 392] ioctl(4, LOOP_CLR_FD [pid 391] ioctl(4, LOOP_CLR_FD [pid 388] <... ioctl resumed>) = 0 [pid 392] <... ioctl resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 388] close(4 [pid 392] close(4 [pid 391] close(4 [pid 388] <... close resumed>) = 0 [pid 392] <... close resumed>) = 0 [pid 391] <... close resumed>) = 0 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 1 [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 388] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 19.827106][ T412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.847386][ T23] audit: type=1400 audit(1669521286.199:81): avc: denied { create } for pid=382 comm="syz-executor800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.862260][ T390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... mount resumed>) = 0 [pid 387] <... futex resumed>) = ? [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 387] +++ killed by SIGBUS +++ [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] +++ killed by SIGBUS +++ [pid 392] <... futex resumed>) = 0 [pid 391] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 0 [pid 382] +++ killed by SIGBUS +++ [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 1 [pid 378] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 388] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=382, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 390] chdir("./file0" [pid 393] <... mount resumed>) = 0 [pid 392] <... open resumed>) = 4 [pid 391] <... open resumed>) = 4 [pid 388] <... open resumed>) = 4 [pid 390] <... chdir resumed>) = 0 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 390] ioctl(4, LOOP_CLR_FD [pid 388] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 393] <... openat resumed>) = 3 [pid 392] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 391] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 390] <... ioctl resumed>) = 0 [pid 388] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... write resumed>) = 9 [pid 391] <... write resumed>) = 9 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 388] <... write resumed>) = 9 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] chdir("./file0") = 0 [pid 390] close(4) = 0 [pid 393] ioctl(4, LOOP_CLR_FD) = 0 [pid 393] close(4 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... close resumed>) = 0 [pid 390] <... futex resumed>) = 1 [pid 390] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 380] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 393] <... open resumed>) = 4 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] open("./bus", O_RDWR) = 5 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 389] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[415], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 415 [pid 389] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] write(4, 0x20000f80, 9) = 9 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 392] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 1 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 392] open("./bus", O_RDWR [pid 388] open("./bus", O_RDWR [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 392] <... open resumed>) = 5 [pid 388] <... open resumed>) = 5 [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 392] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 392] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 388] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... mmap resumed>) = 0x20000000 [pid 388] <... mmap resumed>) = 0x20000000 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./0/binderfs", [pid 392] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 392] write(4, 0x20000f80, 9 [pid 388] write(4, 0x20000f80, 9 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./0/binderfs" [pid 388] <... write resumed>) = 9 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 388] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 381] <... mmap resumed>) = 0x7f70edc9c000 [pid 378] <... mmap resumed>) = 0x7f70edc9c000 [pid 381] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 378] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 381] <... mprotect resumed>) = 0 [pid 378] <... mprotect resumed>) = 0 [pid 381] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 378] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 381] <... clone resumed>, parent_tid=[416], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 416 [pid 378] <... clone resumed>, parent_tid=[417], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 417 [pid 381] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 417 attached ./strace-static-x86_64: Process 416 attached [pid 415] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 391] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 1 [pid 392] <... write resumed>) = 9 [pid 393] <... futex resumed>) = ? [pid 391] open("./bus", O_RDWR [pid 389] <... futex resumed>) = ? [pid 393] +++ killed by SIGBUS +++ [pid 391] <... open resumed>) = 5 [pid 415] +++ killed by SIGBUS +++ [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] +++ killed by SIGBUS +++ [pid 391] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 391] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] set_robust_list(0x7f70edcbc9e0, 24 [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... mmap resumed>) = 0x20000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=389, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 416] <... set_robust_list resumed>) = 0 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 417] set_robust_list(0x7f70edcbc9e0, 24 [pid 391] <... futex resumed>) = 1 [pid 390] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 379] <... futex resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 377] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./0/binderfs" [pid 417] <... set_robust_list resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [ 19.881941][ T23] audit: type=1400 audit(1669521286.199:82): avc: denied { read write open } for pid=382 comm="syz-executor800" path="/root/syzkaller.LseQLB/0/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.908947][ T393] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 19.932279][ T415] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 416] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 391] write(4, 0x20000f80, 9 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 391] <... write resumed>) = 9 [pid 379] <... futex resumed>) = 0 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 417] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 388] <... futex resumed>) = ? [pid 378] <... futex resumed>) = ? [pid 388] +++ killed by SIGBUS +++ [pid 417] +++ killed by SIGBUS +++ [pid 378] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=378, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./0/binderfs") = 0 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... futex resumed>) = ? [pid 381] <... futex resumed>) = ? [pid 390] <... write resumed>) = 9 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 390] open("./bus", O_RDWR [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... open resumed>) = 5 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... mmap resumed>) = 0x20000000 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] write(4, 0x20000f80, 9 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... write resumed>) = 9 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 380] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[419], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 419 [pid 380] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] +++ killed by SIGBUS +++ [pid 416] +++ killed by SIGBUS +++ [pid 381] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=381, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 419 attached [pid 391] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 379] <... futex resumed>) = ? [pid 375] lstat("./0/binderfs", [pid 391] +++ killed by SIGBUS +++ [pid 379] +++ killed by SIGBUS +++ [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./0/binderfs") = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=379, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./0/binderfs") = 0 [ 19.949985][ T416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.955407][ T417] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.965379][ T391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 390] <... futex resumed>) = ? [pid 380] <... futex resumed>) = ? [pid 390] +++ killed by SIGBUS +++ [pid 419] +++ killed by SIGBUS +++ [pid 380] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=380, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 376] <... umount2 resumed>) = 0 [pid 374] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./0/binderfs" [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./0/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./0") = 0 [pid 376] mkdir("./1", 0777) = 0 [ 19.994363][ T419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./0/file0", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./0/file0", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] fstat(4, [pid 373] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 4 [pid 373] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 372] lstat("./0/file0", [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(4 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./0/file0" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 375] rmdir("./0/file0" [pid 373] getdents64(3, [pid 372] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 372] <... openat resumed>) = 4 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] getdents64(3, [pid 373] rmdir("./0" [pid 372] fstat(4, [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 375] close(3 [pid 373] mkdir("./1", 0777 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 372] getdents64(4, [pid 375] rmdir("./0" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./1", 0777 [pid 372] close(4) = 0 [pid 372] rmdir("./0/file0" [pid 375] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./0") = 0 [pid 372] mkdir("./1", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] lstat("./0/file0", [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] lstat("./0/file0", [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 422 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 421 [pid 377] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 423 [pid 374] <... openat resumed>) = 4 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 424 [pid 377] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 377] fstat(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 377] close(4 [pid 374] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] rmdir("./0/file0" [pid 377] rmdir("./0/file0" [pid 374] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 377] getdents64(3, [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 377] close(3 [pid 374] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] rmdir("./0" [pid 377] rmdir("./0" [pid 374] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 374] mkdir("./1", 0777 [pid 377] mkdir("./1", 0777 [pid 374] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 423 attached ./strace-static-x86_64: Process 422 attached [pid 377] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 424 attached ./strace-static-x86_64: Process 421 attached [pid 423] set_robust_list(0x5555569495e0, 24 [pid 422] set_robust_list(0x5555569495e0, 24 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 424] set_robust_list(0x5555569495e0, 24 [pid 423] <... set_robust_list resumed>) = 0 [pid 422] <... set_robust_list resumed>) = 0 [pid 421] set_robust_list(0x5555569495e0, 24 [pid 377] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 424] <... set_robust_list resumed>) = 0 [pid 423] chdir("./1" [pid 422] chdir("./1" [pid 421] <... set_robust_list resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 374] close(3 [pid 424] chdir("./1" [pid 423] <... chdir resumed>) = 0 [pid 422] <... chdir resumed>) = 0 [pid 421] chdir("./1" [pid 377] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 424] <... chdir resumed>) = 0 [pid 421] <... chdir resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] <... prctl resumed>) = 0 [pid 421] <... prctl resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 425 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 426 [pid 424] setpgid(0, 0 [pid 421] setpgid(0, 0 [pid 424] <... setpgid resumed>) = 0 [pid 421] <... setpgid resumed>) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 424] <... openat resumed>) = 3 [pid 421] <... openat resumed>) = 3 [pid 424] write(3, "1000", 4 [pid 421] write(3, "1000", 4./strace-static-x86_64: Process 425 attached [pid 424] <... write resumed>) = 4 [pid 421] <... write resumed>) = 4 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] close(3 [pid 421] close(3 [pid 424] <... close resumed>) = 0 [pid 421] <... close resumed>) = 0 [pid 424] symlink("/dev/binderfs", "./binderfs" [pid 421] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 426 attached [pid 425] set_robust_list(0x5555569495e0, 24 [pid 424] <... symlink resumed>) = 0 [pid 423] <... prctl resumed>) = 0 [pid 422] <... prctl resumed>) = 0 [pid 421] <... symlink resumed>) = 0 [pid 426] set_robust_list(0x5555569495e0, 24 [pid 425] <... set_robust_list resumed>) = 0 [pid 423] setpgid(0, 0 [pid 422] setpgid(0, 0 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... set_robust_list resumed>) = 0 [pid 425] chdir("./1" [pid 423] <... setpgid resumed>) = 0 [pid 422] <... setpgid resumed>) = 0 [pid 426] chdir("./1" [pid 425] <... chdir resumed>) = 0 [pid 424] <... futex resumed>) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 421] <... futex resumed>) = 0 [pid 426] <... chdir resumed>) = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 423] <... openat resumed>) = 3 [pid 422] <... openat resumed>) = 3 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 425] <... prctl resumed>) = 0 [pid 424] <... mmap resumed>) = 0x7f70f5fbd000 [pid 423] write(3, "1000", 4 [pid 422] write(3, "1000", 4 [pid 421] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... prctl resumed>) = 0 [pid 425] setpgid(0, 0 [pid 424] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 423] <... write resumed>) = 4 [pid 422] <... write resumed>) = 4 [pid 426] setpgid(0, 0 [pid 425] <... setpgid resumed>) = 0 [pid 423] close(3 [pid 422] close(3 [pid 421] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 426] <... setpgid resumed>) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 424] <... mprotect resumed>) = 0 [pid 423] <... close resumed>) = 0 [pid 422] <... close resumed>) = 0 [pid 421] <... mprotect resumed>) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 425] <... openat resumed>) = 3 [pid 423] symlink("/dev/binderfs", "./binderfs" [pid 422] symlink("/dev/binderfs", "./binderfs" [pid 426] <... openat resumed>) = 3 [pid 425] write(3, "1000", 4 [pid 424] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 421] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 426] write(3, "1000", 4 [pid 425] <... write resumed>) = 4 [pid 423] <... symlink resumed>) = 0 [pid 422] <... symlink resumed>) = 0 [pid 426] <... write resumed>) = 4 [pid 425] close(3 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] close(3 [pid 425] <... close resumed>) = 0 [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 421] <... clone resumed>, parent_tid=[427], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 427 [pid 426] <... close resumed>) = 0 [pid 425] symlink("/dev/binderfs", "./binderfs" [pid 424] <... clone resumed>, parent_tid=[428], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 428 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 428 attached ./strace-static-x86_64: Process 427 attached [pid 426] symlink("/dev/binderfs", "./binderfs" [pid 425] <... symlink resumed>) = 0 [pid 423] <... mmap resumed>) = 0x7f70f5fbd000 [pid 422] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... symlink resumed>) = 0 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 422] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 426] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 423] <... mprotect resumed>) = 0 [pid 422] <... mprotect resumed>) = 0 [pid 426] <... futex resumed>) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 423] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 422] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 425] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... mmap resumed>) = 0x7f70f5fbd000 [pid 425] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 423] <... clone resumed>, parent_tid=[429], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 429 [pid 422] <... clone resumed>, parent_tid=[430], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 430 [pid 426] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 425] <... mprotect resumed>) = 0 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 426] <... mprotect resumed>) = 0 [pid 425] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 426] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 425] <... clone resumed>, parent_tid=[431], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 431 [pid 426] <... clone resumed>, parent_tid=[432], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 432 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 426] <... futex resumed>) = 0 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 428] set_robust_list(0x7f70f5fdd9e0, 24 [pid 427] set_robust_list(0x7f70f5fdd9e0, 24./strace-static-x86_64: Process 432 attached ./strace-static-x86_64: Process 430 attached [pid 428] <... set_robust_list resumed>) = 0 [pid 427] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 429 attached [pid 432] set_robust_list(0x7f70f5fdd9e0, 24 [pid 430] set_robust_list(0x7f70f5fdd9e0, 24 [pid 428] memfd_create("syzkaller", 0) = 3 [pid 428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 427] memfd_create("syzkaller", 0) = 3 [pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 431] <... write resumed>) = 1048576 [pid 431] munmap(0x7f70edbbd000, 1048576) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3 [pid 432] <... set_robust_list resumed>) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 431] close(3 [pid 432] memfd_create("syzkaller", 0 [pid 431] <... close resumed>) = 0 [pid 431] mkdir("./file0", 0777) = 0 [pid 431] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 432] <... memfd_create resumed>) = 3 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 430] <... set_robust_list resumed>) = 0 [pid 429] set_robust_list(0x7f70f5fdd9e0, 24 [pid 428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 432] <... mmap resumed>) = 0x7f70edbbd000 [pid 430] memfd_create("syzkaller", 0 [pid 429] <... set_robust_list resumed>) = 0 [pid 430] <... memfd_create resumed>) = 3 [pid 430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 429] memfd_create("syzkaller", 0 [pid 430] <... mmap resumed>) = 0x7f70edbbd000 [pid 429] <... memfd_create resumed>) = 3 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 428] <... write resumed>) = 1048576 [pid 427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 428] munmap(0x7f70edbbd000, 1048576) = 0 [pid 428] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 428] ioctl(4, LOOP_SET_FD, 3 [pid 432] <... write resumed>) = 1048576 [pid 432] munmap(0x7f70edbbd000, 1048576) = 0 [pid 432] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 428] <... ioctl resumed>) = 0 [pid 432] ioctl(4, LOOP_SET_FD, 3 [pid 428] close(3) = 0 [pid 428] mkdir("./file0", 0777) = 0 [pid 428] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 429] <... mmap resumed>) = 0x7f70edbbd000 [pid 431] <... mount resumed>) = 0 [pid 431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 431] chdir("./file0") = 0 [pid 431] ioctl(4, LOOP_CLR_FD [pid 430] <... write resumed>) = 1048576 [pid 430] munmap(0x7f70edbbd000, 1048576) = 0 [pid 430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 432] <... ioctl resumed>) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 432] close(3 [pid 431] close(4 [pid 432] <... close resumed>) = 0 [pid 431] <... close resumed>) = 0 [pid 432] mkdir("./file0", 0777 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... mkdir resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 425] <... futex resumed>) = 0 [pid 432] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 431] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... open resumed>) = 4 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... write resumed>) = 9 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] open("./bus", O_RDWR [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... open resumed>) = 5 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... mmap resumed>) = 0x20000000 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] write(4, 0x20000f80, 9 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... write resumed>) = 9 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 425] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[438], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 438 [pid 425] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... openat resumed>) = 4 [pid 430] ioctl(4, LOOP_SET_FD, 3 [pid 427] <... write resumed>) = 1048576 [pid 427] munmap(0x7f70edbbd000, 1048576) = 0 [pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 429] munmap(0x7f70edbbd000, 1048576) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 430] <... ioctl resumed>) = 0 [pid 430] close(3) = 0 [pid 430] mkdir("./file0", 0777) = 0 [pid 430] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 438] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 429] <... openat resumed>) = 4 [pid 429] ioctl(4, LOOP_SET_FD, 3 [pid 425] <... futex resumed>) = ? [pid 431] <... futex resumed>) = ? [pid 427] <... openat resumed>) = 4 [pid 427] ioctl(4, LOOP_SET_FD, 3 [pid 429] <... ioctl resumed>) = 0 [pid 429] close(3) = 0 [pid 429] mkdir("./file0", 0777) = 0 [ 20.312847][ T431] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 20.342737][ T438] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 429] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 431] +++ killed by SIGBUS +++ [pid 438] +++ killed by SIGBUS +++ [pid 425] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=425, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, [pid 428] <... mount resumed>) = 0 [pid 428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 428] <... openat resumed>) = 3 [pid 428] chdir("./file0") = 0 [pid 428] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 427] <... ioctl resumed>) = 0 [pid 377] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./1/binderfs") = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] close(3) = 0 [pid 427] mkdir("./file0", 0777 [pid 432] <... mount resumed>) = 0 [pid 428] <... ioctl resumed>) = 0 [pid 427] <... mkdir resumed>) = 0 [pid 427] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 429] <... mount resumed>) = 0 [pid 428] close(4 [pid 432] <... openat resumed>) = 3 [pid 428] <... close resumed>) = 0 [pid 432] chdir("./file0" [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... chdir resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 432] ioctl(4, LOOP_CLR_FD [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] <... ioctl resumed>) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 4 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... write resumed>) = 9 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDWR [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 5 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... mmap resumed>) = 0x20000000 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] write(4, 0x20000f80, 9 [pid 426] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... write resumed>) = 9 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 432] <... futex resumed>) = 0 [pid 426] <... mmap resumed>) = 0x7f70edc9c000 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 426] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[450], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 450 [pid 426] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 429] chdir("./file0") = 0 [pid 429] ioctl(4, LOOP_CLR_FD) = 0 [pid 429] close(4) = 0 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] open("./bus", O_RDWR) = 5 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 423] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 423] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[451], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 451 [pid 423] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] write(4, 0x20000f80, 9) = 9 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 451 attached ./strace-static-x86_64: Process 450 attached [pid 430] <... mount resumed>) = 0 [pid 424] <... futex resumed>) = 0 [pid 451] set_robust_list(0x7f70edcbc9e0, 24 [pid 450] set_robust_list(0x7f70edcbc9e0, 24 [pid 430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 451] <... set_robust_list resumed>) = 0 [pid 450] <... set_robust_list resumed>) = 0 [ 20.359733][ T428] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.370760][ T432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 20.380986][ T429] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 20.391089][ T430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 430] <... openat resumed>) = 3 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 428] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 432] <... futex resumed>) = ? [pid 426] <... futex resumed>) = ? [pid 432] +++ killed by SIGBUS +++ [pid 450] +++ killed by SIGBUS +++ [pid 426] +++ killed by SIGBUS +++ [pid 430] chdir("./file0") = 0 [pid 430] ioctl(4, LOOP_CLR_FD) = 0 [pid 430] close(4) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=426, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... open resumed>) = 4 [pid 430] <... futex resumed>) = 1 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 428] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 0 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = ? [pid 423] <... futex resumed>) = ? [pid 430] <... open resumed>) = 4 [pid 429] +++ killed by SIGBUS +++ [pid 428] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 0 [pid 428] <... write resumed>) = 9 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... write resumed>) = 9 [pid 428] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 374] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] open("./bus", O_RDWR [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 0 [pid 428] <... open resumed>) = 5 [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 430] open("./bus", O_RDWR [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 430] <... open resumed>) = 5 [pid 428] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 3 [pid 430] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] fstat(3, [pid 451] +++ killed by SIGBUS +++ [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] +++ killed by SIGBUS +++ [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./1/binderfs") = 0 [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=423, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 430] write(4, 0x20000f80, 9 [pid 422] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 422] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 422] <... mprotect resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 422] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 422] <... clone resumed>, parent_tid=[454], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 454 [pid 375] getdents64(3, [pid 422] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 422] <... futex resumed>) = 0 [pid 375] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./1/binderfs") = 0 [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 428] <... mmap resumed>) = 0x20000000 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... write resumed>) = 9 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 454 attached [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... mount resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 428] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] write(4, 0x20000f80, 9 [pid 454] set_robust_list(0x7f70edcbc9e0, 24 [pid 430] <... futex resumed>) = 0 [pid 427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 454] <... set_robust_list resumed>) = 0 [pid 427] <... openat resumed>) = 3 [pid 424] <... mmap resumed>) = 0x7f70edc9c000 [pid 428] <... write resumed>) = 9 [ 20.401592][ T450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.417375][ T451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.438623][ T427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 427] chdir("./file0" [pid 424] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 422] <... futex resumed>) = ? [pid 428] <... futex resumed>) = 0 [pid 427] <... chdir resumed>) = 0 [pid 424] <... mprotect resumed>) = 0 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] <... futex resumed>) = ? [pid 427] ioctl(4, LOOP_CLR_FD [pid 424] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 455 attached [pid 430] +++ killed by SIGBUS +++ [pid 455] set_robust_list(0x7f70edcbc9e0, 24 [pid 424] <... clone resumed>, parent_tid=[455], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 455 [pid 455] <... set_robust_list resumed>) = 0 [pid 424] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] +++ killed by SIGBUS +++ [pid 422] +++ killed by SIGBUS +++ [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=422, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 376] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./1/binderfs") = 0 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 455] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 428] <... futex resumed>) = ? [pid 377] rmdir("./1/file0" [pid 424] <... futex resumed>) = ? [pid 428] +++ killed by SIGBUS +++ [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./1") = 0 [pid 377] mkdir("./2", 0777) = 0 [pid 455] +++ killed by SIGBUS +++ [pid 424] +++ killed by SIGBUS +++ [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=424, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 373] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./1/binderfs") = 0 [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] <... ioctl resumed>) = 0 [ 20.450128][ T454] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.467453][ T455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 427] close(4 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 427] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./1/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./1") = 0 [pid 421] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] mkdir("./2", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x5555569495e0, 24) = 0 [pid 456] chdir("./2") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 427] <... futex resumed>) = 0 [pid 421] <... futex resumed>) = 1 [pid 427] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 377] <... close resumed>) = 0 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 456] setpgid(0, 0 [pid 427] <... open resumed>) = 4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 457 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] lstat("./1/file0", [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 456] <... setpgid resumed>) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 421] <... futex resumed>) = 0 [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./1/file0", [pid 427] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./1/file0", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] <... write resumed>) = 9 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] <... futex resumed>) = 1 [pid 421] <... futex resumed>) = 0 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... openat resumed>) = 4 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 427] open("./bus", O_RDWR [pid 421] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 427] <... open resumed>) = 5 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] getdents64(4, [pid 373] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 427] <... futex resumed>) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 427] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 421] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 375] getdents64(4, [pid 373] <... openat resumed>) = 4 [pid 427] <... mmap resumed>) = 0x20000000 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] fstat(4, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] <... futex resumed>) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 375] <... close resumed>) = 0 [pid 427] write(4, 0x20000f80, 9 [pid 421] <... futex resumed>) = 0 [pid 373] getdents64(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] rmdir("./1/file0" [pid 427] <... write resumed>) = 9 [pid 421] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 456] <... mmap resumed>) = 0x7f70f5fbd000 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] getdents64(4, [pid 456] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 427] <... futex resumed>) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] close(4 [pid 375] getdents64(3, [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 456] <... mprotect resumed>) = 0 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 456] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 421] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] rmdir("./1/file0" [pid 375] close(3 [pid 421] <... mprotect resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 456] <... clone resumed>, parent_tid=[458], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 458 [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... rmdir resumed>) = 0 [pid 375] rmdir("./1" [pid 373] rmdir("./1/file0" [pid 456] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 421] <... clone resumed>, parent_tid=[459], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 459 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 421] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 375] mkdir("./2", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 421] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 421] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(3 [pid 375] <... mkdir resumed>) = 0 [pid 373] getdents64(3, [pid 376] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 376] rmdir("./1" [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] <... openat resumed>) = 3 ./strace-static-x86_64: Process 457 attached [pid 376] <... rmdir resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 376] mkdir("./2", 0777 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 376] <... mkdir resumed>) = 0 [pid 375] close(3 [pid 373] <... close resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 375] <... close resumed>) = 0 [pid 373] rmdir("./1" [pid 376] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 457] set_robust_list(0x5555569495e0, 24 [pid 373] <... rmdir resumed>) = 0 [pid 457] <... set_robust_list resumed>) = 0 [pid 457] chdir("./2" [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] mkdir("./2", 0777 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 460 [pid 457] <... chdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 376] close(3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... openat resumed>) = 3 [pid 457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 461 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 457] setpgid(0, 0 [pid 373] close(3 [pid 457] <... setpgid resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 457] <... openat resumed>) = 3 [pid 457] write(3, "1000", 4 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 462 [pid 457] <... write resumed>) = 4 [pid 457] close(3) = 0 [pid 457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 457] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 457] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 460 attached [pid 457] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 460] set_robust_list(0x5555569495e0, 24) = 0 [pid 457] <... clone resumed>, parent_tid=[463], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 463 [pid 460] chdir("./2" [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 461 attached [pid 460] <... chdir resumed>) = 0 [pid 457] <... futex resumed>) = 0 ./strace-static-x86_64: Process 459 attached [pid 461] set_robust_list(0x5555569495e0, 24 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 462 attached [pid 461] <... set_robust_list resumed>) = 0 [pid 460] <... prctl resumed>) = 0 [pid 459] set_robust_list(0x7f70edcbc9e0, 24 [pid 461] chdir("./2" [pid 460] setpgid(0, 0 [pid 459] <... set_robust_list resumed>) = 0 [pid 462] set_robust_list(0x5555569495e0, 24 [pid 461] <... chdir resumed>) = 0 [pid 460] <... setpgid resumed>) = 0 [pid 461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 [pid 460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 460] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[464], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 464 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 463] memfd_create("syzkaller", 0) = 3 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 464] memfd_create("syzkaller", 0) = 3 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 462] <... set_robust_list resumed>) = 0 [pid 461] <... prctl resumed>) = 0 [pid 461] setpgid(0, 0 [pid 462] chdir("./2" [pid 461] <... setpgid resumed>) = 0 [pid 462] <... chdir resumed>) = 0 [pid 461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 461] <... openat resumed>) = 3 [pid 462] <... prctl resumed>) = 0 [pid 461] write(3, "1000", 4 [pid 462] setpgid(0, 0 [pid 461] <... write resumed>) = 4 [pid 462] <... setpgid resumed>) = 0 [pid 461] close(3 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 461] <... close resumed>) = 0 [pid 462] <... openat resumed>) = 3 [pid 461] symlink("/dev/binderfs", "./binderfs" [pid 462] write(3, "1000", 4 [pid 461] <... symlink resumed>) = 0 [pid 462] <... write resumed>) = 4 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] close(3 [pid 461] <... futex resumed>) = 0 [pid 462] <... close resumed>) = 0 [pid 461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 462] symlink("/dev/binderfs", "./binderfs" [pid 461] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 461] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 462] <... symlink resumed>) = 0 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... clone resumed>, parent_tid=[465], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 465 [pid 462] <... futex resumed>) = 0 [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 461] <... futex resumed>) = 0 [pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 462] <... mmap resumed>) = 0x7f70f5fbd000 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 458 attached [pid 462] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] set_robust_list(0x7f70f5fdd9e0, 24 [pid 464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 462] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 458] <... set_robust_list resumed>) = 0 [pid 462] <... clone resumed>, parent_tid=[466], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 466 ./strace-static-x86_64: Process 465 attached [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] memfd_create("syzkaller", 0 [pid 465] set_robust_list(0x7f70f5fdd9e0, 24 [pid 462] <... futex resumed>) = 0 [pid 458] <... memfd_create resumed>) = 3 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 465] <... set_robust_list resumed>) = 0 [pid 458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 465] memfd_create("syzkaller", 0 [pid 458] <... mmap resumed>) = 0x7f70edbbd000 [pid 465] <... memfd_create resumed>) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 466] memfd_create("syzkaller", 0) = 3 [pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 463] <... write resumed>) = 1048576 [pid 463] munmap(0x7f70edbbd000, 1048576) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 421] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 463] ioctl(4, LOOP_SET_FD, 3 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 464] <... write resumed>) = 1048576 [pid 466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 464] munmap(0x7f70edbbd000, 1048576) = 0 [pid 458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 464] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 463] <... ioctl resumed>) = 0 [pid 464] <... openat resumed>) = 4 [pid 464] ioctl(4, LOOP_SET_FD, 3 [pid 463] close(3) = 0 [pid 463] mkdir("./file0", 0777) = 0 [pid 463] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 466] <... write resumed>) = 1048576 [pid 464] <... ioctl resumed>) = 0 [pid 458] <... write resumed>) = 1048576 [pid 464] close(3) = 0 [pid 464] mkdir("./file0", 0777) = 0 [pid 458] munmap(0x7f70edbbd000, 1048576 [ 20.646774][ T459] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 464] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 458] <... munmap resumed>) = 0 [pid 465] <... write resumed>) = 1048576 [pid 459] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 458] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 466] munmap(0x7f70edbbd000, 1048576) = 0 [pid 466] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 466] ioctl(4, LOOP_SET_FD, 3 [pid 465] munmap(0x7f70edbbd000, 1048576 [pid 427] <... futex resumed>) = ? [pid 465] <... munmap resumed>) = 0 [pid 427] +++ killed by SIGBUS +++ [pid 466] <... ioctl resumed>) = 0 [pid 466] close(3) = 0 [pid 466] mkdir("./file0", 0777 [pid 458] <... openat resumed>) = 4 [pid 466] <... mkdir resumed>) = 0 [pid 466] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 465] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 458] ioctl(4, LOOP_SET_FD, 3 [pid 465] <... openat resumed>) = 4 [pid 459] +++ killed by SIGBUS +++ [pid 458] <... ioctl resumed>) = 0 [pid 421] +++ killed by SIGBUS +++ [pid 458] close(3) = 0 [pid 458] mkdir("./file0", 0777) = 0 [pid 458] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 465] ioctl(4, LOOP_SET_FD, 3 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=421, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 465] <... ioctl resumed>) = 0 [pid 463] <... mount resumed>) = 0 [pid 372] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] close(3) = 0 [pid 465] mkdir("./file0", 0777) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] fstat(3, [pid 465] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 463] chdir("./file0") = 0 [pid 463] ioctl(4, LOOP_CLR_FD) = 0 [pid 463] close(4) = 0 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... mount resumed>) = 0 [pid 457] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... openat resumed>) = 3 [pid 457] <... futex resumed>) = 1 [pid 372] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 464] chdir("./file0" [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./1/binderfs" [pid 464] <... chdir resumed>) = 0 [pid 464] ioctl(4, LOOP_CLR_FD) = 0 [pid 464] close(4) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 372] <... unlink resumed>) = 0 [pid 466] <... mount resumed>) = 0 [pid 463] <... futex resumed>) = 0 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 463] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 466] <... openat resumed>) = 3 [pid 464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 466] chdir("./file0") = 0 [pid 463] <... open resumed>) = 4 [pid 466] ioctl(4, LOOP_CLR_FD [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... open resumed>) = 4 [pid 463] <... futex resumed>) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... write resumed>) = 9 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] open("./bus", O_RDWR [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... open resumed>) = 5 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... mmap resumed>) = 0x20000000 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] write(4, 0x20000f80, 9 [pid 457] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... write resumed>) = 9 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 463] <... futex resumed>) = 0 [pid 457] <... mmap resumed>) = 0x7f70edc9c000 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 457] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[482], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 482 [pid 457] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 482 attached [pid 482] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 20.713269][ T463] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 20.724677][ T464] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 20.738309][ T466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.751419][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 460] <... futex resumed>) = 0 [pid 458] <... mount resumed>) = 0 [pid 482] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 463] <... futex resumed>) = ? [pid 457] <... futex resumed>) = ? [pid 463] +++ killed by SIGBUS +++ [pid 482] +++ killed by SIGBUS +++ [pid 457] +++ killed by SIGBUS +++ [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 1 [pid 464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... write resumed>) = 9 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 464] open("./bus", O_RDWR [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... open resumed>) = 5 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... mmap resumed>) = 0x20000000 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] write(4, 0x20000f80, 9 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... write resumed>) = 9 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 460] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[483], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 483 [pid 460] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 465] <... mount resumed>) = 0 [pid 458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=457, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 458] <... openat resumed>) = 3 [pid 458] chdir("./file0") = 0 [pid 377] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 458] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./2/binderfs") = 0 [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 465] chdir("./file0") = 0 [pid 465] ioctl(4, LOOP_CLR_FD [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 466] <... ioctl resumed>) = 0 [pid 458] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 464] <... futex resumed>) = ? [pid 466] close(4 [pid 460] <... futex resumed>) = ? [pid 458] close(4 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] <... close resumed>) = 0 [pid 465] <... ioctl resumed>) = 0 [pid 458] <... close resumed>) = 0 [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./1/file0", [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 466] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 466] <... open resumed>) = 4 [pid 458] <... open resumed>) = 4 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] fstat(4, [pid 466] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 466] <... write resumed>) = 9 [pid 458] <... write resumed>) = 9 [pid 372] getdents64(4, [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] close(4 [pid 466] open("./bus", O_RDWR [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] open("./bus", O_RDWR [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 466] <... open resumed>) = 5 [pid 458] <... open resumed>) = 5 [pid 372] rmdir("./1/file0" [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] close(4 [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] +++ killed by SIGBUS +++ [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] close(3 [pid 483] +++ killed by SIGBUS +++ [pid 466] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] +++ killed by SIGBUS +++ [pid 458] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 466] <... mmap resumed>) = 0x20000000 [pid 458] <... mmap resumed>) = 0x20000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=460, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] rmdir("./1" [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] mkdir("./2", 0777 [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... mkdir resumed>) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 466] write(4, 0x20000f80, 9 [pid 462] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] write(4, 0x20000f80, 9 [pid 456] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 466] <... write resumed>) = 9 [pid 462] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 458] <... write resumed>) = 9 [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 3 [pid 466] <... futex resumed>) = 0 [pid 462] <... mmap resumed>) = 0x7f70edc9c000 [pid 458] <... futex resumed>) = 0 [pid 456] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] fstat(3, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 462] <... mprotect resumed>) = 0 [pid 456] <... mprotect resumed>) = 0 [pid 375] getdents64(3, [pid 462] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 456] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 462] <... clone resumed>, parent_tid=[484], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 484 [pid 456] <... clone resumed>, parent_tid=[485], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 485 [pid 375] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 462] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./2/binderfs", ./strace-static-x86_64: Process 485 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 485] set_robust_list(0x7f70edcbc9e0, 24 [pid 375] unlink("./2/binderfs" [pid 485] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 484 attached [pid 375] <... unlink resumed>) = 0 [ 20.754904][ T482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.761541][ T465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 20.781467][ T483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 484] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 485] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 458] <... futex resumed>) = ? [pid 456] <... futex resumed>) = ? [pid 458] +++ killed by SIGBUS +++ [pid 485] +++ killed by SIGBUS +++ [pid 456] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=456, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./2/binderfs") = 0 [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 466] <... futex resumed>) = ? [pid 462] <... futex resumed>) = ? [pid 466] +++ killed by SIGBUS +++ [pid 484] +++ killed by SIGBUS +++ [pid 462] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=462, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./2/binderfs") = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./2/file0", [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 465] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 465] <... write resumed>) = 9 [pid 377] getdents64(4, [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] close(4 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] rmdir("./2/file0" [pid 465] open("./bus", O_RDWR [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 465] <... open resumed>) = 5 [pid 377] getdents64(3, [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] close(3 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] rmdir("./2" [pid 465] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 465] <... mmap resumed>) = 0x20000000 [pid 377] mkdir("./3", 0777 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 465] write(4, 0x20000f80, 9 [pid 461] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 465] <... write resumed>) = 9 [pid 461] <... mmap resumed>) = 0x7f70edc9c000 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 465] <... futex resumed>) = 0 [pid 461] <... mprotect resumed>) = 0 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[486], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 486 [ 20.816438][ T485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.818002][ T484] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 461] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 486] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 465] <... futex resumed>) = ? [pid 461] <... futex resumed>) = ? [pid 465] +++ killed by SIGBUS +++ [pid 486] +++ killed by SIGBUS +++ [pid 461] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=461, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./2/binderfs") = 0 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 375] lstat("./2/file0", [pid 377] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 487 [pid 375] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./2/file0"./strace-static-x86_64: Process 487 attached ) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./2") = 0 [pid 375] mkdir("./3", 0777 [pid 487] set_robust_list(0x5555569495e0, 24 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 487] <... set_robust_list resumed>) = 0 [pid 487] chdir("./3") = 0 [pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 487] setpgid(0, 0) = 0 [pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 487] write(3, "1000", 4) = 4 [pid 487] close(3) = 0 [pid 487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 487] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 487] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 488 attached , parent_tid=[488], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 488 [pid 488] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 488] memfd_create("syzkaller", 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 488] <... memfd_create resumed>) = 3 [pid 488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 488] munmap(0x7f70edbbd000, 1048576) = 0 [pid 488] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./2/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./2") = 0 [pid 373] mkdir("./3", 0777) = 0 [ 20.867340][ T486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 372] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 489 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 490 [pid 488] <... openat resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 488] ioctl(4, LOOP_SET_FD, 3 [pid 374] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 490 attached [pid 374] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 490] set_robust_list(0x5555569495e0, 24 [pid 374] <... openat resumed>) = 4 [pid 490] <... set_robust_list resumed>) = 0 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 490] chdir("./3" [pid 374] close(4 [pid 490] <... chdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] rmdir("./2/file0" [pid 490] <... prctl resumed>) = 0 [pid 490] setpgid(0, 0) = 0 [pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... rmdir resumed>) = 0 [pid 490] <... openat resumed>) = 3 [pid 374] getdents64(3, [pid 490] write(3, "1000", 4./strace-static-x86_64: Process 489 attached [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 490] <... write resumed>) = 4 [pid 374] rmdir("./2" [pid 490] close(3) = 0 [pid 490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] <... rmdir resumed>) = 0 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./3", 0777 [pid 490] <... futex resumed>) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 490] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 490] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 491 attached [pid 491] set_robust_list(0x7f70f5fdd9e0, 24 [pid 490] <... clone resumed>, parent_tid=[491], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 491 [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] set_robust_list(0x5555569495e0, 24 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 491] <... set_robust_list resumed>) = 0 [pid 489] <... set_robust_list resumed>) = 0 [pid 489] chdir("./2" [pid 491] memfd_create("syzkaller", 0 [pid 489] <... chdir resumed>) = 0 [pid 489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 489] setpgid(0, 0) = 0 [pid 489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 489] write(3, "1000", 4) = 4 [pid 489] close(3) = 0 [pid 489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 489] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 489] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 492 attached [pid 491] <... memfd_create resumed>) = 3 [pid 489] <... clone resumed>, parent_tid=[492], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 492 [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 492] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 492] memfd_create("syzkaller", 0 [pid 491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 492] <... memfd_create resumed>) = 3 [pid 492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 491] <... mmap resumed>) = 0x7f70edbbd000 [pid 491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 491] <... write resumed>) = 1048576 [pid 491] munmap(0x7f70edbbd000, 1048576) = 0 [pid 491] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 492] <... write resumed>) = 1048576 [pid 492] munmap(0x7f70edbbd000, 1048576) = 0 [pid 492] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 373] <... openat resumed>) = 3 [pid 492] <... openat resumed>) = 4 [pid 492] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 492] close(3) = 0 [pid 492] mkdir("./file0", 0777) = 0 [pid 492] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] ioctl(3, LOOP_CLR_FD [pid 488] <... ioctl resumed>) = 0 [pid 491] <... openat resumed>) = 4 [pid 488] close(3 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 488] <... close resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] close(3 [pid 488] mkdir("./file0", 0777 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 [pid 488] <... mkdir resumed>) = 0 [pid 374] close(3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 488] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 495 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 496 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./2/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./2") = 0 [pid 376] mkdir("./3", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 491] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3./strace-static-x86_64: Process 496 attached [pid 492] <... mount resumed>) = 0 ./strace-static-x86_64: Process 495 attached [pid 496] set_robust_list(0x5555569495e0, 24 [pid 492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 491] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 491] close(3 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 491] <... close resumed>) = 0 [pid 491] mkdir("./file0", 0777 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 500 [pid 491] <... mkdir resumed>) = 0 [pid 491] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x5555569495e0, 24) = 0 [pid 500] chdir("./3") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3 [pid 495] set_robust_list(0x5555569495e0, 24 [pid 492] <... openat resumed>) = 3 [pid 492] chdir("./file0") = 0 [pid 500] <... close resumed>) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 495] <... set_robust_list resumed>) = 0 [pid 492] ioctl(4, LOOP_CLR_FD) = 0 [pid 495] chdir("./3" [pid 492] close(4 [pid 500] <... mmap resumed>) = 0x7f70f5fbd000 [pid 500] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[502], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 502 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... set_robust_list resumed>) = 0 [pid 495] <... chdir resumed>) = 0 [pid 492] <... close resumed>) = 0 [pid 495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] chdir("./3" [pid 495] <... prctl resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 ./strace-static-x86_64: Process 502 attached [pid 500] <... futex resumed>) = 0 [pid 496] <... chdir resumed>) = 0 [pid 495] setpgid(0, 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] set_robust_list(0x7f70f5fdd9e0, 24 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 495] <... setpgid resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 502] <... set_robust_list resumed>) = 0 [pid 496] <... prctl resumed>) = 0 [pid 495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] memfd_create("syzkaller", 0 [pid 496] setpgid(0, 0 [pid 495] <... openat resumed>) = 3 [pid 492] <... open resumed>) = 4 [pid 502] <... memfd_create resumed>) = 3 [pid 496] <... setpgid resumed>) = 0 [pid 495] write(3, "1000", 4 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 495] <... write resumed>) = 4 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 [pid 502] <... mmap resumed>) = 0x7f70edbbd000 [pid 496] <... openat resumed>) = 3 [pid 495] close(3 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 496] write(3, "1000", 4 [pid 495] <... close resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 496] <... write resumed>) = 4 [pid 495] symlink("/dev/binderfs", "./binderfs" [pid 492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] close(3 [pid 495] <... symlink resumed>) = 0 [pid 492] <... write resumed>) = 9 [pid 496] <... close resumed>) = 0 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] symlink("/dev/binderfs", "./binderfs" [pid 495] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 [pid 496] <... symlink resumed>) = 0 [pid 495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... mmap resumed>) = 0x7f70f5fbd000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 495] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 492] open("./bus", O_RDWR [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... write resumed>) = 1048576 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 495] <... mprotect resumed>) = 0 [pid 492] <... open resumed>) = 5 [pid 491] <... mount resumed>) = 0 [pid 502] munmap(0x7f70edbbd000, 1048576 [pid 496] <... mmap resumed>) = 0x7f70f5fbd000 [pid 495] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 502] <... munmap resumed>) = 0 [pid 496] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 495] <... clone resumed>, parent_tid=[506], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 506 [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 506] memfd_create("syzkaller", 0) = 3 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 492] <... futex resumed>) = 1 [pid 502] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] <... mprotect resumed>) = 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 491] <... openat resumed>) = 3 [pid 489] <... futex resumed>) = 0 [pid 488] <... mount resumed>) = 0 [pid 502] <... openat resumed>) = 4 [pid 502] ioctl(4, LOOP_SET_FD, 3 [pid 496] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 491] chdir("./file0" [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 491] <... chdir resumed>) = 0 [pid 492] <... futex resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 502] <... ioctl resumed>) = 0 [pid 492] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 496] <... clone resumed>, parent_tid=[508], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 508 [pid 491] ioctl(4, LOOP_CLR_FD [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... mmap resumed>) = 0x20000000 [pid 491] <... ioctl resumed>) = 0 [pid 502] close(3 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 491] close(4 [pid 502] <... close resumed>) = 0 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 491] <... close resumed>) = 0 [pid 489] <... futex resumed>) = 0 [pid 488] <... openat resumed>) = 3 [pid 502] mkdir("./file0", 0777 [pid 506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 508] memfd_create("syzkaller", 0) = 3 [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] write(4, 0x20000f80, 9 [pid 502] <... mkdir resumed>) = 0 [pid 489] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = 1 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] <... futex resumed>) = 0 [pid 489] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 492] <... write resumed>) = 9 [pid 489] <... futex resumed>) = 0 [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... mmap resumed>) = 0x7f70edc9c000 [pid 488] chdir("./file0" [pid 492] <... futex resumed>) = 0 [pid 489] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... chdir resumed>) = 0 [pid 489] <... mprotect resumed>) = 0 [pid 491] <... futex resumed>) = 0 [pid 490] <... futex resumed>) = 1 [pid 489] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 488] ioctl(4, LOOP_CLR_FD [pid 491] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... ioctl resumed>) = 0 [pid 489] <... clone resumed>, parent_tid=[509], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 509 [pid 488] close(4 [pid 489] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... open resumed>) = 4 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 491] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... write resumed>) = 9 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 ./strace-static-x86_64: Process 509 attached [pid 508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... mmap resumed>) = 0x7f70edbbd000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 488] <... close resumed>) = 0 [pid 506] <... write resumed>) = 1048576 [pid 491] open("./bus", O_RDWR [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] set_robust_list(0x7f70edcbc9e0, 24 [pid 491] <... open resumed>) = 5 [pid 509] <... set_robust_list resumed>) = 0 [pid 506] munmap(0x7f70edbbd000, 1048576 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = 1 [pid 490] <... futex resumed>) = 0 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [ 21.041888][ T492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 21.070244][ T491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.083205][ T488] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 488] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 491] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... mmap resumed>) = 0x20000000 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 491] write(4, 0x20000f80, 9 [pid 490] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 490] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] <... munmap resumed>) = 0 [pid 490] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[511], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 511 [pid 506] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 490] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... openat resumed>) = 4 [pid 490] <... futex resumed>) = 0 [pid 506] ioctl(4, LOOP_SET_FD, 3 [pid 490] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 509] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... write resumed>) = 1048576 [pid 508] munmap(0x7f70edbbd000, 1048576) = 0 [pid 508] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 492] <... futex resumed>) = ? [pid 489] <... futex resumed>) = ? [pid 492] +++ killed by SIGBUS +++ [pid 509] +++ killed by SIGBUS +++ [pid 489] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=489, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 488] <... open resumed>) = 4 [pid 372] <... restart_syscall resumed>) = 0 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./2/binderfs") = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 491] <... write resumed>) = 9 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... openat resumed>) = 4 [pid 506] <... ioctl resumed>) = 0 [pid 487] <... futex resumed>) = 0 [pid 508] ioctl(4, LOOP_SET_FD, 3 [pid 506] close(3 [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... close resumed>) = 0 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 506] mkdir("./file0", 0777 [pid 488] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] <... mkdir resumed>) = 0 [pid 506] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 491] <... futex resumed>) = ? [pid 490] <... futex resumed>) = ? [pid 491] +++ killed by SIGBUS +++ [pid 511] +++ killed by SIGBUS +++ [pid 490] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=490, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 488] <... write resumed>) = 9 [pid 375] fstat(3, [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 488] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 502] <... mount resumed>) = 0 [pid 488] open("./bus", O_RDWR [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 508] <... ioctl resumed>) = 0 [pid 502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 502] chdir("./file0") = 0 [pid 502] ioctl(4, LOOP_CLR_FD) = 0 [pid 502] close(4) = 0 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... futex resumed>) = 0 [pid 508] close(3 [pid 500] <... futex resumed>) = 0 [pid 488] <... open resumed>) = 5 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR) = 5 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 500] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[515], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 515 [pid 500] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] write(4, 0x20000f80, 9) = 9 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... close resumed>) = 0 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 508] mkdir("./file0", 0777 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... mkdir resumed>) = 0 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./3/binderfs", [pid 508] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 488] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 487] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... mmap resumed>) = 0x20000000 [pid 375] unlink("./3/binderfs" [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] write(4, 0x20000f80, 9 [pid 487] <... futex resumed>) = 0 [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 487] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] <... write resumed>) = 9 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 488] <... futex resumed>) = 0 [pid 487] <... mmap resumed>) = 0x7f70edc9c000 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 487] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[516], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 516 [pid 487] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 515 attached [ 21.119360][ T509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.125814][ T511] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.144418][ T502] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 515] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 516] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 488] <... futex resumed>) = ? [pid 487] <... futex resumed>) = ? [pid 488] +++ killed by SIGBUS +++ [pid 516] +++ killed by SIGBUS +++ [pid 487] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=487, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./3/binderfs") = 0 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 515] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 502] <... futex resumed>) = ? [pid 500] <... futex resumed>) = ? [pid 502] +++ killed by SIGBUS +++ [pid 515] +++ killed by SIGBUS +++ [pid 500] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=500, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./3/binderfs") = 0 [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] <... mount resumed>) = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 506] chdir("./file0") = 0 [pid 506] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./2/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./2") = 0 [pid 372] mkdir("./3", 0777) = 0 [ 21.168694][ T516] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.170500][ T515] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.199290][ T506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 508] <... mount resumed>) = 0 [pid 508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 508] chdir("./file0") = 0 [ 21.218792][ T508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 508] ioctl(4, LOOP_CLR_FD [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 506] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 521 ./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x5555569495e0, 24) = 0 [pid 506] close(4 [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 376] lstat("./3/file0", [pid 375] lstat("./3/file0", [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./3/file0", [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... open resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] fstat(4, [pid 375] <... openat resumed>) = 4 [pid 506] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] fstat(4, [pid 521] chdir("./3" [pid 506] <... write resumed>) = 9 [pid 377] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] getdents64(4, [pid 375] getdents64(4, [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(4 [pid 375] getdents64(4, [pid 506] open("./bus", O_RDWR [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... chdir resumed>) = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 521] setpgid(0, 0) = 0 [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 506] <... open resumed>) = 5 [pid 521] <... openat resumed>) = 3 [pid 521] write(3, "1000", 4) = 4 [pid 521] close(3) = 0 [pid 521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 521] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./3/file0" [pid 375] close(4 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 508] <... ioctl resumed>) = 0 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 521] <... mmap resumed>) = 0x7f70f5fbd000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 521] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 506] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] getdents64(3, [pid 375] rmdir("./3/file0" [pid 521] <... mprotect resumed>) = 0 [pid 506] <... mmap resumed>) = 0x20000000 [pid 377] close(4 [pid 521] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 521] <... clone resumed>, parent_tid=[522], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 522 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] rmdir("./3/file0" [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 521] <... futex resumed>) = 0 [pid 506] write(4, 0x20000f80, 9 [pid 495] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./3" [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 495] <... futex resumed>) = 0 [pid 508] close(4) = 0 [pid 506] <... write resumed>) = 9 [pid 495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] close(3 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 508] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 506] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 495] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... rmdir resumed>) = 0 [pid 376] mkdir("./4", 0777 [pid 375] rmdir("./3" [pid 508] <... open resumed>) = 4 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... mprotect resumed>) = 0 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 508] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 508] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... clone resumed>, parent_tid=[523], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 523 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] mkdir("./4", 0777 [pid 495] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 376] <... openat resumed>) = 3 [pid 508] <... write resumed>) = 9 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 508] open("./bus", O_RDWR [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 508] <... open resumed>) = 5 [pid 496] <... futex resumed>) = 0 [pid 495] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./3" [pid 376] close(3 [pid 375] <... openat resumed>) = 3 [pid 508] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... mmap resumed>) = 0x20000000 [pid 496] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mkdir("./4", 0777 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 508] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] write(4, 0x20000f80, 9 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... write resumed>) = 9 [pid 496] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 375] close(3 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 508] <... futex resumed>) = 0 [pid 496] <... mmap resumed>) = 0x7f70edc9c000 [pid 508] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] <... close resumed>) = 0 [pid 496] <... mprotect resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 524 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 496] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] ioctl(3, LOOP_CLR_FD [pid 496] <... clone resumed>, parent_tid=[525], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 525 [pid 496] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 496] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 526 [pid 496] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x5555569495e0, 24) = 0 [pid 524] chdir("./4") = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 527 [pid 524] <... openat resumed>) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 524] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[528], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 528 [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 528] memfd_create("syzkaller", 0) = 3 [pid 528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 526 attached ./strace-static-x86_64: Process 527 attached [pid 526] set_robust_list(0x5555569495e0, 24 [pid 527] set_robust_list(0x5555569495e0, 24 [pid 526] <... set_robust_list resumed>) = 0 [pid 527] <... set_robust_list resumed>) = 0 [pid 526] chdir("./4" [pid 527] chdir("./4"./strace-static-x86_64: Process 523 attached [pid 526] <... chdir resumed>) = 0 [pid 523] set_robust_list(0x7f70edcbc9e0, 24 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 527] <... chdir resumed>) = 0 [pid 523] <... set_robust_list resumed>) = 0 [pid 526] <... prctl resumed>) = 0 [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 526] setpgid(0, 0 [pid 528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 528] munmap(0x7f70edbbd000, 1048576) = 0 [pid 528] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 528] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 528] close(3) = 0 [pid 528] mkdir("./file0", 0777) = 0 [pid 528] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 522] memfd_create("syzkaller", 0) = 3 [pid 522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 526] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 525 attached [pid 527] <... prctl resumed>) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 527] setpgid(0, 0 [pid 525] set_robust_list(0x7f70edcbc9e0, 24 [pid 527] <... setpgid resumed>) = 0 [pid 526] <... openat resumed>) = 3 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 526] write(3, "1000", 4 [pid 525] <... set_robust_list resumed>) = 0 [pid 527] <... openat resumed>) = 3 [pid 526] <... write resumed>) = 4 [pid 527] write(3, "1000", 4 [pid 522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 522] munmap(0x7f70edbbd000, 1048576) = 0 [pid 522] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 522] ioctl(4, LOOP_SET_FD, 3 [pid 523] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 526] close(3) = 0 [pid 526] symlink("/dev/binderfs", "./binderfs" [pid 506] <... futex resumed>) = ? [pid 527] <... write resumed>) = 4 [pid 495] <... futex resumed>) = ? [pid 527] close(3) = 0 [pid 527] symlink("/dev/binderfs", "./binderfs" [pid 506] +++ killed by SIGBUS +++ [pid 527] <... symlink resumed>) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] close(3 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 522] <... close resumed>) = 0 [pid 527] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] mkdir("./file0", 0777 [pid 527] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 522] <... mkdir resumed>) = 0 [pid 522] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 527] <... clone resumed>, parent_tid=[532], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 532 [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 523] +++ killed by SIGBUS +++ [pid 495] +++ killed by SIGBUS +++ [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... futex resumed>) = ? [pid 496] <... futex resumed>) = ? [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=495, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 525] +++ killed by SIGBUS +++ [pid 508] +++ killed by SIGBUS +++ [pid 496] +++ killed by SIGBUS +++ [pid 373] <... restart_syscall resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=496, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 526] <... symlink resumed>) = 0 [pid 374] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 373] fstat(3, [pid 374] fstat(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./3/binderfs", [pid 373] lstat("./3/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./3/binderfs" [pid 373] unlink("./3/binderfs" [pid 526] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... unlink resumed>) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... unlink resumed>) = 0 [pid 526] <... mmap resumed>) = 0x7f70f5fbd000 [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 526] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 532 attached ./strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] <... clone resumed>, parent_tid=[534], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 534 [ 21.375126][ T523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.393383][ T525] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.415549][ T528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 532] set_robust_list(0x7f70f5fdd9e0, 24 [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 534] <... futex resumed>) = 0 [pid 534] memfd_create("syzkaller", 0) = 3 [pid 532] <... set_robust_list resumed>) = 0 [pid 534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 532] memfd_create("syzkaller", 0) = 3 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 528] <... mount resumed>) = 0 [pid 532] <... mmap resumed>) = 0x7f70edbbd000 [pid 528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 528] <... openat resumed>) = 3 [pid 528] chdir("./file0") = 0 [pid 528] ioctl(4, LOOP_CLR_FD [pid 522] <... mount resumed>) = 0 [pid 522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 522] chdir("./file0") = 0 [pid 522] ioctl(4, LOOP_CLR_FD [pid 534] <... write resumed>) = 1048576 [pid 534] munmap(0x7f70edbbd000, 1048576) = 0 [pid 534] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 532] <... write resumed>) = 1048576 [pid 532] munmap(0x7f70edbbd000, 1048576) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./3/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./3") = 0 [pid 374] mkdir("./4", 0777) = 0 [ 21.426445][ T522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 534] <... openat resumed>) = 4 [pid 532] <... openat resumed>) = 4 [pid 528] <... ioctl resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 522] close(4) = 0 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 534] ioctl(4, LOOP_SET_FD, 3 [pid 532] ioctl(4, LOOP_SET_FD, 3 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] close(4) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 524] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 4 [pid 532] <... ioctl resumed>) = 0 [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = 1 [pid 373] fstat(4, [pid 532] close(3 [pid 528] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [pid 522] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 532] <... close resumed>) = 0 [pid 528] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 532] mkdir("./file0", 0777 [pid 528] <... open resumed>) = 4 [pid 522] <... open resumed>) = 4 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 532] <... mkdir resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 532] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./3/file0" [pid 528] <... write resumed>) = 9 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 534] <... ioctl resumed>) = 0 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] open("./bus", O_RDWR [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./3" [pid 528] <... open resumed>) = 5 [pid 373] <... rmdir resumed>) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./4", 0777 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 534] close(3 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 374] close(3 [pid 373] <... openat resumed>) = 3 [pid 528] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] ioctl(3, LOOP_CLR_FD [pid 528] <... mmap resumed>) = 0x20000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 534] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 528] write(4, 0x20000f80, 9 [pid 524] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 539 [pid 534] mkdir("./file0", 0777 [pid 528] <... write resumed>) = 9 [pid 524] <... futex resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] <... write resumed>) = 9 [pid 534] <... mkdir resumed>) = 0 [pid 528] <... futex resumed>) = 0 [pid 524] <... mmap resumed>) = 0x7f70edc9c000 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 534] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 540 [pid 524] <... clone resumed>, parent_tid=[541], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 541 [pid 524] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 540 attached [pid 522] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] open("./bus", O_RDWR [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] set_robust_list(0x5555569495e0, 24) = 0 [pid 540] chdir("./4") = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 540] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... clone resumed>, parent_tid=[542], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 542 [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 522] <... open resumed>) = 5 ./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x5555569495e0, 24) = 0 [pid 539] chdir("./4") = 0 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 539] setpgid(0, 0) = 0 [pid 539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 521] <... futex resumed>) = 0 [pid 522] <... mmap resumed>) = 0x20000000 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] write(4, 0x20000f80, 9 [pid 521] <... futex resumed>) = 0 [pid 522] <... write resumed>) = 9 [pid 521] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... mmap resumed>) = 0x7f70edc9c000 [pid 521] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 539] write(3, "1000", 4 [pid 521] <... clone resumed>, parent_tid=[544], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 544 [pid 521] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... write resumed>) = 4 [pid 539] close(3) = 0 [pid 539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 539] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 539] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[546], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 546 [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 541 attached ./strace-static-x86_64: Process 542 attached ./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 546] memfd_create("syzkaller", 0) = 3 [pid 546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 542] set_robust_list(0x7f70f5fdd9e0, 24 [pid 541] set_robust_list(0x7f70edcbc9e0, 24 [pid 534] <... mount resumed>) = 0 [pid 532] <... mount resumed>) = 0 [pid 546] <... write resumed>) = 1048576 [pid 542] <... set_robust_list resumed>) = 0 [pid 541] <... set_robust_list resumed>) = 0 [pid 534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 546] munmap(0x7f70edbbd000, 1048576 [pid 544] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 542] memfd_create("syzkaller", 0 [pid 534] <... openat resumed>) = 3 [pid 532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 542] <... memfd_create resumed>) = 3 [pid 534] chdir("./file0" [pid 542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 534] <... chdir resumed>) = 0 [pid 542] <... mmap resumed>) = 0x7f70edbbd000 [pid 534] ioctl(4, LOOP_CLR_FD) = 0 [pid 534] close(4) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 534] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... open resumed>) = 4 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 534] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... write resumed>) = 9 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... munmap resumed>) = 0 [pid 534] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 546] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... openat resumed>) = 4 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 546] ioctl(4, LOOP_SET_FD, 3 [pid 534] open("./bus", O_RDWR [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... open resumed>) = 5 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 546] <... ioctl resumed>) = 0 [pid 541] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 546] close(3 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 528] <... futex resumed>) = ? [pid 526] <... futex resumed>) = 0 [pid 546] <... close resumed>) = 0 [pid 534] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 528] +++ killed by SIGBUS +++ [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] mkdir("./file0", 0777 [pid 541] +++ killed by SIGBUS +++ [pid 534] <... mmap resumed>) = 0x20000000 [pid 524] +++ killed by SIGBUS +++ [pid 546] <... mkdir resumed>) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=524, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 546] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 534] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 534] write(4, 0x20000f80, 9 [pid 532] <... openat resumed>) = 3 [pid 526] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = ? [pid 534] <... write resumed>) = 9 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 534] <... futex resumed>) = 0 [pid 526] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 526] <... mprotect resumed>) = 0 [pid 376] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 526] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, [pid 526] <... clone resumed>, parent_tid=[551], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 551 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 526] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 526] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 532] chdir("./file0" [pid 526] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] +++ killed by SIGBUS +++ [pid 376] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 532] <... chdir resumed>) = 0 [pid 376] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 532] ioctl(4, LOOP_CLR_FD [pid 376] unlink("./4/binderfs") = 0 [pid 544] +++ killed by SIGBUS +++ [pid 532] <... ioctl resumed>) = 0 [pid 521] +++ killed by SIGBUS +++ [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 551 attached [pid 542] <... write resumed>) = 1048576 [pid 532] close(4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=521, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [ 21.550157][ T534] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.550214][ T532] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 21.563051][ T544] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.580979][ T541] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 551] set_robust_list(0x7f70edcbc9e0, 24 [pid 542] munmap(0x7f70edbbd000, 1048576 [pid 372] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 551] <... set_robust_list resumed>) = 0 [pid 542] <... munmap resumed>) = 0 [pid 542] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... openat resumed>) = 3 [pid 551] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 534] <... futex resumed>) = ? [pid 526] <... futex resumed>) = ? [pid 534] +++ killed by SIGBUS +++ [pid 551] +++ killed by SIGBUS +++ [pid 526] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=526, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./4/binderfs") = 0 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./3/binderfs") = 0 [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 546] <... mount resumed>) = 0 [pid 546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 546] chdir("./file0") = 0 [pid 546] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./4/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./4") = 0 [pid 376] mkdir("./5", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 553 ./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x5555569495e0, 24) = 0 [pid 553] chdir("./5") = 0 [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 553] setpgid(0, 0) = 0 [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 553] write(3, "1000", 4) = 4 [pid 553] close(3) = 0 [pid 553] symlink("/dev/binderfs", "./binderfs" [pid 542] <... openat resumed>) = 4 [pid 553] <... symlink resumed>) = 0 [pid 542] ioctl(4, LOOP_SET_FD, 3 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 553] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[554], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 554 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 554 attached ) = 0 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 554] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 554] memfd_create("syzkaller", 0) = 3 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 554] munmap(0x7f70edbbd000, 1048576) = 0 [ 21.616360][ T551] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.616701][ T546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 554] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 546] <... ioctl resumed>) = 0 [pid 532] <... close resumed>) = 0 [pid 546] close(4 [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... openat resumed>) = 4 [pid 546] <... close resumed>) = 0 [pid 542] <... ioctl resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] ioctl(4, LOOP_SET_FD, 3 [pid 542] close(3 [pid 539] <... futex resumed>) = 0 [pid 532] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 0 [pid 542] <... close resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 532] <... open resumed>) = 4 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 542] mkdir("./file0", 0777 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 542] <... mkdir resumed>) = 0 [pid 546] <... open resumed>) = 4 [pid 542] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] lstat("./4/file0", [pid 372] lstat("./3/file0", [pid 554] <... ioctl resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] close(3 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] <... close resumed>) = 0 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 554] mkdir("./file0", 0777 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... write resumed>) = 9 [pid 375] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 554] <... mkdir resumed>) = 0 [pid 546] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 372] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 554] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 546] <... write resumed>) = 9 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 372] <... openat resumed>) = 4 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(4, [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] open("./bus", O_RDWR [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... open resumed>) = 5 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 546] open("./bus", O_RDWR [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 372] getdents64(4, [pid 546] <... open resumed>) = 5 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(4 [pid 372] getdents64(4, [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... mmap resumed>) = 0x20000000 [pid 375] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 546] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./4/file0" [pid 372] close(4 [pid 546] <... mmap resumed>) = 0x20000000 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] write(4, 0x20000f80, 9 [pid 527] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./3/file0" [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... write resumed>) = 9 [pid 527] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 546] write(4, 0x20000f80, 9 [pid 539] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 546] <... write resumed>) = 9 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 527] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] close(3 [pid 372] <... rmdir resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... close resumed>) = 0 [pid 372] getdents64(3, [pid 546] <... futex resumed>) = 0 [pid 539] <... mmap resumed>) = 0x7f70edc9c000 [pid 527] <... mprotect resumed>) = 0 [pid 375] rmdir("./4" [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 527] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 539] <... mprotect resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 372] close(3 [pid 539] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 527] <... clone resumed>, parent_tid=[559], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 559 [pid 375] mkdir("./5", 0777./strace-static-x86_64: Process 560 attached [pid 527] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 539] <... clone resumed>, parent_tid=[560], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 560 [pid 527] <... futex resumed>) = 0 [pid 539] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 0 [pid 539] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 559 attached [pid 559] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 560] set_robust_list(0x7f70edcbc9e0, 24 [pid 542] <... mount resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 372] rmdir("./3" [pid 559] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 532] <... futex resumed>) = ? [pid 527] <... futex resumed>) = ? [pid 532] +++ killed by SIGBUS +++ [pid 559] +++ killed by SIGBUS +++ [pid 527] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=527, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 560] <... set_robust_list resumed>) = 0 [pid 554] <... mount resumed>) = 0 [pid 542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... restart_syscall resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] <... rmdir resumed>) = 0 [pid 542] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 372] mkdir("./4", 0777 [pid 542] chdir("./file0" [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] <... mkdir resumed>) = 0 [pid 542] <... chdir resumed>) = 0 [pid 377] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 542] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] close(3 [pid 372] <... openat resumed>) = 3 [pid 542] <... ioctl resumed>) = 0 [pid 377] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... close resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 542] close(4 [pid 377] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 542] <... close resumed>) = 0 [pid 377] fstat(3, [pid 372] close(3 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 563 [pid 372] <... close resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 542] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 540] <... futex resumed>) = 0 [pid 377] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 564 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 564 attached ./strace-static-x86_64: Process 563 attached [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 542] <... open resumed>) = 4 [pid 377] unlink("./4/binderfs" [pid 554] <... openat resumed>) = 3 [pid 546] <... futex resumed>) = ? [pid 539] <... futex resumed>) = ? [pid 564] set_robust_list(0x5555569495e0, 24 [pid 563] set_robust_list(0x5555569495e0, 24 [pid 554] chdir("./file0" [pid 546] +++ killed by SIGBUS +++ [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 554] <... chdir resumed>) = 0 [pid 560] +++ killed by SIGBUS +++ [pid 539] +++ killed by SIGBUS +++ [pid 554] ioctl(4, LOOP_CLR_FD) = 0 [pid 554] close(4 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=539, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 540] <... futex resumed>) = 0 [pid 554] <... close resumed>) = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... write resumed>) = 9 [pid 373] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 553] <... futex resumed>) = 0 [pid 554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 542] open("./bus", O_RDWR [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 542] <... open resumed>) = 5 [pid 540] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 554] <... open resumed>) = 4 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 553] <... futex resumed>) = 0 [pid 542] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... set_robust_list resumed>) = 0 [pid 563] chdir("./5" [pid 554] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 542] <... mmap resumed>) = 0x20000000 [pid 373] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./4/binderfs", [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 542] write(4, 0x20000f80, 9 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 540] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... chdir resumed>) = 0 [pid 542] <... write resumed>) = 9 [pid 373] unlink("./4/binderfs" [pid 554] <... write resumed>) = 9 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] <... unlink resumed>) = 0 [pid 542] <... futex resumed>) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... mmap resumed>) = 0x7f70edc9c000 [pid 563] <... prctl resumed>) = 0 [pid 540] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 563] setpgid(0, 0 [pid 553] <... futex resumed>) = 0 [pid 540] <... mprotect resumed>) = 0 [pid 554] <... futex resumed>) = 1 [pid 563] <... setpgid resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 553] <... futex resumed>) = 0 [pid 554] open("./bus", O_RDWR [pid 563] <... openat resumed>) = 3 [pid 563] write(3, "1000", 4) = 4 [pid 563] close(3 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... clone resumed>, parent_tid=[565], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 565 [pid 540] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... close resumed>) = 0 [pid 540] <... futex resumed>) = 0 [pid 563] symlink("/dev/binderfs", "./binderfs" [pid 540] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... symlink resumed>) = 0 [pid 554] <... open resumed>) = 5 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 563] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 563] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[566], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 566 [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... mmap resumed>) = 0x20000000 [pid 563] <... futex resumed>) = 0 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 566] memfd_create("syzkaller", 0) = 3 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 565 attached [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] write(4, 0x20000f80, 9 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 554] <... write resumed>) = 9 [pid 553] <... mmap resumed>) = 0x7f70edc9c000 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 554] <... futex resumed>) = 0 [pid 553] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] <... clone resumed>, parent_tid=[567], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 567 [pid 553] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] chdir("./4" [pid 565] set_robust_list(0x7f70edcbc9e0, 24 [pid 564] <... chdir resumed>) = 0 [pid 565] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 567 attached [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 564] setpgid(0, 0) = 0 [ 21.733630][ T542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 21.734253][ T559] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.748716][ T554] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 21.760720][ T560] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 566] munmap(0x7f70edbbd000, 1048576) = 0 [pid 566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 567] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 564] write(3, "1000", 4) = 4 [pid 564] close(3) = 0 [pid 564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 564] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[568], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 568 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 568 attached [pid 568] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 568] memfd_create("syzkaller", 0) = 3 [pid 568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 568] munmap(0x7f70edbbd000, 1048576) = 0 [pid 568] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 565] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 540] <... futex resumed>) = ? [pid 542] <... futex resumed>) = ? [pid 542] +++ killed by SIGBUS +++ [pid 565] +++ killed by SIGBUS +++ [pid 540] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=540, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./4/binderfs") = 0 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 567] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 554] <... futex resumed>) = 230 [pid 553] <... futex resumed>) = ? [pid 554] +++ killed by SIGBUS +++ [pid 567] +++ killed by SIGBUS +++ [pid 553] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=553, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] lstat("./4/file0", [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./5/binderfs" [pid 377] <... openat resumed>) = 4 [pid 376] <... unlink resumed>) = 0 [pid 377] fstat(4, [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./4/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./4") = 0 [pid 377] mkdir("./5", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 568] <... openat resumed>) = 4 [pid 566] <... openat resumed>) = 4 [pid 568] ioctl(4, LOOP_SET_FD, 3 [pid 566] ioctl(4, LOOP_SET_FD, 3 [pid 568] <... ioctl resumed>) = 0 [pid 568] close(3) = 0 [pid 568] mkdir("./file0", 0777) = 0 [ 21.795998][ T565] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.810935][ T567] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 568] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./4/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./4") = 0 [pid 373] mkdir("./5", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 566] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 377] close(3 [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 566] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] mkdir("./file0", 0777 [pid 376] getdents64(4, [pid 566] <... mkdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] close(4 [pid 374] lstat("./4/file0", [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./5/file0") = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./5" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... rmdir resumed>) = 0 [pid 376] mkdir("./6", 0777 [pid 374] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./4/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./4") = 0 [pid 374] mkdir("./5", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 568] <... mount resumed>) = 0 [pid 568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 568] chdir("./file0") = 0 [pid 568] ioctl(4, LOOP_CLR_FD [pid 376] <... openat resumed>) = 3 [pid 568] <... ioctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 568] close(4 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 568] <... close resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 574 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 373] close(3 [pid 564] <... futex resumed>) = 1 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 573 [pid 376] <... close resumed>) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 576 ./strace-static-x86_64: Process 576 attached [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 577 [pid 576] set_robust_list(0x5555569495e0, 24) = 0 [pid 576] chdir("./6") = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 576] write(3, "1000", 4) = 4 [pid 576] close(3 [pid 568] <... futex resumed>) = 0 [pid 568] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 576] <... close resumed>) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 568] <... open resumed>) = 4 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... mmap resumed>) = 0x7f70f5fbd000 [pid 576] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 573 attached ) = 0 [pid 568] <... write resumed>) = 9 [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 577 attached [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [ 21.930783][ T568] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ./strace-static-x86_64: Process 579 attached ./strace-static-x86_64: Process 574 attached [pid 577] set_robust_list(0x5555569495e0, 24 [pid 573] set_robust_list(0x5555569495e0, 24 [pid 568] open("./bus", O_RDWR [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... set_robust_list resumed>) = 0 [pid 568] <... open resumed>) = 5 [pid 577] chdir("./5" [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... chdir resumed>) = 0 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... prctl resumed>) = 0 [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 577] setpgid(0, 0 [pid 568] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... setpgid resumed>) = 0 [pid 568] <... mmap resumed>) = 0x20000000 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... openat resumed>) = 3 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 577] write(3, "1000", 4 [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... write resumed>) = 4 [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 577] close(3 [pid 568] write(4, 0x20000f80, 9 [pid 564] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... close resumed>) = 0 [pid 564] <... futex resumed>) = 0 [pid 577] symlink("/dev/binderfs", "./binderfs" [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 577] <... symlink resumed>) = 0 [pid 564] <... mmap resumed>) = 0x7f70edc9c000 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 577] <... futex resumed>) = 0 [pid 564] <... mprotect resumed>) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 564] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 577] <... mmap resumed>) = 0x7f70f5fbd000 [pid 577] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 564] <... clone resumed>, parent_tid=[580], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 580 [pid 577] <... mprotect resumed>) = 0 [pid 564] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... clone resumed>, parent_tid=[581], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 581 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 580 attached [pid 580] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 581 attached [pid 579] set_robust_list(0x7f70f5fdd9e0, 24 [pid 576] <... clone resumed>, parent_tid=[579], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 579 [pid 574] set_robust_list(0x5555569495e0, 24 [pid 573] <... set_robust_list resumed>) = 0 [pid 568] <... write resumed>) = 9 [pid 566] <... mount resumed>) = 0 [pid 579] <... set_robust_list resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... set_robust_list resumed>) = 0 [pid 573] chdir("./5" [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] memfd_create("syzkaller", 0 [pid 576] <... futex resumed>) = 0 [pid 574] chdir("./5" [pid 573] <... chdir resumed>) = 0 [pid 568] <... futex resumed>) = 0 [pid 579] <... memfd_create resumed>) = 3 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 574] <... chdir resumed>) = 0 [pid 573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 573] <... prctl resumed>) = 0 [pid 579] <... mmap resumed>) = 0x7f70edbbd000 [pid 574] <... prctl resumed>) = 0 [pid 573] setpgid(0, 0 [pid 579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 574] setpgid(0, 0 [pid 573] <... setpgid resumed>) = 0 [pid 574] <... setpgid resumed>) = 0 [pid 573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 573] <... openat resumed>) = 3 [pid 574] <... openat resumed>) = 3 [pid 573] write(3, "1000", 4 [pid 574] write(3, "1000", 4 [pid 573] <... write resumed>) = 4 [pid 574] <... write resumed>) = 4 [pid 573] close(3 [pid 574] close(3 [pid 573] <... close resumed>) = 0 [pid 574] <... close resumed>) = 0 [pid 573] symlink("/dev/binderfs", "./binderfs" [pid 581] set_robust_list(0x7f70f5fdd9e0, 24 [pid 574] symlink("/dev/binderfs", "./binderfs" [pid 573] <... symlink resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 581] <... set_robust_list resumed>) = 0 [pid 580] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 574] <... symlink resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... openat resumed>) = 3 [pid 581] memfd_create("syzkaller", 0 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = ? [pid 566] chdir("./file0" [pid 564] <... futex resumed>) = ? [pid 581] <... memfd_create resumed>) = 3 [pid 574] <... futex resumed>) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] +++ killed by SIGBUS +++ [pid 566] <... chdir resumed>) = 0 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 579] <... write resumed>) = 1048576 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] <... mmap resumed>) = 0x7f70f5fbd000 [pid 566] ioctl(4, LOOP_CLR_FD [pid 581] <... mmap resumed>) = 0x7f70edbbd000 [pid 574] <... mmap resumed>) = 0x7f70f5fbd000 [pid 580] +++ killed by SIGBUS +++ [pid 573] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 566] <... ioctl resumed>) = 0 [pid 564] +++ killed by SIGBUS +++ [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 579] munmap(0x7f70edbbd000, 1048576 [pid 574] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 573] <... mprotect resumed>) = 0 [pid 566] close(4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=564, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 579] <... munmap resumed>) = 0 [pid 574] <... mprotect resumed>) = 0 [pid 573] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 566] <... close resumed>) = 0 [pid 579] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 574] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 579] <... openat resumed>) = 4 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 579] ioctl(4, LOOP_SET_FD, 3 [pid 574] <... clone resumed>, parent_tid=[583], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 583 [pid 573] <... clone resumed>, parent_tid=[582], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 582 [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = 0 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 0 ./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 582] memfd_create("syzkaller", 0) = 3 [pid 582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 579] <... ioctl resumed>) = 0 [pid 579] close(3) = 0 [pid 579] mkdir("./file0", 0777) = 0 [pid 566] <... open resumed>) = 4 [pid 372] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 372] fstat(3, [pid 566] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 579] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 566] <... write resumed>) = 9 [pid 372] getdents64(3, [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 566] open("./bus", O_RDWR [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 583] memfd_create("syzkaller", 0) = 3 [pid 583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 566] <... open resumed>) = 5 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./4/binderfs", [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] unlink("./4/binderfs" [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 566] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] <... mmap resumed>) = 0x20000000 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 566] write(4, 0x20000f80, 9 [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] <... write resumed>) = 9 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... mmap resumed>) = 0x7f70edc9c000 [pid 566] <... futex resumed>) = 0 [pid 563] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] <... mprotect resumed>) = 0 [pid 563] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[587], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 587 [pid 563] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 21.979716][ T566] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.983740][ T580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 582] <... write resumed>) = 1048576 [pid 583] <... write resumed>) = 1048576 [pid 582] munmap(0x7f70edbbd000, 1048576) = 0 [pid 582] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 583] munmap(0x7f70edbbd000, 1048576) = 0 [pid 583] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 581] <... write resumed>) = 1048576 [pid 581] munmap(0x7f70edbbd000, 1048576) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 566] <... futex resumed>) = ? [pid 563] <... futex resumed>) = ? [pid 566] +++ killed by SIGBUS +++ [pid 587] +++ killed by SIGBUS +++ [pid 563] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=563, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./5/binderfs", [pid 579] <... mount resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./5/binderfs" [pid 579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... unlink resumed>) = 0 [pid 579] <... openat resumed>) = 3 [pid 579] chdir("./file0") = 0 [pid 579] ioctl(4, LOOP_CLR_FD [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 583] <... openat resumed>) = 4 [pid 582] <... openat resumed>) = 4 [pid 581] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = 0 [pid 583] ioctl(4, LOOP_SET_FD, 3 [pid 582] ioctl(4, LOOP_SET_FD, 3 [pid 581] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./4/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./4") = 0 [pid 372] mkdir("./5", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 583] <... ioctl resumed>) = 0 [pid 583] close(3) = 0 [pid 583] mkdir("./file0", 0777) = 0 [pid 583] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 579] <... ioctl resumed>) = 0 [pid 579] close(4 [pid 581] <... ioctl resumed>) = 0 [pid 581] close(3) = 0 [pid 581] mkdir("./file0", 0777) = 0 [pid 581] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 582] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 582] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 582] <... close resumed>) = 0 [pid 582] mkdir("./file0", 0777) = 0 [ 22.035531][ T587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.040472][ T579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 582] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 579] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 579] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 579] <... open resumed>) = 4 ./strace-static-x86_64: Process 593 attached [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 593 [pid 593] set_robust_list(0x5555569495e0, 24 [pid 579] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 593] <... set_robust_list resumed>) = 0 [pid 579] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] chdir("./5") = 0 [pid 593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 593] setpgid(0, 0) = 0 [pid 593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 593] write(3, "1000", 4) = 4 [pid 593] close(3) = 0 [pid 593] symlink("/dev/binderfs", "./binderfs" [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... write resumed>) = 9 [pid 593] <... symlink resumed>) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 593] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[596], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 596 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./5/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./5") = 0 [pid 375] mkdir("./6", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 579] open("./bus", O_RDWR [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... open resumed>) = 5 [pid 576] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 598 ./strace-static-x86_64: Process 598 attached ./strace-static-x86_64: Process 596 attached [pid 582] <... mount resumed>) = 0 [pid 581] <... mount resumed>) = 0 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] set_robust_list(0x7f70f5fdd9e0, 24 [pid 582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 579] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] set_robust_list(0x5555569495e0, 24 [pid 596] <... set_robust_list resumed>) = 0 [pid 582] <... openat resumed>) = 3 [pid 581] <... openat resumed>) = 3 [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... set_robust_list resumed>) = 0 [pid 596] memfd_create("syzkaller", 0 [pid 582] chdir("./file0" [pid 581] chdir("./file0" [pid 579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 598] chdir("./6" [pid 596] <... memfd_create resumed>) = 3 [pid 582] <... chdir resumed>) = 0 [pid 579] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... chdir resumed>) = 0 [pid 596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 582] ioctl(4, LOOP_CLR_FD [pid 581] <... chdir resumed>) = 0 [pid 579] <... mmap resumed>) = 0x20000000 [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 596] <... mmap resumed>) = 0x7f70edbbd000 [pid 582] <... ioctl resumed>) = 0 [pid 581] ioctl(4, LOOP_CLR_FD [pid 598] <... prctl resumed>) = 0 [pid 596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 582] close(4 [pid 581] <... ioctl resumed>) = 0 [pid 598] setpgid(0, 0 [pid 582] <... close resumed>) = 0 [pid 581] close(4 [pid 598] <... setpgid resumed>) = 0 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... close resumed>) = 0 [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 582] <... futex resumed>) = 1 [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... openat resumed>) = 3 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 598] write(3, "1000", 4 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... write resumed>) = 4 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 598] close(3 [pid 581] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... close resumed>) = 0 [pid 581] <... open resumed>) = 4 [pid 598] symlink("/dev/binderfs", "./binderfs" [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... symlink resumed>) = 0 [pid 581] <... futex resumed>) = 1 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... write resumed>) = 1048576 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] <... futex resumed>) = 1 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 596] munmap(0x7f70edbbd000, 1048576 [pid 582] <... futex resumed>) = 0 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 1 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 582] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 581] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... mmap resumed>) = 0x7f70f5fbd000 [pid 582] <... open resumed>) = 4 [pid 579] write(4, 0x20000f80, 9 [pid 576] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... write resumed>) = 9 [pid 576] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] <... futex resumed>) = 0 [pid 598] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... write resumed>) = 9 [pid 576] <... mmap resumed>) = 0x7f70edc9c000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... mprotect resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... futex resumed>) = 1 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 576] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 573] <... futex resumed>) = 0 [pid 598] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 596] <... munmap resumed>) = 0 [pid 582] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... mprotect resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 582] <... write resumed>) = 9 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... futex resumed>) = 0 [pid 576] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 598] <... clone resumed>, parent_tid=[600], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 600 [pid 596] <... openat resumed>) = 4 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] open("./bus", O_RDWR [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] ioctl(4, LOOP_SET_FD, 3 [pid 582] <... futex resumed>) = 1 [pid 581] <... open resumed>) = 5 [pid 576] <... clone resumed>, parent_tid=[601], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 601 [pid 573] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 582] open("./bus", O_RDWR [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... open resumed>) = 5 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 573] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... mmap resumed>) = 0x20000000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 582] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... mmap resumed>) = 0x20000000 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 581] write(4, 0x20000f80, 9 [pid 573] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mount resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... write resumed>) = 9 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 582] write(4, 0x20000f80, 9 [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... openat resumed>) = 3 [pid 582] <... write resumed>) = 9 [pid 581] <... futex resumed>) = 0 [pid 577] <... mmap resumed>) = 0x7f70edc9c000 [pid 573] <... futex resumed>) = 0 [pid 583] chdir("./file0" [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 583] <... chdir resumed>) = 0 [pid 582] <... futex resumed>) = 0 [pid 577] <... mprotect resumed>) = 0 [pid 573] <... mmap resumed>) = 0x7f70edc9c000 [pid 583] ioctl(4, LOOP_CLR_FD [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 573] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 577] <... clone resumed>, parent_tid=[603], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 603 [pid 573] <... clone resumed>, parent_tid=[604], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 604 [pid 577] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 596] close(3) = 0 [pid 583] close(4 [ 22.136281][ T581] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.145859][ T582] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 22.159168][ T583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 596] mkdir("./file0", 0777) = 0 [pid 583] <... close resumed>) = 0 [pid 596] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 604 attached ./strace-static-x86_64: Process 601 attached ./strace-static-x86_64: Process 600 attached [pid 574] <... futex resumed>) = 0 [pid 601] set_robust_list(0x7f70edcbc9e0, 24 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] <... set_robust_list resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 1 [pid 604] set_robust_list(0x7f70edcbc9e0, 24 [pid 603] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] set_robust_list(0x7f70f5fdd9e0, 24 [pid 583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 600] <... set_robust_list resumed>) = 0 [pid 600] memfd_create("syzkaller", 0) = 3 [pid 604] <... set_robust_list resumed>) = 0 [pid 601] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 583] <... open resumed>) = 4 [pid 581] <... futex resumed>) = ? [pid 577] <... futex resumed>) = ? [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... mmap resumed>) = 0x7f70edbbd000 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] +++ killed by SIGBUS +++ [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] +++ killed by SIGBUS +++ [pid 583] <... futex resumed>) = 0 [pid 577] +++ killed by SIGBUS +++ [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 574] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=577, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 583] <... write resumed>) = 9 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 583] open("./bus", O_RDWR [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... open resumed>) = 5 [pid 574] <... futex resumed>) = 0 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mmap resumed>) = 0x20000000 [pid 574] <... futex resumed>) = 0 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 583] write(4, 0x20000f80, 9 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 583] <... write resumed>) = 9 [pid 574] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 583] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 574] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 373] getdents64(3, [pid 574] <... mprotect resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 574] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 574] <... clone resumed>, parent_tid=[606], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 606 [pid 373] lstat("./5/binderfs", [pid 574] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 574] <... futex resumed>) = 0 [pid 373] unlink("./5/binderfs" [pid 574] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... unlink resumed>) = 0 [pid 600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 22.182599][ T603] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.194466][ T601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.198758][ T604] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 606 attached [pid 604] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] <... write resumed>) = 1048576 [pid 596] <... mount resumed>) = 0 [pid 579] <... futex resumed>) = ? [pid 573] <... futex resumed>) = 0 [pid 606] set_robust_list(0x7f70edcbc9e0, 24 [pid 600] munmap(0x7f70edbbd000, 1048576 [pid 582] <... futex resumed>) = ? [pid 606] <... set_robust_list resumed>) = 0 [pid 600] <... munmap resumed>) = 0 [pid 582] +++ killed by SIGBUS +++ [pid 579] +++ killed by SIGBUS +++ [pid 601] +++ killed by SIGBUS +++ [pid 596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 576] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=576, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 596] <... openat resumed>) = 3 [pid 596] chdir("./file0" [pid 376] <... restart_syscall resumed>) = 0 [pid 376] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./6/binderfs") = 0 [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 604] +++ killed by SIGBUS +++ [pid 600] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 596] <... chdir resumed>) = 0 [pid 573] +++ killed by SIGBUS +++ [pid 600] <... openat resumed>) = 4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=573, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 600] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 596] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./5/binderfs") = 0 [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 600] <... ioctl resumed>) = 0 [pid 596] <... ioctl resumed>) = 0 [pid 596] close(4 [pid 600] close(3 [pid 596] <... close resumed>) = 0 [pid 606] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] <... close resumed>) = 0 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = ? [pid 574] <... futex resumed>) = ? [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] mkdir("./file0", 0777 [pid 596] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... mkdir resumed>) = 0 [pid 600] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 596] <... open resumed>) = 4 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] +++ killed by SIGBUS +++ [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 596] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... write resumed>) = 9 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] open("./bus", O_RDWR [pid 593] <... futex resumed>) = 0 [pid 596] <... open resumed>) = 5 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 593] <... futex resumed>) = 0 [pid 596] <... mmap resumed>) = 0x20000000 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] write(4, 0x20000f80, 9 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] <... write resumed>) = 9 [pid 593] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] <... mmap resumed>) = 0x7f70edc9c000 [pid 593] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 609 attached , parent_tid=[609], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 609 [pid 609] set_robust_list(0x7f70edcbc9e0, 24 [pid 593] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... set_robust_list resumed>) = 0 [pid 593] <... futex resumed>) = 0 [pid 606] +++ killed by SIGBUS +++ [pid 593] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=574, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./5/binderfs") = 0 [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 596] <... futex resumed>) = ? [pid 593] <... futex resumed>) = ? [pid 596] +++ killed by SIGBUS +++ [pid 609] +++ killed by SIGBUS +++ [pid 593] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=593, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = 0 [pid 372] lstat("./5/binderfs", [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./5/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./5") = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] mkdir("./6", 0777) = 0 [pid 372] unlink("./5/binderfs" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... unlink resumed>) = 0 [ 22.231342][ T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 22.241425][ T606] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.267703][ T609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 600] <... mount resumed>) = 0 [pid 600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 600] chdir("./file0") = 0 [pid 600] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] close(3 [pid 377] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 600] <... ioctl resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 600] close(4 [pid 376] lstat("./6/file0", [pid 374] lstat("./5/file0", [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 612 attached [pid 600] <... close resumed>) = 0 [pid 377] close(4 [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] set_robust_list(0x5555569495e0, 24 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 612 [pid 372] lstat("./5/file0", [pid 612] <... set_robust_list resumed>) = 0 [pid 600] <... futex resumed>) = 1 [pid 598] <... futex resumed>) = 0 [pid 377] rmdir("./5/file0" [pid 376] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 612] chdir("./6" [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 4 [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 612] <... chdir resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] fstat(4, [pid 374] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 612] <... prctl resumed>) = 0 [pid 377] close(3 [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 372] <... openat resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] fstat(4, [pid 612] setpgid(0, 0 [pid 600] <... open resumed>) = 4 [pid 377] rmdir("./5" [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 376] close(4 [pid 374] close(4 [pid 376] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./6/file0" [pid 374] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 612] <... setpgid resumed>) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./5/file0" [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 612] <... openat resumed>) = 3 [pid 374] <... rmdir resumed>) = 0 [pid 377] mkdir("./6", 0777 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(3, [pid 372] close(4 [pid 376] close(3 [pid 612] write(3, "1000", 4 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 376] rmdir("./6" [pid 374] close(3 [pid 372] rmdir("./5/file0" [pid 612] <... write resumed>) = 4 [pid 612] close(3) = 0 [pid 612] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 612] <... symlink resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 376] mkdir("./7", 0777 [pid 374] rmdir("./5" [pid 372] getdents64(3, [pid 612] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 612] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 612] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... rmdir resumed>) = 0 [pid 372] close(3 [pid 612] <... clone resumed>, parent_tid=[613], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 613 [pid 376] <... openat resumed>) = 3 [pid 374] mkdir("./6", 0777 [pid 372] <... close resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 372] rmdir("./5" [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 600] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 1 [pid 600] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(3 [pid 374] <... openat resumed>) = 3 [pid 372] mkdir("./6", 0777 [pid 613] memfd_create("syzkaller", 0 [pid 600] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 3 [pid 376] <... close resumed>) = 0 [pid 613] <... memfd_create resumed>) = 3 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... mkdir resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] open("./bus", O_RDWR [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 600] <... open resumed>) = 5 [pid 598] <... futex resumed>) = 0 [pid 374] close(3./strace-static-x86_64: Process 614 attached [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 614 [pid 372] <... openat resumed>) = 3 [pid 600] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... close resumed>) = 0 [ 22.398497][ T600] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 372] ioctl(3, LOOP_CLR_FD [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] close(3 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 600] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 600] <... mmap resumed>) = 0x20000000 [pid 377] close(3 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 615 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 616 [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] write(4, 0x20000f80, 9 [pid 598] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] <... write resumed>) = 9 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 617 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... mmap resumed>) = 0x7f70edc9c000 [pid 600] <... futex resumed>) = 0 [pid 598] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... mprotect resumed>) = 0 [pid 598] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[618], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 618 [pid 598] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x5555569495e0, 24) = 0 [pid 615] chdir("./6") = 0 [pid 615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 615] setpgid(0, 0 [pid 614] set_robust_list(0x5555569495e0, 24 [pid 615] <... setpgid resumed>) = 0 [pid 614] <... set_robust_list resumed>) = 0 [pid 614] chdir("./7") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 615] write(3, "1000", 4 [pid 613] <... write resumed>) = 1048576 [pid 614] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 616 attached ./strace-static-x86_64: Process 618 attached ./strace-static-x86_64: Process 617 attached [pid 614] setpgid(0, 0 [pid 615] <... write resumed>) = 4 [pid 615] close(3 [pid 618] set_robust_list(0x7f70edcbc9e0, 24 [pid 617] set_robust_list(0x5555569495e0, 24 [pid 616] set_robust_list(0x5555569495e0, 24 [pid 614] <... setpgid resumed>) = 0 [pid 618] <... set_robust_list resumed>) = 0 [pid 617] <... set_robust_list resumed>) = 0 [pid 616] <... set_robust_list resumed>) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 617] chdir("./6" [pid 616] chdir("./6" [pid 615] <... close resumed>) = 0 [pid 615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 613] munmap(0x7f70edbbd000, 1048576) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 613] <... openat resumed>) = 4 [pid 615] <... mmap resumed>) = 0x7f70f5fbd000 [pid 615] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] ioctl(4, LOOP_SET_FD, 3 [pid 615] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[619], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 619 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 619] munmap(0x7f70edbbd000, 1048576 [pid 617] <... chdir resumed>) = 0 [pid 616] <... chdir resumed>) = 0 [pid 614] write(3, "1000", 4 [pid 613] <... ioctl resumed>) = 0 [pid 613] close(3) = 0 [pid 613] mkdir("./file0", 0777 [pid 614] <... write resumed>) = 4 [pid 613] <... mkdir resumed>) = 0 [pid 613] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 619] <... munmap resumed>) = 0 [pid 617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 616] <... prctl resumed>) = 0 [pid 614] <... futex resumed>) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 617] <... prctl resumed>) = 0 [pid 616] setpgid(0, 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 617] setpgid(0, 0 [pid 619] <... openat resumed>) = 4 [pid 614] <... mmap resumed>) = 0x7f70f5fbd000 [pid 617] <... setpgid resumed>) = 0 [pid 616] <... setpgid resumed>) = 0 [pid 614] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 619] ioctl(4, LOOP_SET_FD, 3 [pid 617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 614] <... mprotect resumed>) = 0 [pid 616] <... openat resumed>) = 3 [pid 614] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 619] <... ioctl resumed>) = 0 [pid 617] <... openat resumed>) = 3 [pid 619] close(3 [pid 617] write(3, "1000", 4 [pid 616] write(3, "1000", 4./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] <... write resumed>) = 4 [pid 619] <... close resumed>) = 0 [pid 616] <... write resumed>) = 4 [pid 619] mkdir("./file0", 0777 [pid 617] close(3 [pid 616] close(3 [pid 614] <... clone resumed>, parent_tid=[623], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 623 [pid 617] <... close resumed>) = 0 [pid 616] <... close resumed>) = 0 [pid 619] <... mkdir resumed>) = 0 [pid 617] symlink("/dev/binderfs", "./binderfs" [pid 616] symlink("/dev/binderfs", "./binderfs" [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... symlink resumed>) = 0 [pid 617] <... symlink resumed>) = 0 [pid 619] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 1 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... futex resumed>) = 0 [pid 617] <... futex resumed>) = 0 [pid 617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 617] <... mmap resumed>) = 0x7f70f5fbd000 [pid 616] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 617] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 616] <... mprotect resumed>) = 0 [pid 617] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 616] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 625 attached [pid 625] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 617] <... clone resumed>, parent_tid=[625], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 625 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... clone resumed>, parent_tid=[626], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 626 [pid 625] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 626 attached [pid 617] <... futex resumed>) = 0 [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] set_robust_list(0x7f70f5fdd9e0, 24 [pid 623] memfd_create("syzkaller", 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... futex resumed>) = 0 [pid 600] <... futex resumed>) = ? [pid 598] <... futex resumed>) = ? [pid 626] <... set_robust_list resumed>) = 0 [pid 625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 623] <... memfd_create resumed>) = 3 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 600] +++ killed by SIGBUS +++ [pid 618] +++ killed by SIGBUS +++ [pid 598] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=598, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 613] <... mount resumed>) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./6/binderfs") = 0 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 613] chdir("./file0") = 0 [pid 613] ioctl(4, LOOP_CLR_FD [pid 625] <... mmap resumed>) = 0x7f70edbbd000 [pid 626] memfd_create("syzkaller", 0) = 3 [pid 626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 623] munmap(0x7f70edbbd000, 1048576) = 0 [ 22.475417][ T618] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.503906][ T613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 623] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 626] munmap(0x7f70edbbd000, 1048576) = 0 [pid 626] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 625] munmap(0x7f70edbbd000, 1048576 [pid 626] <... openat resumed>) = 4 [pid 623] <... openat resumed>) = 4 [pid 619] <... mount resumed>) = 0 [pid 613] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 626] ioctl(4, LOOP_SET_FD, 3 [pid 623] ioctl(4, LOOP_SET_FD, 3 [pid 613] close(4 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 623] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./6/file0", [pid 623] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 625] <... munmap resumed>) = 0 [pid 625] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 619] <... openat resumed>) = 3 [pid 619] chdir("./file0") = 0 [pid 619] ioctl(4, LOOP_CLR_FD [pid 623] <... close resumed>) = 0 [pid 623] mkdir("./file0", 0777) = 0 [pid 623] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 626] <... ioctl resumed>) = 0 [pid 626] close(3 [pid 613] <... close resumed>) = 0 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 626] <... close resumed>) = 0 [pid 625] <... openat resumed>) = 4 [pid 619] <... ioctl resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 626] mkdir("./file0", 0777 [pid 613] <... futex resumed>) = 1 [pid 612] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 626] <... mkdir resumed>) = 0 [pid 613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 626] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 613] <... open resumed>) = 4 [pid 612] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] getdents64(4, [pid 613] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 625] ioctl(4, LOOP_SET_FD, 3 [pid 619] close(4 [pid 612] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 613] <... write resumed>) = 9 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 613] open("./bus", O_RDWR [pid 612] <... futex resumed>) = 0 [pid 375] rmdir("./6/file0" [pid 613] <... open resumed>) = 5 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... ioctl resumed>) = 0 [pid 625] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] <... close resumed>) = 0 [pid 613] <... futex resumed>) = 1 [pid 375] getdents64(3, [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] mkdir("./file0", 0777) = 0 [pid 625] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 612] <... futex resumed>) = 0 [pid 613] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 375] close(3 [pid 613] <... mmap resumed>) = 0x20000000 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] rmdir("./6" [pid 613] write(4, 0x20000f80, 9 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... close resumed>) = 0 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... rmdir resumed>) = 0 [pid 615] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = 1 [pid 613] <... write resumed>) = 9 [pid 612] <... futex resumed>) = 0 [pid 375] mkdir("./7", 0777 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 612] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[632], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 632 [pid 612] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 613] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 619] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 634 [pid 619] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000./strace-static-x86_64: Process 634 attached ) = 4 [pid 634] set_robust_list(0x5555569495e0, 24 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... set_robust_list resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] chdir("./7" [pid 619] <... write resumed>) = 9 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] open("./bus", O_RDWR [pid 615] <... futex resumed>) = 0 [pid 634] <... chdir resumed>) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... open resumed>) = 5 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] write(3, "1000", 4 [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 619] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] <... write resumed>) = 4 [pid 634] close(3) = 0 [pid 619] <... mmap resumed>) = 0x20000000 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 632 attached [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] <... mount resumed>) = 0 [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 619] write(4, 0x20000f80, 9 [pid 615] <... futex resumed>) = 0 [pid 626] <... openat resumed>) = 3 [pid 634] symlink("/dev/binderfs", "./binderfs" [pid 626] chdir("./file0" [pid 619] <... write resumed>) = 9 [pid 615] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = 0 [pid 626] <... chdir resumed>) = 0 [pid 619] <... futex resumed>) = 0 [pid 626] ioctl(4, LOOP_CLR_FD [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 626] <... ioctl resumed>) = 0 [pid 615] <... mmap resumed>) = 0x7f70edc9c000 [pid 626] close(4 [pid 615] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 634] <... symlink resumed>) = 0 [pid 626] <... close resumed>) = 0 [pid 615] <... mprotect resumed>) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 634] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = 1 [ 22.529198][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 22.564575][ T626] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 632] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] <... futex resumed>) = 0 [pid 634] <... mmap resumed>) = 0x7f70f5fbd000 [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... clone resumed>, parent_tid=[638], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 638 [pid 634] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 626] <... futex resumed>) = 0 [pid 616] <... futex resumed>) = 1 [pid 615] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... mprotect resumed>) = 0 [pid 626] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 0 [pid 634] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 632] <... set_robust_list resumed>) = 0 [pid 626] <... open resumed>) = 4 [pid 615] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 641 attached ./strace-static-x86_64: Process 638 attached [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... mount resumed>) = 0 [pid 641] set_robust_list(0x7f70f5fdd9e0, 24 [pid 634] <... clone resumed>, parent_tid=[641], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 641 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 641] <... set_robust_list resumed>) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] memfd_create("syzkaller", 0 [pid 634] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 616] <... futex resumed>) = 0 [pid 641] <... memfd_create resumed>) = 3 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 626] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 638] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] <... write resumed>) = 9 [pid 641] <... mmap resumed>) = 0x7f70edbbd000 [pid 638] <... set_robust_list resumed>) = 0 [ 22.576168][ T623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 22.586967][ T632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.602400][ T625] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 22.608682][ T638] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 623] chdir("./file0") = 0 [pid 623] ioctl(4, LOOP_CLR_FD) = 0 [pid 623] close(4) = 0 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 625] <... mount resumed>) = 0 [pid 625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 625] chdir("./file0") = 0 [pid 625] ioctl(4, LOOP_CLR_FD) = 0 [pid 625] close(4) = 0 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] open("./bus", O_RDWR) = 5 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 617] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 617] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[642], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 642 [pid 617] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] write(4, 0x20000f80, 9) = 9 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 625] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 642 attached [pid 642] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 641] <... write resumed>) = 1048576 [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 632] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 641] munmap(0x7f70edbbd000, 1048576 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 616] <... futex resumed>) = 0 [pid 641] <... munmap resumed>) = 0 [pid 626] open("./bus", O_RDWR [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 626] <... open resumed>) = 5 [pid 641] <... openat resumed>) = 4 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] ioctl(4, LOOP_SET_FD, 3 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 626] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... mmap resumed>) = 0x20000000 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... open resumed>) = 4 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] <... futex resumed>) = 1 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = ? [pid 625] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 616] <... futex resumed>) = 0 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] <... futex resumed>) = ? [pid 613] <... futex resumed>) = ? [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 625] +++ killed by SIGBUS +++ [pid 623] <... futex resumed>) = 1 [pid 619] +++ killed by SIGBUS +++ [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 613] +++ killed by SIGBUS +++ [pid 641] <... ioctl resumed>) = 0 [pid 626] write(4, 0x20000f80, 9 [pid 623] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 616] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 616] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 616] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 616] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[644], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 644 [pid 616] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... write resumed>) = 9 [pid 641] close(3 [pid 626] <... write resumed>) = 9 ./strace-static-x86_64: Process 644 attached [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] set_robust_list(0x7f70edcbc9e0, 24 [pid 641] <... close resumed>) = 0 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 642] +++ killed by SIGBUS +++ [pid 617] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=617, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 644] <... set_robust_list resumed>) = 0 [pid 641] mkdir("./file0", 0777 [pid 638] +++ killed by SIGBUS +++ [pid 626] <... futex resumed>) = 0 [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] +++ killed by SIGBUS +++ [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... restart_syscall resumed>) = 0 [pid 641] <... mkdir resumed>) = 0 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=615, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 641] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 623] open("./bus", O_RDWR [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 623] <... open resumed>) = 5 [pid 377] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 374] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 632] +++ killed by SIGBUS +++ [pid 623] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] +++ killed by SIGBUS +++ [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 623] <... mmap resumed>) = 0x20000000 [pid 377] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 377] lstat("./6/binderfs", [pid 374] <... openat resumed>) = 3 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=612, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] fstat(3, [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] unlink("./6/binderfs" [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 623] write(4, 0x20000f80, 9 [pid 614] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] <... write resumed>) = 9 [pid 614] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 373] <... restart_syscall resumed>) = 0 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 623] <... futex resumed>) = 0 [pid 614] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 614] <... mprotect resumed>) = 0 [pid 374] lstat("./6/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 614] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] unlink("./6/binderfs" [pid 373] <... openat resumed>) = 3 [pid 614] <... clone resumed>, parent_tid=[645], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 645 [pid 374] <... unlink resumed>) = 0 [pid 373] fstat(3, [pid 614] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 614] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 614] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./6/binderfs") = 0 [ 22.617854][ T642] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.655138][ T644] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 645 attached [pid 644] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 645] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] <... futex resumed>) = ? [pid 616] <... futex resumed>) = ? [pid 645] <... set_robust_list resumed>) = 0 [pid 626] +++ killed by SIGBUS +++ [pid 644] +++ killed by SIGBUS +++ [pid 616] +++ killed by SIGBUS +++ [pid 645] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 623] <... futex resumed>) = ? [pid 614] <... futex resumed>) = ? [pid 623] +++ killed by SIGBUS +++ [pid 645] +++ killed by SIGBUS +++ [pid 614] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=614, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./7/binderfs") = 0 [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=616, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./6/binderfs") = 0 [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... mount resumed>) = 0 [pid 641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 641] chdir("./file0") = 0 [ 22.671190][ T645] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.687966][ T641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 641] close(4) = 0 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... umount2 resumed>) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./6/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./6") = 0 [pid 377] mkdir("./7", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 634] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 648 ./strace-static-x86_64: Process 648 attached [pid 648] set_robust_list(0x5555569495e0, 24) = 0 [pid 648] chdir("./7") = 0 [pid 648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 648] setpgid(0, 0) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 648] write(3, "1000", 4) = 4 [pid 648] close(3 [pid 634] <... futex resumed>) = 1 [pid 641] <... futex resumed>) = 0 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 648] <... close resumed>) = 0 [pid 648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 648] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 648] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[649], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 649 [pid 641] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 649] memfd_create("syzkaller", 0) = 3 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 641] <... open resumed>) = 4 [pid 374] lstat("./6/file0", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] lstat("./6/file0", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] lstat("./6/file0", [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... write resumed>) = 9 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] open("./bus", O_RDWR [pid 374] <... openat resumed>) = 4 [pid 373] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] <... open resumed>) = 5 [pid 376] lstat("./7/file0", [pid 374] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 4 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 372] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 641] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 641] <... mmap resumed>) = 0x20000000 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 372] fstat(4, [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 641] write(4, 0x20000f80, 9 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... write resumed>) = 9 [pid 374] close(4 [pid 634] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 641] <... futex resumed>) = 0 [pid 634] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] rmdir("./6/file0" [pid 373] close(4 [pid 634] <... mprotect resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... rmdir resumed>) = 0 [pid 634] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] getdents64(3, [pid 373] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 634] <... clone resumed>, parent_tid=[650], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 650 [pid 376] fstat(4, [pid 373] rmdir("./6/file0" [pid 374] close(3 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 634] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 374] rmdir("./6" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(4 [pid 374] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 372] <... close resumed>) = 0 [pid 376] getdents64(4, [pid 374] mkdir("./7", 0777 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] rmdir("./6/file0" [pid 374] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 376] getdents64(4, [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] close(3 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3 [pid 374] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] rmdir("./6"./strace-static-x86_64: Process 650 attached [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] rmdir("./6" [pid 372] <... rmdir resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./7/file0" [pid 374] close(3 [pid 373] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] mkdir("./7", 0777) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./7") = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 376] mkdir("./8", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 651 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 652 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] mkdir("./7", 0777) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 653 [pid 649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 650] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 650] <... set_robust_list resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 654 ./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x5555569495e0, 24) = 0 [pid 654] chdir("./7" [pid 649] <... write resumed>) = 1048576 [pid 654] <... chdir resumed>) = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] munmap(0x7f70edbbd000, 1048576) = 0 ./strace-static-x86_64: Process 651 attached [pid 654] write(3, "1000", 4) = 4 [pid 651] set_robust_list(0x5555569495e0, 24 [pid 654] close(3) = 0 [pid 654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 651] <... set_robust_list resumed>) = 0 [pid 651] chdir("./7" [pid 649] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 649] ioctl(4, LOOP_SET_FD, 3 [pid 651] <... chdir resumed>) = 0 [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 651] setpgid(0, 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 651] <... setpgid resumed>) = 0 [pid 654] <... mmap resumed>) = 0x7f70f5fbd000 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 654] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 651] <... openat resumed>) = 3 [pid 651] write(3, "1000", 4) = 4 [pid 651] close(3) = 0 [pid 651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 654] <... clone resumed>, parent_tid=[656], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 656 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 651] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 651] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 651] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[657], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 657 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 649] <... ioctl resumed>) = 0 [pid 649] close(3) = 0 [pid 649] mkdir("./file0", 0777) = 0 [pid 649] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 656 attached ./strace-static-x86_64: Process 653 attached ./strace-static-x86_64: Process 652 attached [pid 656] set_robust_list(0x7f70f5fdd9e0, 24 [pid 653] set_robust_list(0x5555569495e0, 24 [pid 656] <... set_robust_list resumed>) = 0 [pid 653] <... set_robust_list resumed>) = 0 [pid 652] set_robust_list(0x5555569495e0, 24 [pid 656] memfd_create("syzkaller", 0 [pid 653] chdir("./7" [pid 652] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 657 attached [pid 656] <... memfd_create resumed>) = 3 [pid 650] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 641] <... futex resumed>) = ? [pid 634] <... futex resumed>) = ? [pid 657] set_robust_list(0x7f70f5fdd9e0, 24 [pid 652] chdir("./8" [pid 656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 653] <... chdir resumed>) = 0 [pid 656] <... mmap resumed>) = 0x7f70edbbd000 [pid 653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 652] <... chdir resumed>) = 0 [pid 657] <... set_robust_list resumed>) = 0 [pid 657] memfd_create("syzkaller", 0) = 3 [pid 657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 653] <... prctl resumed>) = 0 [pid 652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 653] setpgid(0, 0 [pid 652] setpgid(0, 0 [pid 653] <... setpgid resumed>) = 0 [pid 652] <... setpgid resumed>) = 0 [pid 653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 653] <... openat resumed>) = 3 [pid 652] write(3, "1000", 4 [pid 653] write(3, "1000", 4 [pid 652] <... write resumed>) = 4 [pid 653] <... write resumed>) = 4 [pid 652] close(3 [pid 653] close(3 [pid 652] <... close resumed>) = 0 [pid 653] <... close resumed>) = 0 [pid 652] symlink("/dev/binderfs", "./binderfs" [pid 641] +++ killed by SIGBUS +++ [pid 653] symlink("/dev/binderfs", "./binderfs" [pid 652] <... symlink resumed>) = 0 [pid 653] <... symlink resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 652] <... mmap resumed>) = 0x7f70f5fbd000 [pid 653] <... mmap resumed>) = 0x7f70f5fbd000 [pid 652] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 653] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 652] <... mprotect resumed>) = 0 [pid 653] <... mprotect resumed>) = 0 [pid 652] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 653] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 652] <... clone resumed>, parent_tid=[658], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 658 ./strace-static-x86_64: Process 659 attached ./strace-static-x86_64: Process 658 attached [pid 657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 656] <... write resumed>) = 1048576 [pid 653] <... clone resumed>, parent_tid=[659], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 659 [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] set_robust_list(0x7f70f5fdd9e0, 24 [pid 658] set_robust_list(0x7f70f5fdd9e0, 24 [pid 656] munmap(0x7f70edbbd000, 1048576 [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 650] +++ killed by SIGBUS +++ [pid 649] <... mount resumed>) = 0 [pid 634] +++ killed by SIGBUS +++ [pid 656] <... munmap resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 656] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=634, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 659] <... set_robust_list resumed>) = 0 [pid 658] <... set_robust_list resumed>) = 0 [pid 657] <... write resumed>) = 1048576 [pid 656] <... openat resumed>) = 4 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 656] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, [pid 658] memfd_create("syzkaller", 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 659] memfd_create("syzkaller", 0 [pid 658] <... memfd_create resumed>) = 3 [pid 657] munmap(0x7f70edbbd000, 1048576 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 649] <... openat resumed>) = 3 [pid 659] <... memfd_create resumed>) = 3 [pid 658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 657] <... munmap resumed>) = 0 [pid 656] <... ioctl resumed>) = 0 [pid 649] chdir("./file0" [pid 375] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 658] <... mmap resumed>) = 0x7f70edbbd000 [pid 657] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 659] <... mmap resumed>) = 0x7f70edbbd000 [pid 657] <... openat resumed>) = 4 [pid 656] close(3 [pid 649] <... chdir resumed>) = 0 [pid 375] lstat("./7/binderfs", [pid 658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 658] munmap(0x7f70edbbd000, 1048576) = 0 [pid 658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 656] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 658] close(3) = 0 [pid 658] mkdir("./file0", 0777) = 0 [pid 657] ioctl(4, LOOP_SET_FD, 3 [pid 656] mkdir("./file0", 0777 [pid 375] unlink("./7/binderfs" [pid 658] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 656] <... mkdir resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 656] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 649] ioctl(4, LOOP_CLR_FD [pid 657] <... ioctl resumed>) = 0 [pid 657] close(3) = 0 [pid 657] mkdir("./file0", 0777) = 0 [pid 659] <... write resumed>) = 1048576 [pid 659] munmap(0x7f70edbbd000, 1048576) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 659] ioctl(4, LOOP_SET_FD, 3 [pid 657] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 659] <... ioctl resumed>) = 0 [pid 649] <... ioctl resumed>) = 0 [pid 649] close(4 [pid 659] close(3) = 0 [pid 659] mkdir("./file0", 0777) = 0 [ 22.929249][ T650] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.968829][ T649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 659] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 658] <... mount resumed>) = 0 [pid 658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 658] chdir("./file0") = 0 [pid 658] ioctl(4, LOOP_CLR_FD [pid 656] <... mount resumed>) = 0 [pid 656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 656] chdir("./file0") = 0 [pid 656] ioctl(4, LOOP_CLR_FD [pid 657] <... mount resumed>) = 0 [pid 656] <... ioctl resumed>) = 0 [pid 649] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 656] close(4 [pid 657] <... openat resumed>) = 3 [pid 658] <... ioctl resumed>) = 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] close(4 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] <... close resumed>) = 0 [pid 649] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 656] <... close resumed>) = 0 [pid 657] chdir("./file0" [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... open resumed>) = 4 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... open resumed>) = 4 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... chdir resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 656] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 657] ioctl(4, LOOP_CLR_FD) = 0 [pid 657] close(4 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 657] <... close resumed>) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 651] <... futex resumed>) = 0 [pid 649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 658] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... write resumed>) = 9 [pid 649] <... write resumed>) = 9 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./7/file0", [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 658] open("./bus", O_RDWR [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] open("./bus", O_RDWR [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... open resumed>) = 5 [pid 649] <... open resumed>) = 5 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 658] <... mmap resumed>) = 0x20000000 [pid 649] <... mmap resumed>) = 0x20000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 658] write(4, 0x20000f80, 9 [pid 652] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] write(4, 0x20000f80, 9 [pid 648] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... write resumed>) = 9 [pid 652] <... futex resumed>) = 0 [pid 649] <... write resumed>) = 9 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 4 [pid 658] <... futex resumed>) = 0 [pid 657] <... futex resumed>) = 1 [pid 652] <... mmap resumed>) = 0x7f70edc9c000 [pid 649] <... futex resumed>) = 0 [pid 648] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] fstat(4, [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 657] open("./bus", O_RDWR [pid 652] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 657] <... open resumed>) = 5 [pid 652] <... mprotect resumed>) = 0 [pid 648] <... mprotect resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 648] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 657] <... futex resumed>) = 1 [pid 651] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 657] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... clone resumed>, parent_tid=[673], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 673 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... clone resumed>, parent_tid=[674], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 674 [pid 657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 657] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 657] <... mmap resumed>) = 0x20000000 [pid 652] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 657] <... futex resumed>) = 1 [pid 656] <... open resumed>) = 4 [pid 651] <... futex resumed>) = 0 [pid 375] close(4 [pid 657] write(4, 0x20000f80, 9 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] <... write resumed>) = 9 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./7/file0" [pid 657] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 657] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 656] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] <... rmdir resumed>) = 0 [pid 654] <... futex resumed>) = 0 [pid 651] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] getdents64(3, [pid 656] <... write resumed>) = 9 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] <... mprotect resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 674 attached ./strace-static-x86_64: Process 673 attached [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] close(3 [pid 674] set_robust_list(0x7f70edcbc9e0, 24 [ 23.005743][ T658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.017027][ T656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.017323][ T657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 673] set_robust_list(0x7f70edcbc9e0, 24 [pid 674] <... set_robust_list resumed>) = 0 [pid 673] <... set_robust_list resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 651] <... clone resumed>, parent_tid=[676], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 676 [pid 375] <... close resumed>) = 0 ./strace-static-x86_64: Process 676 attached [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./7" [pid 676] set_robust_list(0x7f70edcbc9e0, 24 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 676] <... set_robust_list resumed>) = 0 [pid 656] open("./bus", O_RDWR [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdir("./8", 0777 [pid 656] <... open resumed>) = 5 [pid 375] <... mkdir resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 656] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(3 [pid 656] <... mmap resumed>) = 0x20000000 [pid 375] <... close resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 677 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 656] write(4, 0x20000f80, 9 [pid 654] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... write resumed>) = 9 [pid 654] <... futex resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 656] <... futex resumed>) = 0 [pid 654] <... mmap resumed>) = 0x7f70edc9c000 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[678], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 678 [pid 654] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 678 attached ./strace-static-x86_64: Process 677 attached [pid 674] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 673] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 651] <... futex resumed>) = 0 [pid 678] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 23.064423][ T673] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.078151][ T674] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.082304][ T676] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 677] set_robust_list(0x5555569495e0, 24 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 658] <... futex resumed>) = ? [pid 652] <... futex resumed>) = ? [pid 651] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = ? [pid 648] <... futex resumed>) = ? [pid 677] <... set_robust_list resumed>) = 0 [pid 658] +++ killed by SIGBUS +++ [pid 677] chdir("./8" [pid 673] +++ killed by SIGBUS +++ [pid 657] <... futex resumed>) = ? [pid 652] +++ killed by SIGBUS +++ [pid 651] <... futex resumed>) = ? [pid 677] <... chdir resumed>) = 0 [pid 657] +++ killed by SIGBUS +++ [pid 677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=652, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 677] <... prctl resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 677] setpgid(0, 0 [pid 376] <... restart_syscall resumed>) = 0 [pid 677] <... setpgid resumed>) = 0 [pid 677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] write(3, "1000", 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... write resumed>) = 4 [pid 376] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 677] close(3 [pid 676] +++ killed by SIGBUS +++ [pid 651] +++ killed by SIGBUS +++ [pid 376] <... openat resumed>) = 3 [pid 677] <... close resumed>) = 0 [pid 376] fstat(3, [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=651, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 677] symlink("/dev/binderfs", "./binderfs" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 677] <... symlink resumed>) = 0 [pid 376] getdents64(3, [pid 677] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... restart_syscall resumed>) = 0 [pid 677] <... futex resumed>) = 0 [pid 376] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... mmap resumed>) = 0x7f70f5fbd000 [pid 376] lstat("./8/binderfs", [pid 372] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... mprotect resumed>) = 0 [pid 376] unlink("./8/binderfs" [pid 372] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 677] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... unlink resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, [pid 677] <... clone resumed>, parent_tid=[679], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 679 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 677] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./7/binderfs") = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 679] memfd_create("syzkaller", 0) = 3 [pid 679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 679] munmap(0x7f70edbbd000, 1048576) = 0 [pid 679] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 679] close(3) = 0 [pid 679] mkdir("./file0", 0777) = 0 [pid 679] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 649] +++ killed by SIGBUS +++ [pid 654] <... futex resumed>) = ? [pid 656] <... futex resumed>) = ? [pid 656] +++ killed by SIGBUS +++ [pid 678] +++ killed by SIGBUS +++ [pid 654] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=654, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 659] <... mount resumed>) = 0 [pid 674] +++ killed by SIGBUS +++ [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 648] +++ killed by SIGBUS +++ [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 659] <... openat resumed>) = 3 [pid 659] chdir("./file0") = 0 [pid 659] ioctl(4, LOOP_CLR_FD [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=648, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./7/binderfs") = 0 [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... restart_syscall resumed>) = 0 [pid 373] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./7/binderfs") = 0 [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 679] <... mount resumed>) = 0 [pid 679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 679] chdir("./file0") = 0 [pid 679] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./7/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./7") = 0 [pid 372] mkdir("./8", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 659] <... ioctl resumed>) = 0 [ 23.095650][ T678] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.123957][ T659] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.139860][ T679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 659] close(4 [pid 679] <... ioctl resumed>) = 0 [pid 679] close(4) = 0 [pid 659] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./7/file0", [pid 376] lstat("./8/file0", [pid 373] lstat("./7/file0", [pid 372] close(3 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 679] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 679] <... open resumed>) = 4 [pid 659] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 683 [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 376] fstat(4, [pid 373] fstat(4, [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 679] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 373] getdents64(4, ./strace-static-x86_64: Process 683 attached [pid 679] <... write resumed>) = 9 [pid 659] <... write resumed>) = 9 [pid 683] set_robust_list(0x5555569495e0, 24 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 373] getdents64(4, [pid 683] <... set_robust_list resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] close(4 [pid 376] close(4 [pid 373] close(4 [pid 683] chdir("./8" [pid 679] open("./bus", O_RDWR [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] open("./bus", O_RDWR [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 683] <... chdir resumed>) = 0 [pid 679] <... open resumed>) = 5 [pid 659] <... open resumed>) = 5 [pid 377] rmdir("./7/file0" [pid 376] rmdir("./8/file0" [pid 373] rmdir("./7/file0" [pid 683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... prctl resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 683] setpgid(0, 0) = 0 [pid 683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... rmdir resumed>) = 0 [pid 683] <... openat resumed>) = 3 [pid 683] write(3, "1000", 4 [pid 373] <... rmdir resumed>) = 0 [pid 679] <... futex resumed>) = 1 [pid 659] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] getdents64(3, [pid 376] getdents64(3, [pid 373] getdents64(3, [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 653] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 683] <... write resumed>) = 4 [pid 679] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 376] close(3 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 683] close(3 [pid 679] <... mmap resumed>) = 0x20000000 [pid 659] <... mmap resumed>) = 0x20000000 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] close(3 [pid 683] <... close resumed>) = 0 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./7" [pid 376] rmdir("./8" [pid 373] <... close resumed>) = 0 [pid 683] symlink("/dev/binderfs", "./binderfs" [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 683] <... symlink resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./8", 0777 [pid 376] <... rmdir resumed>) = 0 [pid 373] rmdir("./7" [pid 683] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 679] write(4, 0x20000f80, 9 [pid 677] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] write(4, 0x20000f80, 9 [pid 653] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 376] mkdir("./9", 0777 [pid 683] <... mmap resumed>) = 0x7f70f5fbd000 [pid 677] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 679] <... write resumed>) = 9 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 659] <... write resumed>) = 9 [pid 653] <... futex resumed>) = 0 [pid 373] mkdir("./8", 0777 [pid 683] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... mmap resumed>) = 0x7f70edc9c000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... mkdir resumed>) = 0 [pid 683] <... mprotect resumed>) = 0 [pid 679] <... futex resumed>) = 0 [pid 677] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 659] <... futex resumed>) = 0 [pid 653] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] <... mkdir resumed>) = 0 [pid 683] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] <... mprotect resumed>) = 0 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 677] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 653] <... mprotect resumed>) = 0 [pid 377] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 683] <... clone resumed>, parent_tid=[684], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 684 [pid 373] <... openat resumed>) = 3 ./strace-static-x86_64: Process 684 attached [pid 653] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 677] <... clone resumed>, parent_tid=[685], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 685 [pid 373] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 685 attached [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 677] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] close(3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 677] <... futex resumed>) = 0 [pid 653] <... clone resumed>, parent_tid=[686], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 686 [pid 684] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 376] <... close resumed>) = 0 [pid 677] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 653] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 687 [pid 684] memfd_create("syzkaller", 0) = 3 [pid 684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x5555569495e0, 24) = 0 [pid 687] chdir("./8") = 0 [pid 373] <... close resumed>) = 0 [pid 687] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 687] <... prctl resumed>) = 0 [pid 687] setpgid(0, 0) = 0 [pid 687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 687] write(3, "1000", 4) = 4 [pid 687] close(3) = 0 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 688 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 689 [pid 687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 687] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 687] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[690], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 690 [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 688 attached [pid 688] set_robust_list(0x5555569495e0, 24) = 0 [pid 688] chdir("./9") = 0 [pid 688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 688] setpgid(0, 0) = 0 [pid 688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 685] set_robust_list(0x7f70edcbc9e0, 24 [pid 688] write(3, "1000", 4) = 4 [pid 688] close(3) = 0 [pid 688] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 689 attached ./strace-static-x86_64: Process 686 attached [pid 685] <... set_robust_list resumed>) = 0 [pid 688] <... symlink resumed>) = 0 [pid 684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 688] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 688] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[691], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 691 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 690] memfd_create("syzkaller", 0) = 3 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 691 attached [pid 691] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 691] memfd_create("syzkaller", 0) = 3 [pid 691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 684] <... write resumed>) = 1048576 [pid 684] munmap(0x7f70edbbd000, 1048576) = 0 [pid 684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 684] ioctl(4, LOOP_SET_FD, 3 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 689] set_robust_list(0x5555569495e0, 24 [pid 686] set_robust_list(0x7f70edcbc9e0, 24 [pid 689] <... set_robust_list resumed>) = 0 [pid 686] <... set_robust_list resumed>) = 0 [pid 685] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 689] chdir("./8" [pid 684] <... ioctl resumed>) = 0 [pid 684] close(3) = 0 [pid 684] mkdir("./file0", 0777) = 0 [pid 684] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 689] <... chdir resumed>) = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 679] <... futex resumed>) = ? [pid 677] <... futex resumed>) = ? [pid 689] setpgid(0, 0) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 679] +++ killed by SIGBUS +++ [pid 689] close(3) = 0 [pid 686] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 689] symlink("/dev/binderfs", "./binderfs" [pid 685] +++ killed by SIGBUS +++ [pid 677] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=677, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 689] <... symlink resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 689] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./8/binderfs") = 0 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 690] <... write resumed>) = 1048576 [pid 690] munmap(0x7f70edbbd000, 1048576) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 689] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 659] <... futex resumed>) = ? [pid 653] <... futex resumed>) = ? [pid 689] <... mprotect resumed>) = 0 [pid 689] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[695], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 695 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 691] <... write resumed>) = 1048576 [pid 691] munmap(0x7f70edbbd000, 1048576) = 0 [pid 691] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 695 attached [pid 695] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 695] memfd_create("syzkaller", 0) = 3 [pid 695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 659] +++ killed by SIGBUS +++ [pid 690] <... ioctl resumed>) = 0 [pid 690] close(3) = 0 [pid 690] mkdir("./file0", 0777) = 0 [pid 690] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] <... openat resumed>) = 4 [pid 686] +++ killed by SIGBUS +++ [pid 653] +++ killed by SIGBUS +++ [pid 691] ioctl(4, LOOP_SET_FD, 3 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=653, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 374] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./7/binderfs") = 0 [ 23.303327][ T685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.319416][ T686] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 691] <... ioctl resumed>) = 0 [pid 691] close(3) = 0 [pid 691] mkdir("./file0", 0777) = 0 [pid 691] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 684] <... mount resumed>) = 0 [pid 684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 684] chdir("./file0") = 0 [pid 684] ioctl(4, LOOP_CLR_FD [pid 695] <... write resumed>) = 1048576 [pid 695] munmap(0x7f70edbbd000, 1048576) = 0 [pid 695] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./7/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [ 23.353885][ T684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 374] rmdir("./7") = 0 [pid 374] mkdir("./8", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 691] <... mount resumed>) = 0 [pid 690] <... mount resumed>) = 0 [pid 690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 690] chdir("./file0") = 0 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4 [pid 684] <... ioctl resumed>) = 0 [pid 684] close(4) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 683] <... futex resumed>) = 0 [pid 684] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = 0 [pid 695] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 702 [pid 691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 691] chdir("./file0") = 0 [pid 691] ioctl(4, LOOP_CLR_FD) = 0 [pid 691] close(4) = 0 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 702 attached [pid 695] ioctl(4, LOOP_SET_FD, 3 [pid 690] <... close resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 684] <... open resumed>) = 4 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 690] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 375] lstat("./8/file0", [pid 702] set_robust_list(0x5555569495e0, 24 [pid 691] <... futex resumed>) = 0 [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... set_robust_list resumed>) = 0 [pid 702] chdir("./8" [pid 691] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 687] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... chdir resumed>) = 0 [pid 702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 690] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 684] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 702] <... prctl resumed>) = 0 [pid 702] setpgid(0, 0) = 0 [pid 702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 702] <... openat resumed>) = 3 [pid 375] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 684] <... write resumed>) = 9 [pid 375] fstat(4, [pid 702] write(3, "1000", 4 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... open resumed>) = 4 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 702] <... write resumed>) = 4 [pid 702] close(3) = 0 [pid 375] getdents64(4, [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 702] symlink("/dev/binderfs", "./binderfs" [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 684] open("./bus", O_RDWR [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] <... open resumed>) = 5 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 690] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 684] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 690] <... write resumed>) = 9 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./8/file0" [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... mmap resumed>) = 0x20000000 [pid 375] <... rmdir resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 690] open("./bus", O_RDWR [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 375] close(3 [pid 690] <... open resumed>) = 5 [pid 684] write(4, 0x20000f80, 9 [pid 683] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 702] <... symlink resumed>) = 0 [pid 684] <... write resumed>) = 9 [pid 683] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] rmdir("./8" [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 683] <... mmap resumed>) = 0x7f70edc9c000 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... rmdir resumed>) = 0 [pid 690] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... mmap resumed>) = 0x20000000 [pid 683] <... mprotect resumed>) = 0 [pid 375] mkdir("./9", 0777 [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 702] <... mmap resumed>) = 0x7f70f5fbd000 [pid 702] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... mkdir resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... clone resumed>, parent_tid=[704], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 704 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 683] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... clone resumed>, parent_tid=[705], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 705 [pid 690] write(4, 0x20000f80, 9 [pid 687] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 690] <... write resumed>) = 9 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 683] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... mmap resumed>) = 0x7f70edc9c000 ./strace-static-x86_64: Process 704 attached [pid 690] <... futex resumed>) = 0 [pid 687] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... mprotect resumed>) = 0 [pid 687] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[706], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 706 [pid 687] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] set_robust_list(0x7f70edcbc9e0, 24 [pid 687] <... futex resumed>) = 0 [pid 704] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 706 attached ./strace-static-x86_64: Process 705 attached [pid 695] <... ioctl resumed>) = 0 [pid 691] <... open resumed>) = 4 [pid 687] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] set_robust_list(0x7f70edcbc9e0, 24 [pid 695] close(3 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... set_robust_list resumed>) = 0 [pid 695] <... close resumed>) = 0 [pid 691] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 0 [pid 695] mkdir("./file0", 0777 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... mkdir resumed>) = 0 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] <... futex resumed>) = 0 [pid 705] set_robust_list(0x7f70f5fdd9e0, 24 [pid 695] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... set_robust_list resumed>) = 0 [pid 691] <... write resumed>) = 9 [pid 705] memfd_create("syzkaller", 0 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... memfd_create resumed>) = 3 [pid 691] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... mmap resumed>) = 0x7f70edbbd000 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] <... futex resumed>) = 0 [pid 691] open("./bus", O_RDWR [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... open resumed>) = 5 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [ 23.418675][ T691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.424957][ T690] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 23.453488][ T704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 705] <... write resumed>) = 1048576 [pid 684] <... futex resumed>) = ? [pid 683] <... futex resumed>) = ? [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 684] +++ killed by SIGBUS +++ [pid 375] close(3 [pid 704] +++ killed by SIGBUS +++ [pid 683] +++ killed by SIGBUS +++ [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 707 [pid 705] munmap(0x7f70edbbd000, 1048576) = 0 [pid 705] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 705] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x5555569495e0, 24) = 0 [pid 707] chdir("./9") = 0 [pid 707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 707] setpgid(0, 0) = 0 [pid 707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 707] write(3, "1000", 4) = 4 [pid 707] close(3) = 0 [pid 707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=683, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 707] <... futex resumed>) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 691] <... mmap resumed>) = 0x20000000 [pid 707] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 691] write(4, 0x20000f80, 9 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... write resumed>) = 9 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] <... mmap resumed>) = 0x7f70edc9c000 [pid 688] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 707] <... mprotect resumed>) = 0 [pid 688] <... mprotect resumed>) = 0 [pid 372] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 688] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 688] <... clone resumed>, parent_tid=[709], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 709 [pid 372] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 688] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... openat resumed>) = 3 [pid 688] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 707] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 707] <... clone resumed>, parent_tid=[710], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 710 [pid 372] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./8/binderfs" [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 710 attached ./strace-static-x86_64: Process 709 attached [pid 706] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 372] <... unlink resumed>) = 0 [pid 690] <... futex resumed>) = ? [pid 687] <... futex resumed>) = ? [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 709] set_robust_list(0x7f70edcbc9e0, 24 [pid 705] <... ioctl resumed>) = 0 [pid 690] +++ killed by SIGBUS +++ [pid 710] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 705] close(3 [pid 710] memfd_create("syzkaller", 0) = 3 [pid 710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 709] <... set_robust_list resumed>) = 0 [pid 706] +++ killed by SIGBUS +++ [pid 705] <... close resumed>) = 0 [pid 687] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=687, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./8/binderfs") = 0 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 710] <... write resumed>) = 1048576 [pid 710] munmap(0x7f70edbbd000, 1048576) = 0 [pid 710] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 705] mkdir("./file0", 0777 [pid 695] <... mount resumed>) = 0 [pid 705] <... mkdir resumed>) = 0 [pid 705] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 695] chdir("./file0") = 0 [pid 695] ioctl(4, LOOP_CLR_FD [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 691] <... futex resumed>) = ? [pid 688] <... futex resumed>) = ? [pid 691] +++ killed by SIGBUS +++ [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, [pid 709] +++ killed by SIGBUS +++ [pid 688] +++ killed by SIGBUS +++ [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=688, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] getdents64(4, [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4 [pid 376] <... restart_syscall resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./8/file0" [pid 376] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] getdents64(3, [pid 376] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] fstat(3, [pid 372] close(3 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 376] getdents64(3, [pid 372] rmdir("./8" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] mkdir("./9", 0777 [pid 376] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 23.475589][ T706] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.502117][ T695] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.510747][ T709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] unlink("./9/binderfs" [pid 372] <... mkdir resumed>) = 0 [pid 705] <... mount resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... openat resumed>) = 3 [pid 705] chdir("./file0") = 0 [pid 705] ioctl(4, LOOP_CLR_FD [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 695] <... ioctl resumed>) = 0 [pid 695] close(4) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 689] <... futex resumed>) = 0 [pid 695] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... open resumed>) = 4 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... write resumed>) = 9 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] open("./bus", O_RDWR [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... open resumed>) = 5 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... mmap resumed>) = 0x20000000 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] write(4, 0x20000f80, 9 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... write resumed>) = 9 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 689] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[715], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 715 [pid 689] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 715 attached [pid 710] <... openat resumed>) = 4 [pid 710] ioctl(4, LOOP_SET_FD, 3 [pid 715] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 715] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 695] <... futex resumed>) = ? [pid 689] <... futex resumed>) = ? [pid 695] +++ killed by SIGBUS +++ [pid 715] +++ killed by SIGBUS +++ [pid 689] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=689, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./8/binderfs") = 0 [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 705] close(4 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./8/file0", [pid 373] lstat("./8/file0", [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 373] fstat(4, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./8/file0" [pid 373] rmdir("./8/file0" [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 373] close(3 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./8" [pid 373] rmdir("./8" [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] mkdir("./9", 0777 [pid 373] mkdir("./9", 0777 [pid 377] <... mkdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 710] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 710] close(3 [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 710] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 710] mkdir("./file0", 0777 [pid 376] lstat("./9/file0", [pid 710] <... mkdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 710] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 705] <... futex resumed>) = 1 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... openat resumed>) = 4 [pid 372] <... close resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] close(3 [pid 376] fstat(4, [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... close resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] getdents64(4, [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 717 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 718 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 702] <... futex resumed>) = 0 [pid 376] rmdir("./9/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./9") = 0 [pid 376] mkdir("./10", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 719 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [pid 705] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... write resumed>) = 9 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [ 23.539427][ T705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.555762][ T715] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 705] open("./bus", O_RDWR [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 719 attached ./strace-static-x86_64: Process 718 attached ./strace-static-x86_64: Process 717 attached [pid 705] <... open resumed>) = 5 [pid 719] set_robust_list(0x5555569495e0, 24 [pid 718] set_robust_list(0x5555569495e0, 24 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... mount resumed>) = 0 [pid 717] set_robust_list(0x5555569495e0, 24 [pid 718] <... set_robust_list resumed>) = 0 [pid 717] <... set_robust_list resumed>) = 0 [pid 718] chdir("./9" [pid 705] <... futex resumed>) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... set_robust_list resumed>) = 0 [pid 705] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 702] <... futex resumed>) = 0 [pid 719] chdir("./10" [pid 717] chdir("./9" [pid 705] <... mmap resumed>) = 0x20000000 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... chdir resumed>) = 0 [pid 718] <... chdir resumed>) = 0 [pid 717] <... chdir resumed>) = 0 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 705] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] write(4, 0x20000f80, 9 [pid 719] <... prctl resumed>) = 0 [pid 718] <... prctl resumed>) = 0 [pid 717] <... prctl resumed>) = 0 [pid 702] <... futex resumed>) = 0 [pid 719] setpgid(0, 0 [pid 718] setpgid(0, 0 [pid 717] setpgid(0, 0 [pid 705] <... write resumed>) = 9 [pid 702] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 719] <... setpgid resumed>) = 0 [pid 718] <... setpgid resumed>) = 0 [pid 717] <... setpgid resumed>) = 0 [pid 705] <... futex resumed>) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... mmap resumed>) = 0x7f70edc9c000 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 702] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 719] <... openat resumed>) = 3 [pid 718] <... openat resumed>) = 3 [pid 717] <... openat resumed>) = 3 [pid 710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 702] <... mprotect resumed>) = 0 [pid 719] write(3, "1000", 4 [pid 718] write(3, "1000", 4 [pid 717] write(3, "1000", 4 [pid 719] <... write resumed>) = 4 [pid 718] <... write resumed>) = 4 [pid 717] <... write resumed>) = 4 [pid 702] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 719] close(3 [pid 718] close(3 [pid 717] close(3 [pid 719] <... close resumed>) = 0 [pid 718] <... close resumed>) = 0 [pid 717] <... close resumed>) = 0 [pid 719] symlink("/dev/binderfs", "./binderfs" [pid 718] symlink("/dev/binderfs", "./binderfs" [pid 717] symlink("/dev/binderfs", "./binderfs" [pid 702] <... clone resumed>, parent_tid=[722], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 722 [pid 719] <... symlink resumed>) = 0 [pid 718] <... symlink resumed>) = 0 [pid 717] <... symlink resumed>) = 0 [pid 710] <... openat resumed>) = 3 [pid 702] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 719] <... mmap resumed>) = 0x7f70f5fbd000 [pid 718] <... mmap resumed>) = 0x7f70f5fbd000 [pid 717] <... mmap resumed>) = 0x7f70f5fbd000 [pid 719] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 718] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 717] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 719] <... mprotect resumed>) = 0 [pid 718] <... mprotect resumed>) = 0 [pid 717] <... mprotect resumed>) = 0 [pid 719] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 718] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 717] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 719] <... clone resumed>, parent_tid=[723], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 723 [pid 718] <... clone resumed>, parent_tid=[724], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 724 [pid 717] <... clone resumed>, parent_tid=[725], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 725 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 723 attached ./strace-static-x86_64: Process 722 attached [pid 710] chdir("./file0" [pid 722] set_robust_list(0x7f70edcbc9e0, 24 [pid 710] <... chdir resumed>) = 0 [pid 722] <... set_robust_list resumed>) = 0 [pid 710] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 724 attached ./strace-static-x86_64: Process 725 attached [pid 724] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] set_robust_list(0x7f70f5fdd9e0, 24 [pid 722] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 724] <... set_robust_list resumed>) = 0 [pid 725] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] <... set_robust_list resumed>) = 0 [pid 724] memfd_create("syzkaller", 0 [pid 723] memfd_create("syzkaller", 0 [pid 725] <... set_robust_list resumed>) = 0 [pid 725] memfd_create("syzkaller", 0 [pid 723] <... memfd_create resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 726 [pid 725] <... memfd_create resumed>) = 3 [pid 724] <... memfd_create resumed>) = 3 [pid 723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 723] <... mmap resumed>) = 0x7f70edbbd000 [pid 724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] <... mmap resumed>) = 0x7f70edbbd000 [pid 724] <... mmap resumed>) = 0x7f70edbbd000 [pid 710] <... ioctl resumed>) = 0 [pid 710] close(4) = 0 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... open resumed>) = 4 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... write resumed>) = 9 ./strace-static-x86_64: Process 726 attached [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = ? [pid 702] <... futex resumed>) = ? [pid 726] set_robust_list(0x5555569495e0, 24 [pid 710] <... futex resumed>) = 1 [pid 707] <... futex resumed>) = 0 [pid 705] +++ killed by SIGBUS +++ [pid 726] <... set_robust_list resumed>) = 0 [pid 722] +++ killed by SIGBUS +++ [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] +++ killed by SIGBUS +++ [pid 726] chdir("./9" [pid 725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=702, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 726] <... chdir resumed>) = 0 [pid 710] open("./bus", O_RDWR [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... open resumed>) = 5 [pid 726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... prctl resumed>) = 0 [pid 710] <... mmap resumed>) = 0x20000000 [pid 726] setpgid(0, 0 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... setpgid resumed>) = 0 [pid 710] <... futex resumed>) = 1 [pid 707] <... futex resumed>) = 0 [pid 726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 726] <... openat resumed>) = 3 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 726] write(3, "1000", 4 [pid 710] write(4, 0x20000f80, 9 [pid 707] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 726] <... write resumed>) = 4 [pid 710] <... write resumed>) = 9 [pid 707] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 726] close(3 [pid 724] <... write resumed>) = 1048576 [pid 723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] fstat(3, [pid 710] <... futex resumed>) = 0 [pid 707] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 726] <... close resumed>) = 0 [pid 724] munmap(0x7f70edbbd000, 1048576 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] getdents64(3, [pid 726] symlink("/dev/binderfs", "./binderfs" [pid 724] <... munmap resumed>) = 0 [pid 707] <... mprotect resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 707] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 726] <... symlink resumed>) = 0 [pid 707] <... clone resumed>, parent_tid=[727], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 727 [pid 374] lstat("./8/binderfs", [pid 707] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 707] <... futex resumed>) = 0 [pid 374] unlink("./8/binderfs"./strace-static-x86_64: Process 727 attached [pid 726] <... futex resumed>) = 0 [pid 725] <... write resumed>) = 1048576 [pid 724] <... openat resumed>) = 4 [pid 707] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... unlink resumed>) = 0 [pid 727] set_robust_list(0x7f70edcbc9e0, 24 [pid 726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 725] munmap(0x7f70edbbd000, 1048576 [pid 724] ioctl(4, LOOP_SET_FD, 3 [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 727] <... set_robust_list resumed>) = 0 [pid 726] <... mmap resumed>) = 0x7f70f5fbd000 [ 23.609717][ T710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 23.626955][ T722] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 725] <... munmap resumed>) = 0 [pid 723] <... write resumed>) = 1048576 [pid 724] <... ioctl resumed>) = 0 [pid 723] munmap(0x7f70edbbd000, 1048576) = 0 [pid 723] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 723] ioctl(4, LOOP_SET_FD, 3 [pid 726] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 726] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[729], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 729 [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 724] close(3) = 0 [pid 724] mkdir("./file0", 0777) = 0 [pid 724] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 729 attached [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 729] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] <... ioctl resumed>) = 0 [pid 729] <... set_robust_list resumed>) = 0 [pid 710] <... futex resumed>) = ? [pid 707] <... futex resumed>) = ? [pid 729] memfd_create("syzkaller", 0 [pid 723] close(3 [pid 710] +++ killed by SIGBUS +++ [pid 729] <... memfd_create resumed>) = 3 [pid 729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] <... openat resumed>) = 4 [pid 723] <... close resumed>) = 0 [pid 729] <... mmap resumed>) = 0x7f70edbbd000 [pid 725] ioctl(4, LOOP_SET_FD, 3 [pid 723] mkdir("./file0", 0777) = 0 [pid 723] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 727] +++ killed by SIGBUS +++ [pid 707] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=707, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./9/binderfs") = 0 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 729] <... write resumed>) = 1048576 [pid 729] munmap(0x7f70edbbd000, 1048576) = 0 [pid 729] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 724] <... mount resumed>) = 0 [pid 724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 724] chdir("./file0") = 0 [pid 724] ioctl(4, LOOP_CLR_FD [pid 725] <... ioctl resumed>) = 0 [pid 725] close(3) = 0 [pid 725] mkdir("./file0", 0777) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 729] <... openat resumed>) = 4 [pid 724] <... ioctl resumed>) = 0 [pid 729] ioctl(4, LOOP_SET_FD, 3 [pid 724] close(4 [pid 725] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./8/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./8") = 0 [pid 374] mkdir("./9", 0777) = 0 [ 23.677882][ T727] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.700724][ T724] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 23.719586][ T723] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 723] <... mount resumed>) = 0 [pid 723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 724] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] lstat("./9/file0", [pid 374] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./9/file0" [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 729] <... ioctl resumed>) = 0 [pid 375] getdents64(3, [pid 724] <... futex resumed>) = 1 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./9") = 0 [pid 718] <... futex resumed>) = 0 [pid 375] mkdir("./10", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 737 [pid 723] <... openat resumed>) = 3 [pid 723] chdir("./file0") = 0 [pid 723] ioctl(4, LOOP_CLR_FD) = 0 [pid 723] close(4) = 0 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] open("./bus", O_RDWR) = 5 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] close(3 [pid 724] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 718] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 1 [pid 719] <... futex resumed>) = 0 [pid 723] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... mmap resumed>) = 0x20000000 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 723] write(4, 0x20000f80, 9 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... close resumed>) = 0 [pid 723] <... write resumed>) = 9 [pid 719] <... futex resumed>) = 0 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 724] <... open resumed>) = 4 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 723] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 719] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[739], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 739 [pid 719] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 740 attached ./strace-static-x86_64: Process 739 attached ./strace-static-x86_64: Process 737 attached [pid 729] mkdir("./file0", 0777 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] set_robust_list(0x5555569495e0, 24 [pid 739] set_robust_list(0x7f70edcbc9e0, 24 [pid 737] set_robust_list(0x5555569495e0, 24 [pid 729] <... mkdir resumed>) = 0 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 740 [pid 740] <... set_robust_list resumed>) = 0 [pid 739] <... set_robust_list resumed>) = 0 [pid 737] <... set_robust_list resumed>) = 0 [pid 729] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 724] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] chdir("./9") = 0 [pid 740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 740] setpgid(0, 0) = 0 [pid 740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 740] write(3, "1000", 4) = 4 [pid 740] close(3) = 0 [pid 740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 740] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 740] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[742], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 742 [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 718] <... futex resumed>) = 0 [pid 739] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 723] <... futex resumed>) = ? [pid 719] <... futex resumed>) = ? [pid 724] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 742 attached [pid 737] chdir("./10" [pid 725] <... mount resumed>) = 0 [pid 724] <... write resumed>) = 9 [pid 742] set_robust_list(0x7f70f5fdd9e0, 24 [pid 737] <... chdir resumed>) = 0 [pid 725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... set_robust_list resumed>) = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 725] <... openat resumed>) = 3 [pid 742] memfd_create("syzkaller", 0 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 737] <... prctl resumed>) = 0 [pid 724] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] setpgid(0, 0 [pid 725] chdir("./file0" [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 718] <... futex resumed>) = 0 [pid 737] <... setpgid resumed>) = 0 [pid 724] open("./bus", O_RDWR [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... chdir resumed>) = 0 [pid 742] <... memfd_create resumed>) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 725] ioctl(4, LOOP_CLR_FD [pid 724] <... open resumed>) = 5 [pid 742] <... mmap resumed>) = 0x7f70edbbd000 [pid 737] <... openat resumed>) = 3 [pid 725] <... ioctl resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] write(3, "1000", 4 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 737] <... write resumed>) = 4 [pid 724] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] close(4 [pid 737] close(3 [pid 724] <... mmap resumed>) = 0x20000000 [pid 718] <... futex resumed>) = 0 [pid 737] <... close resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] symlink("/dev/binderfs", "./binderfs" [pid 724] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] <... symlink resumed>) = 0 [pid 724] write(4, 0x20000f80, 9 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... write resumed>) = 9 [pid 718] <... futex resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 724] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 739] +++ killed by SIGBUS +++ [pid 737] <... mmap resumed>) = 0x7f70f5fbd000 [pid 725] <... close resumed>) = 0 [pid 719] +++ killed by SIGBUS +++ [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 717] <... futex resumed>) = 0 [pid 725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... write resumed>) = 1048576 [pid 742] munmap(0x7f70edbbd000, 1048576) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 742] ioctl(4, LOOP_SET_FD, 3 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=719, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 737] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 725] <... open resumed>) = 4 [pid 376] <... restart_syscall resumed>) = 0 [pid 724] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 718] <... futex resumed>) = ? [pid 737] <... mprotect resumed>) = 0 [pid 737] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 376] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 717] <... futex resumed>) = 0 [pid 737] <... clone resumed>, parent_tid=[746], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 746 [pid 725] <... write resumed>) = 9 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 742] <... ioctl resumed>) = 0 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... openat resumed>) = 3 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 742] close(3 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 717] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 725] open("./bus", O_RDWR) = 5 [pid 742] <... close resumed>) = 0 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 742] mkdir("./file0", 0777 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] getdents64(3, [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 1 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 725] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 725] <... mmap resumed>) = 0x20000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 742] <... mkdir resumed>) = 0 [pid 376] lstat("./10/binderfs", [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 725] write(4, 0x20000f80, 9 [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 725] <... write resumed>) = 9 [pid 717] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./10/binderfs" [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... unlink resumed>) = 0 [pid 717] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 717] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 717] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[747], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 747 [pid 717] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 717] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] +++ killed by SIGBUS +++ [pid 718] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=718, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./9/binderfs") = 0 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 747 attached ./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [ 23.752746][ T725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.760300][ T739] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.782644][ T724] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 746] memfd_create("syzkaller", 0) = 3 [pid 746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 747] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 729] <... mount resumed>) = 0 [pid 729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 729] chdir("./file0") = 0 [pid 729] ioctl(4, LOOP_CLR_FD [pid 746] <... write resumed>) = 1048576 [pid 746] munmap(0x7f70edbbd000, 1048576) = 0 [pid 746] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 747] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 725] <... futex resumed>) = ? [pid 717] <... futex resumed>) = ? [pid 725] +++ killed by SIGBUS +++ [pid 747] +++ killed by SIGBUS +++ [pid 717] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=717, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 742] <... mount resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 746] <... openat resumed>) = 4 [pid 729] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 372] unlink("./9/binderfs" [pid 746] ioctl(4, LOOP_SET_FD, 3 [pid 729] close(4 [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./10/file0" [pid 742] <... openat resumed>) = 3 [pid 376] <... rmdir resumed>) = 0 [pid 742] chdir("./file0") = 0 [pid 742] ioctl(4, LOOP_CLR_FD [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./10") = 0 [pid 376] mkdir("./11", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 729] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 746] <... ioctl resumed>) = 0 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 746] close(3 [pid 729] <... futex resumed>) = 1 [pid 726] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... close resumed>) = 0 [pid 729] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 726] <... futex resumed>) = 0 [pid 377] lstat("./9/file0", [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] mkdir("./file0", 0777 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 729] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 746] <... mkdir resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 729] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 4 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] open("./bus", O_RDWR [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... open resumed>) = 5 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... mmap resumed>) = 0x20000000 [pid 377] fstat(4, [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] write(4, 0x20000f80, 9 [pid 726] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] <... write resumed>) = 9 [pid 726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] getdents64(4, [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... mmap resumed>) = 0x7f70edc9c000 [pid 729] <... futex resumed>) = 0 [pid 726] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... mprotect resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 726] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] getdents64(4, [pid 726] <... clone resumed>, parent_tid=[751], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 751 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 726] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] close(4 [pid 726] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./9/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./9") = 0 [pid 377] mkdir("./10", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 751 attached [pid 751] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 23.808611][ T729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.812435][ T747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.834869][ T742] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 751] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 729] <... futex resumed>) = ? [pid 726] <... futex resumed>) = ? [pid 751] +++ killed by SIGBUS +++ [pid 729] +++ killed by SIGBUS +++ [pid 726] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=726, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./9/binderfs") = 0 [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 742] close(4) = 0 [pid 377] <... openat resumed>) = 3 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] close(3 [pid 372] <... umount2 resumed>) = 0 [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... close resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 377] close(3 [pid 742] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] <... open resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 753 attached [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 753 [pid 372] lstat("./9/file0", [pid 753] set_robust_list(0x5555569495e0, 24 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 753] <... set_robust_list resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 755 [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 753] chdir("./11" [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 753] <... chdir resumed>) = 0 [pid 742] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 742] <... write resumed>) = 9 [pid 372] <... openat resumed>) = 4 [pid 753] <... prctl resumed>) = 0 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 753] setpgid(0, 0 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 753] <... setpgid resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 753] <... openat resumed>) = 3 [pid 742] open("./bus", O_RDWR [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 753] write(3, "1000", 4 [pid 742] <... open resumed>) = 5 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 753] <... write resumed>) = 4 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 753] close(3 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 753] <... close resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./9/file0" [pid 753] symlink("/dev/binderfs", "./binderfs" [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 753] <... symlink resumed>) = 0 [pid 746] <... mount resumed>) = 0 [pid 742] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(3, [pid 753] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... mmap resumed>) = 0x20000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 753] <... futex resumed>) = 0 [pid 746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 753] <... mmap resumed>) = 0x7f70f5fbd000 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./9" [pid 753] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 746] <... openat resumed>) = 3 [pid 372] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 755 attached [pid 753] <... mprotect resumed>) = 0 [pid 746] chdir("./file0" [pid 742] write(4, 0x20000f80, 9 [pid 740] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./10", 0777 [pid 755] set_robust_list(0x5555569495e0, 24 [pid 753] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 746] <... chdir resumed>) = 0 [pid 742] <... write resumed>) = 9 [pid 740] <... futex resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 756 attached [pid 755] <... set_robust_list resumed>) = 0 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 756] set_robust_list(0x7f70f5fdd9e0, 24 [pid 753] <... clone resumed>, parent_tid=[756], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 756 [pid 746] ioctl(4, LOOP_CLR_FD [pid 742] <... futex resumed>) = 0 [pid 740] <... mmap resumed>) = 0x7f70edc9c000 [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 753] <... futex resumed>) = 0 [pid 740] <... mprotect resumed>) = 0 [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 740] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[757], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 757 [pid 740] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] chdir("./10" [pid 756] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 757 attached [pid 755] <... chdir resumed>) = 0 [pid 756] memfd_create("syzkaller", 0) = 3 [pid 756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 757] set_robust_list(0x7f70edcbc9e0, 24 [pid 756] <... mmap resumed>) = 0x7f70edbbd000 [pid 757] <... set_robust_list resumed>) = 0 [pid 755] <... prctl resumed>) = 0 [ 23.867872][ T751] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.901562][ T746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 755] setpgid(0, 0 [pid 756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 756] munmap(0x7f70edbbd000, 1048576) = 0 [pid 756] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 755] <... setpgid resumed>) = 0 [pid 755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 755] write(3, "1000", 4) = 4 [pid 755] close(3) = 0 [pid 755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 755] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 755] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[758], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 758 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 758] memfd_create("syzkaller", 0) = 3 [pid 758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 742] <... futex resumed>) = ? [pid 740] <... futex resumed>) = ? [pid 742] +++ killed by SIGBUS +++ [pid 757] +++ killed by SIGBUS +++ [pid 740] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=740, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./9/binderfs") = 0 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 746] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 746] close(4) = 0 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 759 attached [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 759] set_robust_list(0x5555569495e0, 24 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 759 [pid 759] <... set_robust_list resumed>) = 0 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] <... futex resumed>) = 0 [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 746] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... open resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./9/file0", [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 737] <... futex resumed>) = 0 [pid 746] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 746] <... write resumed>) = 9 [pid 373] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 4 [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] open("./bus", O_RDWR [pid 373] fstat(4, [pid 737] <... futex resumed>) = 0 [pid 746] <... open resumed>) = 5 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 746] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 737] <... futex resumed>) = 0 [pid 746] <... mmap resumed>) = 0x20000000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] close(4 [pid 746] write(4, 0x20000f80, 9 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] <... write resumed>) = 9 [pid 373] rmdir("./9/file0" [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 737] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... mprotect resumed>) = 0 [pid 373] getdents64(3, [pid 737] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 737] <... clone resumed>, parent_tid=[760], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 760 [pid 373] close(3 [pid 737] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./9") = 0 [pid 373] mkdir("./10", 0777 [pid 759] chdir("./10"./strace-static-x86_64: Process 760 attached [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 759] <... chdir resumed>) = 0 [pid 760] set_robust_list(0x7f70edcbc9e0, 24 [pid 759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 760] <... set_robust_list resumed>) = 0 [pid 759] <... prctl resumed>) = 0 [pid 759] setpgid(0, 0) = 0 [pid 759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 758] <... write resumed>) = 1048576 [pid 758] munmap(0x7f70edbbd000, 1048576) = 0 [pid 758] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 759] <... openat resumed>) = 3 [pid 759] write(3, "1000", 4) = 4 [pid 759] close(3) = 0 [pid 759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 759] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 759] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[761], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 761 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 761 attached [pid 761] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 761] memfd_create("syzkaller", 0) = 3 [pid 761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 23.917910][ T757] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 761] munmap(0x7f70edbbd000, 1048576) = 0 [pid 761] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 760] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 737] <... futex resumed>) = ? [pid 746] <... futex resumed>) = ? [pid 756] <... openat resumed>) = 4 [pid 756] ioctl(4, LOOP_SET_FD, 3 [pid 746] +++ killed by SIGBUS +++ [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] <... openat resumed>) = 4 [pid 756] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 374] lstat("./9/file0", [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 758] ioctl(4, LOOP_SET_FD, 3 [pid 756] close(3 [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 763 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 758] <... ioctl resumed>) = 0 [pid 756] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 758] close(3 [pid 756] mkdir("./file0", 0777 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 758] <... close resumed>) = 0 [pid 756] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 758] mkdir("./file0", 0777 [pid 756] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] rmdir("./9/file0" [pid 758] <... mkdir resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 758] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./9") = 0 [pid 374] mkdir("./10", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 23.956070][ T760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 761] <... openat resumed>) = 4 [pid 761] ioctl(4, LOOP_SET_FD, 3 [pid 760] +++ killed by SIGBUS +++ [pid 737] +++ killed by SIGBUS +++ [pid 761] <... ioctl resumed>) = 0 [pid 761] close(3) = 0 [pid 761] mkdir("./file0", 0777 [pid 374] close(3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=737, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 758] <... mount resumed>) = 0 [pid 375] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 770 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 758] <... openat resumed>) = 3 [pid 375] getdents64(3, [pid 758] chdir("./file0" [pid 761] <... mkdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 761] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 758] <... chdir resumed>) = 0 [pid 375] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 758] ioctl(4, LOOP_CLR_FD [pid 375] unlink("./10/binderfs" [pid 758] <... ioctl resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] close(4) = 0 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] open("./bus", O_RDWR./strace-static-x86_64: Process 763 attached [pid 763] set_robust_list(0x5555569495e0, 24) = 0 [pid 763] chdir("./10") = 0 [pid 763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 763] setpgid(0, 0) = 0 [pid 756] <... mount resumed>) = 0 [pid 756] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 756] chdir("./file0") = 0 [pid 756] ioctl(4, LOOP_CLR_FD [pid 763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 763] write(3, "1000", 4) = 4 [pid 763] close(3) = 0 [pid 763] symlink("/dev/binderfs", "./binderfs" [pid 758] <... open resumed>) = 5 [pid 763] <... symlink resumed>) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 763] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... clone resumed>, parent_tid=[771], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 771 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x5555569495e0, 24) = 0 [pid 770] chdir("./10") = 0 [pid 770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 770] setpgid(0, 0) = 0 [pid 770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 758] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 770] write(3, "1000", 4 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... write resumed>) = 4 [pid 755] <... futex resumed>) = 0 [pid 770] close(3 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... close resumed>) = 0 [pid 770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 758] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 770] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 770] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 758] <... mmap resumed>) = 0x20000000 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... mprotect resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 1 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] write(4, 0x20000f80, 9 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 770] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] <... write resumed>) = 9 [pid 755] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 773 attached [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... mprotect resumed>) = 0 [pid 770] <... clone resumed>, parent_tid=[773], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 773 [pid 755] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] <... clone resumed>, parent_tid=[774], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 774 [pid 770] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 755] <... futex resumed>) = 0 ./strace-static-x86_64: Process 774 attached [pid 773] set_robust_list(0x7f70f5fdd9e0, 24 [pid 761] <... mount resumed>) = 0 [pid 755] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 761] chdir("./file0") = 0 [pid 761] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 771 attached [pid 771] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 771] memfd_create("syzkaller", 0) = 3 [pid 771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 774] set_robust_list(0x7f70edcbc9e0, 24 [pid 773] <... set_robust_list resumed>) = 0 [pid 773] memfd_create("syzkaller", 0 [pid 774] <... set_robust_list resumed>) = 0 [pid 773] <... memfd_create resumed>) = 3 [pid 773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 23.989468][ T758] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... umount2 resumed>) = 0 [pid 761] <... ioctl resumed>) = 0 [pid 756] <... ioctl resumed>) = 0 [pid 761] close(4 [pid 756] close(4 [pid 761] <... close resumed>) = 0 [pid 756] <... close resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 1 [pid 759] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 761] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... open resumed>) = 4 [pid 759] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... write resumed>) = 9 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] open("./bus", O_RDWR [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... open resumed>) = 5 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... mmap resumed>) = 0x20000000 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] write(4, 0x20000f80, 9 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... write resumed>) = 9 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 759] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 759] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 756] <... open resumed>) = 4 [pid 759] <... clone resumed>, parent_tid=[776], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 776 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 774] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 759] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 0 [pid 756] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] lstat("./10/file0", [pid 759] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 756] <... write resumed>) = 9 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] open("./bus", O_RDWR [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... open resumed>) = 5 [pid 773] <... write resumed>) = 1048576 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] munmap(0x7f70edbbd000, 1048576 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... mmap resumed>) = 0x20000000 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] write(4, 0x20000f80, 9 [pid 753] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] <... munmap resumed>) = 0 [pid 756] <... write resumed>) = 9 [pid 753] <... futex resumed>) = 0 [pid 375] rmdir("./10/file0" [pid 773] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... rmdir resumed>) = 0 [pid 773] <... openat resumed>) = 4 [pid 756] <... futex resumed>) = 0 [pid 753] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] getdents64(3, [pid 773] ioctl(4, LOOP_SET_FD, 3 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 753] <... mprotect resumed>) = 0 [pid 375] close(3 [pid 773] <... ioctl resumed>) = 0 [pid 753] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... close resumed>) = 0 ./strace-static-x86_64: Process 778 attached [pid 773] close(3 [pid 375] rmdir("./10" [pid 778] set_robust_list(0x7f70edcbc9e0, 24 [pid 773] <... close resumed>) = 0 [pid 753] <... clone resumed>, parent_tid=[778], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 778 [pid 375] <... rmdir resumed>) = 0 [pid 753] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./11", 0777 [pid 773] mkdir("./file0", 0777 [pid 753] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 753] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 773] <... mkdir resumed>) = 0 [pid 758] <... futex resumed>) = ? [pid 755] <... futex resumed>) = ? [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 758] +++ killed by SIGBUS +++ [pid 773] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] close(3 [pid 778] <... set_robust_list resumed>) = 0 [pid 774] +++ killed by SIGBUS +++ [pid 755] +++ killed by SIGBUS +++ [ 24.027032][ T774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] <... close resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=755, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 779 [pid 771] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 779 attached [pid 778] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 771] munmap(0x7f70edbbd000, 1048576 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 771] <... munmap resumed>) = 0 [pid 756] <... futex resumed>) = ? [pid 753] <... futex resumed>) = ? [pid 779] set_robust_list(0x5555569495e0, 24 [pid 771] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 761] <... futex resumed>) = ? [pid 759] <... futex resumed>) = ? [pid 756] +++ killed by SIGBUS +++ [pid 377] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... set_robust_list resumed>) = 0 [pid 778] +++ killed by SIGBUS +++ [pid 773] <... mount resumed>) = 0 [pid 771] <... openat resumed>) = 4 [pid 761] +++ killed by SIGBUS +++ [pid 753] +++ killed by SIGBUS +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] chdir("./11" [pid 776] +++ killed by SIGBUS +++ [pid 773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 771] ioctl(4, LOOP_SET_FD, 3 [pid 759] +++ killed by SIGBUS +++ [pid 377] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 773] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=753, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 773] chdir("./file0" [pid 377] fstat(3, [pid 773] <... chdir resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=759, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 773] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 773] <... ioctl resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 773] close(4 [pid 377] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... restart_syscall resumed>) = 0 [pid 779] <... chdir resumed>) = 0 [pid 773] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] unlink("./10/binderfs" [pid 376] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 773] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 771] <... ioctl resumed>) = 0 [pid 770] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... prctl resumed>) = 0 [pid 773] <... open resumed>) = 4 [pid 771] close(3 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] setpgid(0, 0 [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... close resumed>) = 0 [pid 376] fstat(3, [pid 372] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 779] <... setpgid resumed>) = 0 [pid 773] <... futex resumed>) = 0 [pid 771] mkdir("./file0", 0777 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 3 [pid 779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... mkdir resumed>) = 0 [pid 376] getdents64(3, [pid 372] fstat(3, [pid 779] <... openat resumed>) = 3 [pid 771] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 779] write(3, "1000", 4 [pid 770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 773] <... futex resumed>) = 0 [pid 770] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 773] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./11/binderfs", [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] <... write resumed>) = 9 [pid 376] unlink("./11/binderfs" [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] <... write resumed>) = 4 [pid 779] close(3 [pid 376] <... unlink resumed>) = 0 [pid 372] lstat("./10/binderfs", [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 779] <... close resumed>) = 0 [pid 779] symlink("/dev/binderfs", "./binderfs" [pid 770] <... futex resumed>) = 0 [pid 372] unlink("./10/binderfs" [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... symlink resumed>) = 0 [pid 773] open("./bus", O_RDWR [pid 372] <... unlink resumed>) = 0 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] <... open resumed>) = 5 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 779] <... mmap resumed>) = 0x7f70f5fbd000 [pid 773] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 770] <... futex resumed>) = 0 [pid 779] <... mprotect resumed>) = 0 [pid 779] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 773] <... mmap resumed>) = 0x20000000 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 773] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] write(4, 0x20000f80, 9 [pid 770] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] <... clone resumed>, parent_tid=[783], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 783 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = 0 [pid 773] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... mmap resumed>) = 0x7f70edc9c000 ./strace-static-x86_64: Process 783 attached [pid 783] set_robust_list(0x7f70f5fdd9e0, 24 [pid 773] <... futex resumed>) = 0 [pid 770] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] <... mprotect resumed>) = 0 [pid 783] <... set_robust_list resumed>) = 0 [pid 783] memfd_create("syzkaller", 0 [pid 770] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[784], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 784 [pid 770] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 770] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... memfd_create resumed>) = 3 [pid 783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 784 attached [ 24.063635][ T778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.069292][ T776] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 784] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 783] munmap(0x7f70edbbd000, 1048576) = 0 [pid 783] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 784] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 377] <... umount2 resumed>) = 0 [pid 773] <... futex resumed>) = ? [pid 770] <... futex resumed>) = ? [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 773] +++ killed by SIGBUS +++ [pid 377] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 784] +++ killed by SIGBUS +++ [pid 770] +++ killed by SIGBUS +++ [pid 377] <... close resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=770, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 377] rmdir("./10/file0") = 0 [pid 377] getdents64(3, [pid 374] <... restart_syscall resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 374] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] rmdir("./10" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... rmdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] mkdir("./11", 0777 [pid 374] <... openat resumed>) = 3 [pid 377] <... mkdir resumed>) = 0 [pid 374] fstat(3, [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./10/binderfs") = 0 [ 24.114206][ T784] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 783] <... openat resumed>) = 4 [pid 783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 783] close(3) = 0 [pid 377] <... openat resumed>) = 3 [pid 783] mkdir("./file0", 0777) = 0 [pid 783] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./10/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./10") = 0 [pid 372] mkdir("./11", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 771] <... mount resumed>) = 0 [pid 771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 771] chdir("./file0") = 0 [pid 771] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 771] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 377] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... close resumed>) = 0 [pid 376] lstat("./11/file0", [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(3 [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 788 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 789 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./11/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./11") = 0 [pid 376] mkdir("./12", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 790 [pid 771] close(4) = 0 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 0 [pid 771] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] <... futex resumed>) = 0 [pid 771] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... open resumed>) = 4 [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x5555569495e0, 24) = 0 [pid 788] chdir("./11") = 0 [pid 788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 788] setpgid(0, 0) = 0 [pid 788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 788] write(3, "1000", 4) = 4 [pid 788] close(3) = 0 [pid 788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 788] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] lstat("./10/file0", [pid 788] <... clone resumed>, parent_tid=[792], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 792 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 763] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 792 attached [pid 771] <... write resumed>) = 9 [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 792] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 792] memfd_create("syzkaller", 0) = 3 [pid 792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 771] open("./bus", O_RDWR [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... open resumed>) = 5 [pid 374] <... openat resumed>) = 4 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 763] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... mmap resumed>) = 0x20000000 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] write(4, 0x20000f80, 9 [pid 763] <... futex resumed>) = 0 [pid 374] close(4 [pid 763] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... close resumed>) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] rmdir("./10/file0" [pid 771] <... write resumed>) = 9 [pid 763] <... mmap resumed>) = 0x7f70edc9c000 [pid 763] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[793], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 793 [pid 763] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 763] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./10") = 0 [pid 374] mkdir("./11", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 794 [pid 792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 794 attached ./strace-static-x86_64: Process 793 attached [pid 794] set_robust_list(0x5555569495e0, 24) = 0 [pid 793] set_robust_list(0x7f70edcbc9e0, 24 [pid 794] chdir("./11" [pid 793] <... set_robust_list resumed>) = 0 [pid 794] <... chdir resumed>) = 0 [pid 794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 792] <... write resumed>) = 1048576 [pid 792] munmap(0x7f70edbbd000, 1048576) = 0 [pid 792] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 792] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 789 attached [pid 789] set_robust_list(0x5555569495e0, 24) = 0 [pid 789] chdir("./11") = 0 [pid 789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 789] setpgid(0, 0) = 0 [pid 789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 789] write(3, "1000", 4) = 4 [pid 789] close(3) = 0 [pid 789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 789] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[796], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 796 [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 796 attached [pid 796] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 796] memfd_create("syzkaller", 0) = 3 [pid 796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 783] <... mount resumed>) = 0 [pid 783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 783] chdir("./file0") = 0 [pid 783] ioctl(4, LOOP_CLR_FD [pid 794] <... prctl resumed>) = 0 [pid 796] <... write resumed>) = 1048576 [pid 796] munmap(0x7f70edbbd000, 1048576) = 0 [pid 796] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 794] setpgid(0, 0) = 0 [pid 794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 794] write(3, "1000", 4 [pid 792] <... ioctl resumed>) = 0 [pid 783] <... ioctl resumed>) = 0 [pid 792] close(3 [pid 783] close(4 [pid 792] <... close resumed>) = 0 [pid 783] <... close resumed>) = 0 [pid 792] mkdir("./file0", 0777 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... write resumed>) = 4 [pid 792] <... mkdir resumed>) = 0 [pid 783] <... futex resumed>) = 1 [pid 779] <... futex resumed>) = 0 [pid 792] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 783] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 794] close(3 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... close resumed>) = 0 [pid 783] <... open resumed>) = 4 [pid 779] <... futex resumed>) = 0 [pid 794] symlink("/dev/binderfs", "./binderfs" [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... symlink resumed>) = 0 [pid 783] <... futex resumed>) = 0 [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 783] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 0 [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 783] open("./bus", O_RDWR [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... open resumed>) = 5 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 783] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... mmap resumed>) = 0x7f70f5fbd000 [pid 794] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 783] <... mmap resumed>) = 0x20000000 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 783] write(4, 0x20000f80, 9 [pid 779] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 783] <... futex resumed>) = 0 [pid 779] <... mmap resumed>) = 0x7f70edc9c000 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 779] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 794] <... mprotect resumed>) = 0 [pid 779] <... clone resumed>, parent_tid=[798], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 798 [pid 779] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 798 attached [pid 796] <... openat resumed>) = 4 [pid 794] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 779] <... futex resumed>) = 0 [pid 779] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 790 attached [pid 798] set_robust_list(0x7f70edcbc9e0, 24 [pid 796] ioctl(4, LOOP_SET_FD, 3 [pid 793] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 798] <... set_robust_list resumed>) = 0 [pid 794] <... clone resumed>, parent_tid=[799], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 799 [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 799 attached [pid 799] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 799] memfd_create("syzkaller", 0) = 3 [pid 799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 799] munmap(0x7f70edbbd000, 1048576) = 0 [pid 799] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 794] <... futex resumed>) = 0 [pid 796] <... ioctl resumed>) = 0 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 796] close(3) = 0 [pid 796] mkdir("./file0", 0777 [pid 771] <... futex resumed>) = ? [pid 796] <... mkdir resumed>) = 0 [pid 796] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 792] <... mount resumed>) = 0 [pid 792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 792] chdir("./file0") = 0 [pid 792] ioctl(4, LOOP_CLR_FD) = 0 [pid 792] close(4) = 0 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 792] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] set_robust_list(0x5555569495e0, 24 [pid 792] <... open resumed>) = 4 [pid 771] +++ killed by SIGBUS +++ [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... write resumed>) = 9 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... set_robust_list resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 792] open("./bus", O_RDWR) = 5 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] chdir("./12" [pid 792] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 792] write(4, 0x20000f80, 9 [pid 788] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 792] <... write resumed>) = 9 [pid 788] <... mmap resumed>) = 0x7f70edc9c000 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] <... mprotect resumed>) = 0 [pid 788] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 803 attached , parent_tid=[803], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 803 [pid 790] <... chdir resumed>) = 0 [pid 788] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 803] set_robust_list(0x7f70edcbc9e0, 24 [pid 790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... prctl resumed>) = 0 [pid 790] setpgid(0, 0) = 0 [pid 790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 793] +++ killed by SIGBUS +++ [pid 790] write(3, "1000", 4 [pid 763] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=763, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 790] <... write resumed>) = 4 [pid 790] close(3 [pid 373] <... restart_syscall resumed>) = 0 [pid 790] <... close resumed>) = 0 [pid 373] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./10/binderfs") = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 803] <... set_robust_list resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [ 24.271826][ T793] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.301078][ T798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 790] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 798] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 783] <... futex resumed>) = ? [pid 779] <... futex resumed>) = ? [pid 783] +++ killed by SIGBUS +++ [pid 798] +++ killed by SIGBUS +++ [pid 779] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=779, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./11/binderfs") = 0 [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 790] <... mprotect resumed>) = 0 [pid 790] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[806], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 806 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 796] <... mount resumed>) = 0 [pid 796] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 796] chdir("./file0") = 0 [pid 796] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 806 attached [pid 806] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 806] memfd_create("syzkaller", 0) = 3 [pid 806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 803] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 792] <... futex resumed>) = ? [pid 788] <... futex resumed>) = ? [pid 792] +++ killed by SIGBUS +++ [pid 803] +++ killed by SIGBUS +++ [pid 788] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=788, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./11/binderfs") = 0 [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 799] <... openat resumed>) = 4 [pid 806] <... write resumed>) = 1048576 [pid 806] munmap(0x7f70edbbd000, 1048576) = 0 [pid 796] <... ioctl resumed>) = 0 [pid 806] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 799] ioctl(4, LOOP_SET_FD, 3 [ 24.334532][ T803] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 796] close(4 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 799] <... ioctl resumed>) = 0 [pid 796] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] <... openat resumed>) = 4 [pid 806] ioctl(4, LOOP_SET_FD, 3 [pid 799] close(3 [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] <... ioctl resumed>) = 0 [pid 799] <... close resumed>) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] close(3 [pid 799] mkdir("./file0", 0777 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./11/file0", [pid 375] lstat("./11/file0", [pid 373] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 806] <... close resumed>) = 0 [pid 799] <... mkdir resumed>) = 0 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 806] mkdir("./file0", 0777 [pid 799] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 796] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 4 [pid 806] <... mkdir resumed>) = 0 [pid 806] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 796] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] fstat(4, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 375] <... openat resumed>) = 4 [pid 373] getdents64(4, [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] fstat(4, [pid 796] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 796] <... write resumed>) = 9 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 796] open("./bus", O_RDWR [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./11/file0" [pid 796] <... open resumed>) = 5 [pid 375] close(4 [pid 373] rmdir("./10/file0" [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 796] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 796] <... mmap resumed>) = 0x20000000 [pid 375] rmdir("./11/file0" [pid 373] getdents64(3, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 796] write(4, 0x20000f80, 9 [pid 789] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... write resumed>) = 9 [pid 789] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] getdents64(3, [pid 373] close(3 [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 796] <... futex resumed>) = 0 [pid 789] <... mmap resumed>) = 0x7f70edc9c000 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] rmdir("./11" [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 789] <... clone resumed>, parent_tid=[809], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 809 [pid 789] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 809 attached [pid 377] <... rmdir resumed>) = 0 [pid 375] close(3 [pid 373] rmdir("./10" [pid 377] mkdir("./12", 0777 [pid 375] <... close resumed>) = 0 [pid 809] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] <... rmdir resumed>) = 0 [pid 809] <... set_robust_list resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 375] rmdir("./11" [pid 373] mkdir("./11", 0777 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] <... rmdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 375] mkdir("./12", 0777 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] close(3 [pid 375] <... openat resumed>) = 3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... close resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] close(3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 [pid 375] close(3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 811 attached [pid 809] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 799] <... mount resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 811 [pid 375] <... close resumed>) = 0 [pid 811] set_robust_list(0x5555569495e0, 24 [pid 799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 796] <... futex resumed>) = ? [pid 789] <... futex resumed>) = ? [pid 811] <... set_robust_list resumed>) = 0 [pid 799] <... openat resumed>) = 3 [pid 796] +++ killed by SIGBUS +++ [pid 811] chdir("./12" [pid 806] <... mount resumed>) = 0 [pid 799] chdir("./file0" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 815 [pid 811] <... chdir resumed>) = 0 [pid 806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 799] <... chdir resumed>) = 0 [pid 811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 799] ioctl(4, LOOP_CLR_FD [pid 811] <... prctl resumed>) = 0 [pid 799] <... ioctl resumed>) = 0 [pid 811] setpgid(0, 0 [pid 809] +++ killed by SIGBUS +++ [pid 806] <... openat resumed>) = 3 [pid 799] close(4 [pid 789] +++ killed by SIGBUS +++ [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 816 [pid 811] <... setpgid resumed>) = 0 [pid 806] chdir("./file0" [pid 799] <... close resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=789, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 806] <... chdir resumed>) = 0 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 811] <... openat resumed>) = 3 [pid 806] ioctl(4, LOOP_CLR_FD [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 811] write(3, "1000", 4 [pid 806] <... ioctl resumed>) = 0 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 811] <... write resumed>) = 4 [pid 806] close(4 [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 811] close(3 [pid 806] <... close resumed>) = 0 [pid 799] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... close resumed>) = 0 [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... open resumed>) = 4 [pid 372] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 811] symlink("/dev/binderfs", "./binderfs" [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 811] <... symlink resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 811] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 811] <... futex resumed>) = 0 [pid 806] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(3, [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 799] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 811] <... mmap resumed>) = 0x7f70f5fbd000 [pid 806] <... open resumed>) = 4 [pid 799] <... write resumed>) = 9 [pid 372] getdents64(3, [pid 811] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 811] <... mprotect resumed>) = 0 [pid 799] <... futex resumed>) = 1 [pid 372] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 811] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./11/binderfs", [pid 811] <... clone resumed>, parent_tid=[817], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 817 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 799] open("./bus", O_RDWR [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] unlink("./11/binderfs" [pid 811] <... futex resumed>) = 0 [pid 799] <... open resumed>) = 5 [pid 372] <... unlink resumed>) = 0 [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 806] <... write resumed>) = 9 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 ./strace-static-x86_64: Process 815 attached ./strace-static-x86_64: Process 816 attached [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 815] set_robust_list(0x5555569495e0, 24 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] set_robust_list(0x5555569495e0, 24 [pid 815] <... set_robust_list resumed>) = 0 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 0 [pid 816] <... set_robust_list resumed>) = 0 [pid 815] chdir("./11" [pid 806] open("./bus", O_RDWR [pid 799] <... mmap resumed>) = 0x20000000 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... chdir resumed>) = 0 [pid 806] <... open resumed>) = 5 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] chdir("./12" [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 816] <... chdir resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 799] write(4, 0x20000f80, 9 [pid 806] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 794] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] setpgid(0, 0 [pid 806] <... mmap resumed>) = 0x20000000 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 816] <... prctl resumed>) = 0 [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... write resumed>) = 9 [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... mmap resumed>) = 0x7f70edc9c000 [pid 790] <... futex resumed>) = 0 [pid 816] setpgid(0, 0 [pid 815] <... setpgid resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = 0 [pid 794] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... setpgid resumed>) = 0 [pid 815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... mprotect resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 815] <... openat resumed>) = 3 [pid 806] write(4, 0x20000f80, 9 [pid 794] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 790] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] write(3, "1000", 4) = 4 [pid 815] close(3 [pid 790] <... futex resumed>) = 0 [pid 815] <... close resumed>) = 0 [pid 806] <... write resumed>) = 9 [pid 794] <... clone resumed>, parent_tid=[818], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 818 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 816] <... openat resumed>) = 3 [pid 815] symlink("/dev/binderfs", "./binderfs" [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] write(3, "1000", 4 [pid 815] <... symlink resumed>) = 0 [pid 806] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 0 [pid 790] <... mmap resumed>) = 0x7f70edc9c000 [pid 816] <... write resumed>) = 4 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 816] close(3 [pid 815] <... futex resumed>) = 0 [pid 815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 790] <... mprotect resumed>) = 0 [pid 815] <... mmap resumed>) = 0x7f70f5fbd000 [pid 815] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 790] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 816] <... close resumed>) = 0 [pid 815] <... mprotect resumed>) = 0 [pid 815] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 816] symlink("/dev/binderfs", "./binderfs" [pid 815] <... clone resumed>, parent_tid=[820], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 820 [pid 790] <... clone resumed>, parent_tid=[819], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 819 [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... symlink resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 790] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 818 attached [pid 816] <... futex resumed>) = 0 [pid 818] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 820 attached ./strace-static-x86_64: Process 819 attached ./strace-static-x86_64: Process 817 attached [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 819] set_robust_list(0x7f70edcbc9e0, 24 [pid 817] set_robust_list(0x7f70f5fdd9e0, 24 [pid 816] <... mmap resumed>) = 0x7f70f5fbd000 [pid 820] set_robust_list(0x7f70f5fdd9e0, 24 [pid 819] <... set_robust_list resumed>) = 0 [pid 817] <... set_robust_list resumed>) = 0 [ 24.453235][ T809] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.487421][ T818] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 816] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 818] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 816] <... mprotect resumed>) = 0 [pid 820] <... set_robust_list resumed>) = 0 [pid 820] memfd_create("syzkaller", 0) = 3 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 820] munmap(0x7f70edbbd000, 1048576) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 817] memfd_create("syzkaller", 0) = 3 [pid 817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 799] <... futex resumed>) = ? [pid 794] <... futex resumed>) = ? [pid 816] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 799] +++ killed by SIGBUS +++ [pid 818] +++ killed by SIGBUS +++ [pid 794] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=794, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=1} --- [pid 819] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 374] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 806] <... futex resumed>) = ? [pid 790] <... futex resumed>) = ? [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 816] <... clone resumed>, parent_tid=[821], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 821 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 816] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./11/binderfs", [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./11/binderfs") = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] +++ killed by SIGBUS +++ [pid 817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 821 attached [pid 819] +++ killed by SIGBUS +++ [pid 790] +++ killed by SIGBUS +++ [pid 821] set_robust_list(0x7f70f5fdd9e0, 24 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=790, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 821] <... set_robust_list resumed>) = 0 [pid 821] memfd_create("syzkaller", 0) = 3 [pid 376] <... restart_syscall resumed>) = 0 [pid 821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./12/binderfs") = 0 [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 820] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = 0 [pid 820] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 817] <... write resumed>) = 1048576 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 817] munmap(0x7f70edbbd000, 1048576 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./11/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./11") = 0 [pid 372] mkdir("./12", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 817] <... munmap resumed>) = 0 [pid 817] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 821] munmap(0x7f70edbbd000, 1048576) = 0 [ 24.490107][ T819] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 821] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./11/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./11") = 0 [pid 374] mkdir("./12", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 820] <... ioctl resumed>) = 0 [pid 817] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 3 [pid 821] <... openat resumed>) = 4 [pid 817] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... umount2 resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 821] ioctl(4, LOOP_SET_FD, 3 [pid 820] close(3 [pid 817] <... ioctl resumed>) = 0 [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 820] <... close resumed>) = 0 [pid 817] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 821] <... ioctl resumed>) = 0 [pid 820] mkdir("./file0", 0777 [pid 817] <... close resumed>) = 0 [pid 376] lstat("./12/file0", [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 821] close(3 [pid 820] <... mkdir resumed>) = 0 [pid 817] mkdir("./file0", 0777 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] close(3 [pid 372] close(3 [pid 821] <... close resumed>) = 0 [pid 820] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 817] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 821] mkdir("./file0", 0777 [pid 817] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 825 [pid 821] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 821] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... openat resumed>) = 4 ./strace-static-x86_64: Process 825 attached [pid 376] fstat(4, [pid 825] set_robust_list(0x5555569495e0, 24 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 827 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./12/file0" [pid 825] <... set_robust_list resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./12") = 0 [pid 376] mkdir("./13", 0777 [pid 825] chdir("./12" [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 825] <... chdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 825] <... prctl resumed>) = 0 [pid 376] close(3 [pid 825] setpgid(0, 0) = 0 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 825] write(3, "1000", 4) = 4 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 829 [pid 825] close(3) = 0 [pid 825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 825] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 827 attached ) = 0 [pid 827] set_robust_list(0x5555569495e0, 24 [pid 825] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 827] <... set_robust_list resumed>) = 0 [pid 827] chdir("./12" [pid 825] <... clone resumed>, parent_tid=[830], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 830 [pid 827] <... chdir resumed>) = 0 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 825] <... futex resumed>) = 0 [pid 827] <... prctl resumed>) = 0 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] <... mount resumed>) = 0 [pid 827] setpgid(0, 0 [pid 820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 820] chdir("./file0" [pid 827] <... setpgid resumed>) = 0 [pid 820] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 829 attached [pid 827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 820] ioctl(4, LOOP_CLR_FD [pid 829] set_robust_list(0x5555569495e0, 24 [pid 827] <... openat resumed>) = 3 [pid 820] <... ioctl resumed>) = 0 [pid 829] <... set_robust_list resumed>) = 0 [pid 827] write(3, "1000", 4 [pid 820] close(4 [pid 829] chdir("./13" [pid 827] <... write resumed>) = 4 [pid 820] <... close resumed>) = 0 [pid 829] <... chdir resumed>) = 0 [pid 827] close(3 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 827] <... close resumed>) = 0 [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 820] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] <... prctl resumed>) = 0 [pid 827] symlink("/dev/binderfs", "./binderfs" [pid 829] setpgid(0, 0 [pid 827] <... symlink resumed>) = 0 [pid 820] <... open resumed>) = 4 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 830 attached [pid 829] <... setpgid resumed>) = 0 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 830] set_robust_list(0x7f70f5fdd9e0, 24 [pid 829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 827] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... set_robust_list resumed>) = 0 [pid 829] <... openat resumed>) = 3 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 830] memfd_create("syzkaller", 0 [pid 829] write(3, "1000", 4 [pid 827] <... mmap resumed>) = 0x7f70f5fbd000 [pid 820] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] <... memfd_create resumed>) = 3 [pid 829] <... write resumed>) = 4 [pid 827] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 829] close(3 [pid 827] <... mprotect resumed>) = 0 [pid 820] <... write resumed>) = 9 [pid 830] <... mmap resumed>) = 0x7f70edbbd000 [pid 829] <... close resumed>) = 0 [pid 827] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] symlink("/dev/binderfs", "./binderfs" [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 829] <... symlink resumed>) = 0 [pid 827] <... clone resumed>, parent_tid=[833], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 833 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 0 [pid 820] open("./bus", O_RDWR [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] <... open resumed>) = 5 [pid 829] <... mmap resumed>) = 0x7f70f5fbd000 [pid 829] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... mprotect resumed>) = 0 [pid 829] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 833 attached [pid 829] <... clone resumed>, parent_tid=[834], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 834 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] <... futex resumed>) = 0 [pid 820] <... mmap resumed>) = 0x20000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 815] <... futex resumed>) = 0 [pid 833] set_robust_list(0x7f70f5fdd9e0, 24 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 820] write(4, 0x20000f80, 9 [pid 815] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... set_robust_list resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 820] <... write resumed>) = 9 [pid 815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... mmap resumed>) = 0x7f70edc9c000 [pid 820] <... futex resumed>) = 0 [pid 815] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] <... mprotect resumed>) = 0 [pid 815] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 833] memfd_create("syzkaller", 0 [pid 815] <... clone resumed>, parent_tid=[837], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 837 [pid 815] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... memfd_create resumed>) = 3 [pid 833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 837 attached [pid 821] <... mount resumed>) = 0 [pid 817] <... mount resumed>) = 0 [pid 821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 817] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 834 attached [pid 837] set_robust_list(0x7f70edcbc9e0, 24 [pid 833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] <... openat resumed>) = 3 [pid 817] <... openat resumed>) = 3 [pid 830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] chdir("./file0" [pid 817] chdir("./file0" [pid 821] <... chdir resumed>) = 0 [pid 817] <... chdir resumed>) = 0 [pid 821] ioctl(4, LOOP_CLR_FD [pid 817] ioctl(4, LOOP_CLR_FD [pid 837] <... set_robust_list resumed>) = 0 [pid 834] set_robust_list(0x7f70f5fdd9e0, 24 [pid 821] <... ioctl resumed>) = 0 [pid 817] <... ioctl resumed>) = 0 [pid 821] close(4 [pid 817] close(4 [pid 821] <... close resumed>) = 0 [pid 817] <... close resumed>) = 0 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 817] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... write resumed>) = 1048576 [pid 833] munmap(0x7f70edbbd000, 1048576) = 0 [pid 833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 833] ioctl(4, LOOP_SET_FD, 3 [pid 834] <... set_robust_list resumed>) = 0 [pid 834] memfd_create("syzkaller", 0) = 3 [pid 834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 837] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 821] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 817] <... open resumed>) = 4 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = ? [pid 817] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = ? [pid 811] <... futex resumed>) = 0 [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 821] <... open resumed>) = 4 [pid 817] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] +++ killed by SIGBUS +++ [pid 821] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 821] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... write resumed>) = 9 [pid 816] <... futex resumed>) = 0 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... write resumed>) = 9 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] open("./bus", O_RDWR [pid 817] open("./bus", O_RDWR [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... open resumed>) = 5 [pid 817] <... open resumed>) = 5 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] +++ killed by SIGBUS +++ [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 815] +++ killed by SIGBUS +++ [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=815, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 821] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 817] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 821] <... mmap resumed>) = 0x20000000 [pid 817] <... mmap resumed>) = 0x20000000 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... restart_syscall resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] write(4, 0x20000f80, 9 [pid 817] write(4, 0x20000f80, 9 [pid 816] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] <... write resumed>) = 9 [pid 817] <... write resumed>) = 9 [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 830] <... write resumed>) = 1048576 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... mmap resumed>) = 0x7f70edc9c000 [pid 811] <... mmap resumed>) = 0x7f70edc9c000 [pid 373] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] <... futex resumed>) = 0 [pid 817] <... futex resumed>) = 0 [pid 816] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 811] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 816] <... mprotect resumed>) = 0 [pid 811] <... mprotect resumed>) = 0 [pid 816] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 811] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... openat resumed>) = 3 [pid 830] munmap(0x7f70edbbd000, 1048576 [pid 816] <... clone resumed>, parent_tid=[839], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 839 [pid 811] <... clone resumed>, parent_tid=[840], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 840 [pid 373] fstat(3, ./strace-static-x86_64: Process 840 attached [pid 830] <... munmap resumed>) = 0 [pid 816] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 830] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 816] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 840] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 839 attached [pid 840] <... set_robust_list resumed>) = 0 [pid 834] <... write resumed>) = 1048576 [pid 833] <... ioctl resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 833] close(3 [pid 830] <... openat resumed>) = 4 [pid 833] <... close resumed>) = 0 [pid 830] ioctl(4, LOOP_SET_FD, 3 [pid 833] mkdir("./file0", 0777) = 0 [pid 833] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 839] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 840] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] munmap(0x7f70edbbd000, 1048576 [pid 373] lstat("./11/binderfs", [pid 834] <... munmap resumed>) = 0 [ 24.659688][ T837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.694413][ T840] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 817] <... futex resumed>) = ? [pid 811] <... futex resumed>) = ? [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 834] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 817] +++ killed by SIGBUS +++ [pid 373] unlink("./11/binderfs" [pid 840] +++ killed by SIGBUS +++ [pid 811] +++ killed by SIGBUS +++ [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=811, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./12/binderfs") = 0 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 830] <... ioctl resumed>) = 0 [pid 830] close(3) = 0 [pid 830] mkdir("./file0", 0777) = 0 [pid 830] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 839] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] <... openat resumed>) = 4 [pid 834] ioctl(4, LOOP_SET_FD, 3 [pid 821] <... futex resumed>) = ? [pid 816] <... futex resumed>) = ? [pid 834] <... ioctl resumed>) = 0 [pid 834] close(3) = 0 [pid 834] mkdir("./file0", 0777) = 0 [pid 834] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 821] +++ killed by SIGBUS +++ [pid 839] +++ killed by SIGBUS +++ [pid 816] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=816, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 830] <... mount resumed>) = 0 [pid 830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... restart_syscall resumed>) = 0 [pid 830] <... openat resumed>) = 3 [pid 375] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 830] chdir("./file0" [pid 375] <... openat resumed>) = 3 [pid 830] <... chdir resumed>) = 0 [pid 375] fstat(3, [pid 830] ioctl(4, LOOP_CLR_FD [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./12/binderfs") = 0 [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 833] <... mount resumed>) = 0 [pid 833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 833] chdir("./file0") = 0 [pid 833] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 24.708625][ T839] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./11/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./11") = 0 [pid 373] mkdir("./12", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 834] <... mount resumed>) = 0 [pid 834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 834] chdir("./file0") = 0 [pid 834] ioctl(4, LOOP_CLR_FD [pid 830] <... ioctl resumed>) = 0 [pid 830] close(4 [pid 833] <... ioctl resumed>) = 0 [pid 833] close(4) = 0 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 3 [pid 834] <... ioctl resumed>) = 0 [pid 833] <... open resumed>) = 4 [pid 830] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] close(4 [pid 833] <... write resumed>) = 9 [pid 830] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] open("./bus", O_RDWR [pid 830] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... close resumed>) = 0 [pid 833] <... open resumed>) = 5 [pid 830] <... write resumed>) = 9 [pid 373] close(3 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 830] open("./bus", O_RDWR [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... mmap resumed>) = 0x20000000 [pid 830] <... open resumed>) = 5 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] write(4, 0x20000f80, 9 [pid 830] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 827] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = 1 [pid 833] <... write resumed>) = 9 [pid 830] <... mmap resumed>) = 0x20000000 [pid 829] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 833] <... futex resumed>) = 0 [pid 830] <... futex resumed>) = 1 [pid 827] <... mmap resumed>) = 0x7f70edc9c000 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... mprotect resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 830] write(4, 0x20000f80, 9 [pid 827] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 825] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... write resumed>) = 9 [pid 825] <... futex resumed>) = 0 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... clone resumed>, parent_tid=[849], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 849 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 830] <... futex resumed>) = 0 [pid 827] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... mmap resumed>) = 0x7f70edc9c000 [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] <... futex resumed>) = 0 [pid 825] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 827] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] <... mprotect resumed>) = 0 [pid 825] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[850], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 850 [pid 825] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 850 attached [pid 850] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 849 attached [pid 834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 834] <... open resumed>) = 4 [pid 829] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 851 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./12/file0", [pid 375] lstat("./12/file0", [pid 834] <... futex resumed>) = 0 [pid 829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 834] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 851 attached [pid 850] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 4 [pid 375] <... openat resumed>) = 4 [pid 851] set_robust_list(0x5555569495e0, 24 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... futex resumed>) = ? [pid 825] <... futex resumed>) = ? [pid 377] fstat(4, [pid 375] fstat(4, [pid 851] <... set_robust_list resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 830] +++ killed by SIGBUS +++ [pid 829] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 851] chdir("./12" [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 851] <... chdir resumed>) = 0 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 834] open("./bus", O_RDWR [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 851] <... prctl resumed>) = 0 [pid 834] <... open resumed>) = 5 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 851] setpgid(0, 0 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 375] close(4 [pid 851] <... setpgid resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 829] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./12/file0" [pid 375] rmdir("./12/file0" [pid 851] <... openat resumed>) = 3 [pid 850] +++ killed by SIGBUS +++ [pid 849] set_robust_list(0x7f70edcbc9e0, 24 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 825] +++ killed by SIGBUS +++ [pid 377] <... rmdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 851] write(3, "1000", 4 [pid 849] <... set_robust_list resumed>) = 0 [pid 834] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 375] getdents64(3, [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=825, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 851] <... write resumed>) = 4 [pid 834] <... mmap resumed>) = 0x20000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 851] close(3) = 0 [pid 851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 851] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[852], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 852 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 852 attached [pid 852] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 852] memfd_create("syzkaller", 0) = 3 [pid 852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 852] munmap(0x7f70edbbd000, 1048576) = 0 [pid 852] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 852] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 375] close(3 [pid 852] <... ioctl resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 377] <... close resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] rmdir("./12" [pid 852] close(3 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./12" [pid 377] <... rmdir resumed>) = 0 [pid 834] write(4, 0x20000f80, 9 [pid 829] <... futex resumed>) = 0 [pid 829] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 834] <... write resumed>) = 9 [pid 375] mkdir("./13", 0777 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] mkdir("./13", 0777 [pid 834] <... futex resumed>) = 0 [pid 829] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... mkdir resumed>) = 0 [pid 374] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... mkdir resumed>) = 0 [pid 829] <... mprotect resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 829] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 829] <... clone resumed>, parent_tid=[854], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 854 [pid 375] <... openat resumed>) = 3 [pid 829] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] ioctl(3, LOOP_CLR_FD [pid 852] <... close resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] fstat(3, [pid 852] mkdir("./file0", 0777 [pid 829] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 375] close(3 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 852] <... mkdir resumed>) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... close resumed>) = 0 [pid 374] lstat("./12/binderfs", [pid 852] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 855 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 856 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./12/binderfs") = 0 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 833] <... futex resumed>) = ? [pid 827] <... futex resumed>) = ? [pid 833] +++ killed by SIGBUS +++ [pid 849] +++ killed by SIGBUS +++ [pid 827] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=827, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 854 attached [pid 854] set_robust_list(0x7f70edcbc9e0, 24 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./12/binderfs") = 0 [ 24.857394][ T850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.877668][ T849] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 854] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 856 attached ./strace-static-x86_64: Process 855 attached [pid 856] set_robust_list(0x5555569495e0, 24 [pid 855] set_robust_list(0x5555569495e0, 24 [pid 854] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 856] <... set_robust_list resumed>) = 0 [pid 855] <... set_robust_list resumed>) = 0 [pid 834] <... futex resumed>) = ? [pid 829] <... futex resumed>) = ? [pid 852] <... mount resumed>) = 0 [pid 834] +++ killed by SIGBUS +++ [pid 855] chdir("./13" [pid 856] chdir("./13" [pid 855] <... chdir resumed>) = 0 [pid 856] <... chdir resumed>) = 0 [pid 856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 856] <... prctl resumed>) = 0 [pid 855] <... prctl resumed>) = 0 [pid 852] <... openat resumed>) = 3 [pid 856] setpgid(0, 0 [pid 855] setpgid(0, 0 [pid 852] chdir("./file0" [pid 856] <... setpgid resumed>) = 0 [pid 855] <... setpgid resumed>) = 0 [pid 854] +++ killed by SIGBUS +++ [pid 829] +++ killed by SIGBUS +++ [pid 852] <... chdir resumed>) = 0 [pid 852] ioctl(4, LOOP_CLR_FD [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=829, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 856] <... openat resumed>) = 3 [pid 856] write(3, "1000", 4 [pid 855] <... openat resumed>) = 3 [pid 856] <... write resumed>) = 4 [pid 856] close(3 [pid 855] write(3, "1000", 4 [pid 376] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... close resumed>) = 0 [pid 856] symlink("/dev/binderfs", "./binderfs" [pid 855] <... write resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] <... symlink resumed>) = 0 [pid 855] close(3 [pid 376] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 855] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 855] symlink("/dev/binderfs", "./binderfs" [pid 376] fstat(3, [pid 856] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... symlink resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 856] <... futex resumed>) = 0 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 855] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 855] <... mmap resumed>) = 0x7f70f5fbd000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 855] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] lstat("./13/binderfs", [pid 855] <... mprotect resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 855] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] unlink("./13/binderfs") = 0 [pid 855] <... clone resumed>, parent_tid=[859], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 859 [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 859 attached [pid 859] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 859] memfd_create("syzkaller", 0) = 3 [pid 859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 374] <... umount2 resumed>) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... mmap resumed>) = 0x7f70f5fbd000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 374] lstat("./12/file0", [pid 856] <... mprotect resumed>) = 0 [pid 856] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 856] <... clone resumed>, parent_tid=[860], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 860 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 860 attached [pid 860] set_robust_list(0x7f70f5fdd9e0, 24 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 860] <... set_robust_list resumed>) = 0 [pid 374] getdents64(4, [pid 860] memfd_create("syzkaller", 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 860] <... memfd_create resumed>) = 3 [pid 374] close(4 [pid 860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] <... close resumed>) = 0 [pid 860] <... mmap resumed>) = 0x7f70edbbd000 [pid 374] rmdir("./12/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./12") = 0 [pid 374] mkdir("./13", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 859] <... write resumed>) = 1048576 [pid 859] munmap(0x7f70edbbd000, 1048576) = 0 [pid 859] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 860] <... write resumed>) = 1048576 [pid 860] munmap(0x7f70edbbd000, 1048576) = 0 [pid 860] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 852] <... ioctl resumed>) = 0 [ 24.910493][ T854] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 852] close(4 [pid 860] <... openat resumed>) = 4 [pid 859] <... openat resumed>) = 4 [pid 852] <... close resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 852] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 851] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 852] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] close(3 [pid 372] lstat("./12/file0", [pid 374] <... close resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 861 [pid 372] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./12/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./12") = 0 [pid 372] mkdir("./13", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 862 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 1 [pid 860] ioctl(4, LOOP_SET_FD, 3 [pid 852] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 852] <... open resumed>) = 4 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 851] <... futex resumed>) = 0 [pid 852] <... write resumed>) = 9 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./13/file0", [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 860] <... ioctl resumed>) = 0 [pid 852] open("./bus", O_RDWR [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 860] close(3 [pid 851] <... futex resumed>) = 0 [pid 860] <... close resumed>) = 0 [pid 852] <... open resumed>) = 5 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] <... futex resumed>) = 0 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 851] <... futex resumed>) = 0 [pid 860] mkdir("./file0", 0777 [pid 852] <... mmap resumed>) = 0x20000000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] <... futex resumed>) = 0 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... mkdir resumed>) = 0 [pid 852] write(4, 0x20000f80, 9 [pid 860] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 851] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 851] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] <... write resumed>) = 9 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 852] <... futex resumed>) = 0 [pid 851] <... mmap resumed>) = 0x7f70edc9c000 [pid 852] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 851] <... clone resumed>, parent_tid=[864], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 864 [pid 851] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 851] <... futex resumed>) = 0 ./strace-static-x86_64: Process 864 attached [pid 851] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 862 attached ./strace-static-x86_64: Process 861 attached [pid 859] ioctl(4, LOOP_SET_FD, 3 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./13/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./13") = 0 [pid 376] mkdir("./14", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 861] set_robust_list(0x5555569495e0, 24 [pid 862] set_robust_list(0x5555569495e0, 24) = 0 [pid 861] <... set_robust_list resumed>) = 0 [pid 862] chdir("./13" [pid 861] chdir("./13" [pid 862] <... chdir resumed>) = 0 [pid 861] <... chdir resumed>) = 0 [pid 862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 862] <... prctl resumed>) = 0 [pid 861] <... prctl resumed>) = 0 [pid 862] setpgid(0, 0 [pid 861] setpgid(0, 0 [pid 862] <... setpgid resumed>) = 0 [pid 862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 861] <... setpgid resumed>) = 0 [pid 862] <... openat resumed>) = 3 [pid 861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 862] write(3, "1000", 4 [pid 861] <... openat resumed>) = 3 [pid 862] <... write resumed>) = 4 [pid 861] write(3, "1000", 4 [pid 862] close(3 [pid 861] <... write resumed>) = 4 [pid 862] <... close resumed>) = 0 [pid 861] close(3 [pid 862] symlink("/dev/binderfs", "./binderfs" [pid 861] <... close resumed>) = 0 [pid 862] <... symlink resumed>) = 0 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] symlink("/dev/binderfs", "./binderfs" [pid 862] <... futex resumed>) = 0 [pid 861] <... symlink resumed>) = 0 [pid 862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 862] <... mmap resumed>) = 0x7f70f5fbd000 [pid 861] <... futex resumed>) = 0 [pid 862] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 852] <... futex resumed>) = ? [pid 851] <... futex resumed>) = ? [pid 862] <... mprotect resumed>) = 0 [pid 861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 862] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 852] +++ killed by SIGBUS +++ [pid 861] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 866 attached [pid 864] +++ killed by SIGBUS +++ [pid 861] <... mprotect resumed>) = 0 [pid 859] <... ioctl resumed>) = 0 [pid 851] +++ killed by SIGBUS +++ [pid 376] <... openat resumed>) = 3 [pid 866] set_robust_list(0x7f70f5fdd9e0, 24 [pid 862] <... clone resumed>, parent_tid=[866], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 866 [pid 861] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 860] <... mount resumed>) = 0 [pid 859] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 859] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 861] <... clone resumed>, parent_tid=[869], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 869 [pid 859] mkdir("./file0", 0777 [pid 376] close(3 [pid 866] <... set_robust_list resumed>) = 0 [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 859] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=851, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 861] <... futex resumed>) = 0 [pid 859] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 870 attached [pid 866] memfd_create("syzkaller", 0 [pid 862] <... futex resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 860] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 870 ./strace-static-x86_64: Process 869 attached [pid 869] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 869] memfd_create("syzkaller", 0) = 3 [pid 869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 866] <... memfd_create resumed>) = 3 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 860] chdir("./file0" [pid 866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 860] <... chdir resumed>) = 0 [pid 373] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 866] <... mmap resumed>) = 0x7f70edbbd000 [pid 860] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 860] <... ioctl resumed>) = 0 [pid 373] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... openat resumed>) = 3 [pid 860] close(4 [pid 869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 860] <... close resumed>) = 0 [pid 373] fstat(3, [pid 870] set_robust_list(0x5555569495e0, 24 [pid 866] <... write resumed>) = 1048576 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 860] <... futex resumed>) = 1 [pid 373] getdents64(3, [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 860] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 860] <... open resumed>) = 4 [pid 373] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 870] <... set_robust_list resumed>) = 0 [pid 866] munmap(0x7f70edbbd000, 1048576 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./12/binderfs") = 0 [pid 860] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 860] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... write resumed>) = 9 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] <... futex resumed>) = 0 [pid 860] open("./bus", O_RDWR [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... open resumed>) = 5 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 860] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... mmap resumed>) = 0x20000000 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 860] write(4, 0x20000f80, 9 [pid 856] <... mmap resumed>) = 0x7f70edc9c000 [pid 856] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 860] <... write resumed>) = 9 [pid 856] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... clone resumed>, parent_tid=[873], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 873 [pid 856] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... write resumed>) = 1048576 [pid 869] munmap(0x7f70edbbd000, 1048576) = 0 [pid 869] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 869] ioctl(4, LOOP_SET_FD, 3 [pid 870] chdir("./14") = 0 [pid 866] <... munmap resumed>) = 0 [pid 870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 859] <... mount resumed>) = 0 [pid 859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 859] chdir("./file0") = 0 [pid 859] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 873 attached [pid 873] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 25.026534][ T864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 870] <... prctl resumed>) = 0 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 870] setpgid(0, 0) = 0 [pid 860] <... futex resumed>) = ? [pid 856] <... futex resumed>) = ? [pid 870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 860] +++ killed by SIGBUS +++ [pid 870] <... openat resumed>) = 3 [pid 870] write(3, "1000", 4) = 4 [pid 869] <... ioctl resumed>) = 0 [pid 870] close(3 [pid 869] close(3 [pid 870] <... close resumed>) = 0 [pid 870] symlink("/dev/binderfs", "./binderfs" [pid 869] <... close resumed>) = 0 [pid 873] +++ killed by SIGBUS +++ [pid 856] +++ killed by SIGBUS +++ [pid 870] <... symlink resumed>) = 0 [pid 869] mkdir("./file0", 0777 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=856, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 870] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] <... mkdir resumed>) = 0 [pid 870] <... futex resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 869] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 870] <... mmap resumed>) = 0x7f70f5fbd000 [pid 870] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] <... restart_syscall resumed>) = 0 [pid 870] <... mprotect resumed>) = 0 [pid 375] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 870] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 875 attached ) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./13/binderfs" [pid 875] set_robust_list(0x7f70f5fdd9e0, 24 [pid 870] <... clone resumed>, parent_tid=[875], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 875 [pid 375] <... unlink resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 875] <... set_robust_list resumed>) = 0 [pid 875] memfd_create("syzkaller", 0) = 3 [pid 875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 875] munmap(0x7f70edbbd000, 1048576) = 0 [pid 875] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 859] <... ioctl resumed>) = 0 [pid 866] <... openat resumed>) = 4 [pid 859] close(4 [ 25.077241][ T873] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 866] ioctl(4, LOOP_SET_FD, 3 [pid 875] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = 0 [pid 875] ioctl(4, LOOP_SET_FD, 3 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... ioctl resumed>) = 0 [pid 859] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] close(3 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./12/file0", [pid 875] <... close resumed>) = 0 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 875] mkdir("./file0", 0777 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... mkdir resumed>) = 0 [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 859] <... open resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] fstat(4, [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 859] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 859] <... write resumed>) = 9 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./12/file0" [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 859] open("./bus", O_RDWR [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 859] <... open resumed>) = 5 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./12" [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 859] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] mkdir("./13", 0777 [pid 859] <... mmap resumed>) = 0x20000000 [pid 373] <... mkdir resumed>) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 859] write(4, 0x20000f80, 9 [pid 855] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] <... write resumed>) = 9 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... mmap resumed>) = 0x7f70edc9c000 [pid 859] <... futex resumed>) = 0 [pid 855] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] <... mprotect resumed>) = 0 [pid 855] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[879], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 879 [pid 855] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 879 attached ) = 0 [pid 855] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 879] set_robust_list(0x7f70edcbc9e0, 24 [pid 869] <... mount resumed>) = 0 [pid 866] <... ioctl resumed>) = 0 [pid 869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 869] chdir("./file0") = 0 [pid 869] ioctl(4, LOOP_CLR_FD) = 0 [pid 869] close(4 [pid 879] <... set_robust_list resumed>) = 0 [pid 869] <... close resumed>) = 0 [pid 866] close(3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 869] <... futex resumed>) = 1 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 881 [pid 866] <... close resumed>) = 0 [pid 861] <... futex resumed>) = 0 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 866] mkdir("./file0", 0777 [pid 861] <... futex resumed>) = 1 [pid 866] <... mkdir resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 866] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 869] <... futex resumed>) = 0 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 869] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 375] <... openat resumed>) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 869] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 869] <... futex resumed>) = 1 [pid 861] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] close(4 [pid 861] <... futex resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 869] <... write resumed>) = 9 [pid 375] rmdir("./13/file0" [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 881 attached [pid 881] set_robust_list(0x5555569495e0, 24) = 0 [pid 881] chdir("./13") = 0 [pid 881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 881] setpgid(0, 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, [pid 869] <... futex resumed>) = 1 [pid 861] <... futex resumed>) = 0 [pid 869] open("./bus", O_RDWR [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 881] <... setpgid resumed>) = 0 [pid 881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 881] write(3, "1000", 4) = 4 [pid 881] close(3) = 0 [pid 861] <... futex resumed>) = 0 [pid 881] symlink("/dev/binderfs", "./binderfs" [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... open resumed>) = 5 [pid 375] close(3 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 869] <... futex resumed>) = 1 [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 861] <... futex resumed>) = 0 [pid 375] rmdir("./13" [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... symlink resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 869] <... futex resumed>) = 0 [pid 861] <... futex resumed>) = 1 [pid 869] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 875] <... mount resumed>) = 0 [pid 869] <... mmap resumed>) = 0x20000000 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] mkdir("./14", 0777 [pid 879] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 875] <... openat resumed>) = 3 [pid 869] <... futex resumed>) = 0 [pid 866] <... mount resumed>) = 0 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 875] chdir("./file0" [pid 869] write(4, 0x20000f80, 9 [pid 866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 861] <... futex resumed>) = 0 [pid 859] <... futex resumed>) = ? [pid 855] <... futex resumed>) = ? [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 881] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 875] <... chdir resumed>) = 0 [pid 869] <... write resumed>) = 9 [pid 866] <... openat resumed>) = 3 [pid 861] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] +++ killed by SIGBUS +++ [pid 375] <... openat resumed>) = 3 [pid 881] <... futex resumed>) = 0 [pid 879] +++ killed by SIGBUS +++ [pid 875] ioctl(4, LOOP_CLR_FD [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] chdir("./file0" [pid 861] <... futex resumed>) = 0 [pid 855] +++ killed by SIGBUS +++ [pid 375] ioctl(3, LOOP_CLR_FD [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 875] <... ioctl resumed>) = 0 [pid 869] <... futex resumed>) = 0 [pid 866] <... chdir resumed>) = 0 [pid 861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=855, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 875] close(4 [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 866] ioctl(4, LOOP_CLR_FD [pid 861] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] close(3 [pid 881] <... mmap resumed>) = 0x7f70f5fbd000 [pid 875] <... close resumed>) = 0 [pid 866] <... ioctl resumed>) = 0 [pid 861] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... close resumed>) = 0 [pid 881] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] close(4 [pid 861] <... mprotect resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 881] <... mprotect resumed>) = 0 [pid 875] <... futex resumed>) = 1 [pid 870] <... futex resumed>) = 0 [pid 866] <... close resumed>) = 0 [pid 861] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 881] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 886 [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 861] <... clone resumed>, parent_tid=[887], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 887 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 881] <... clone resumed>, parent_tid=[888], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 888 [pid 875] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 875] <... open resumed>) = 4 [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 861] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 861] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] fstat(3, [pid 881] <... futex resumed>) = 0 [pid 875] <... futex resumed>) = 1 [pid 870] <... futex resumed>) = 0 [pid 866] <... open resumed>) = 4 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 875] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 377] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... write resumed>) = 9 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... write resumed>) = 9 [pid 862] <... futex resumed>) = 0 [pid 377] lstat("./13/binderfs", [pid 875] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 875] open("./bus", O_RDWR [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] unlink("./13/binderfs" [pid 875] <... open resumed>) = 5 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] open("./bus", O_RDWR [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 866] <... open resumed>) = 5 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 888 attached ./strace-static-x86_64: Process 887 attached ./strace-static-x86_64: Process 886 attached [pid 875] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 888] set_robust_list(0x7f70f5fdd9e0, 24 [pid 887] set_robust_list(0x7f70edcbc9e0, 24 [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... set_robust_list resumed>) = 0 [pid 887] <... set_robust_list resumed>) = 0 [pid 886] set_robust_list(0x5555569495e0, 24 [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 875] write(4, 0x20000f80, 9 [pid 870] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] memfd_create("syzkaller", 0 [pid 875] <... write resumed>) = 9 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.153942][ T879] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] <... set_robust_list resumed>) = 0 [pid 886] chdir("./14") = 0 [pid 886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 886] setpgid(0, 0) = 0 [pid 886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 886] write(3, "1000", 4) = 4 [pid 886] close(3) = 0 [pid 886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 886] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 886] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[889], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 889 [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 870] <... futex resumed>) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 870] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 870] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[890], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 890 [pid 870] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] <... mmap resumed>) = 0x20000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = 1 [pid 866] write(4, 0x20000f80, 9 [pid 862] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 862] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 862] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[891], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 891 [pid 862] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... memfd_create resumed>) = 3 [pid 888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 866] <... write resumed>) = 9 ./strace-static-x86_64: Process 891 attached ./strace-static-x86_64: Process 890 attached ./strace-static-x86_64: Process 889 attached [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] set_robust_list(0x7f70edcbc9e0, 24 [pid 890] set_robust_list(0x7f70edcbc9e0, 24 [pid 889] set_robust_list(0x7f70f5fdd9e0, 24 [pid 866] <... futex resumed>) = 0 [pid 891] <... set_robust_list resumed>) = 0 [pid 890] <... set_robust_list resumed>) = 0 [pid 889] <... set_robust_list resumed>) = 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] <... write resumed>) = 1048576 [pid 888] munmap(0x7f70edbbd000, 1048576) = 0 [pid 888] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 890] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 889] memfd_create("syzkaller", 0 [pid 869] <... futex resumed>) = ? [pid 861] <... futex resumed>) = ? [pid 889] <... memfd_create resumed>) = 3 [pid 889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 869] +++ killed by SIGBUS +++ [pid 891] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 862] <... futex resumed>) = ? [pid 875] <... futex resumed>) = ? [pid 870] <... futex resumed>) = ? [pid 875] +++ killed by SIGBUS +++ [pid 887] +++ killed by SIGBUS +++ [pid 861] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=861, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 866] <... futex resumed>) = ? [pid 889] <... mmap resumed>) = 0x7f70edbbd000 [pid 866] +++ killed by SIGBUS +++ [pid 890] +++ killed by SIGBUS +++ [pid 870] +++ killed by SIGBUS +++ [pid 891] +++ killed by SIGBUS +++ [pid 862] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=870, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 376] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./14/binderfs", [pid 374] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] unlink("./14/binderfs" [pid 374] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... unlink resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./13/binderfs" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=862, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./13/binderfs") = 0 [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] <... write resumed>) = 1048576 [pid 889] munmap(0x7f70edbbd000, 1048576) = 0 [pid 889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 888] <... openat resumed>) = 4 [pid 888] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./13/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./13") = 0 [pid 377] mkdir("./14", 0777) = 0 [ 25.204591][ T887] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.220366][ T890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.224926][ T891] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 889] <... openat resumed>) = 4 [pid 889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 888] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 894 [pid 889] close(3 [pid 888] close(3 [pid 889] <... close resumed>) = 0 [pid 888] <... close resumed>) = 0 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] mkdir("./file0", 0777 [pid 888] mkdir("./file0", 0777./strace-static-x86_64: Process 894 attached [pid 894] set_robust_list(0x5555569495e0, 24 [pid 888] <... mkdir resumed>) = 0 [pid 894] <... set_robust_list resumed>) = 0 [pid 889] <... mkdir resumed>) = 0 [pid 888] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 889] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./14/file0", [pid 374] lstat("./13/file0", [pid 372] lstat("./13/file0", [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(4, [pid 374] <... openat resumed>) = 4 [pid 372] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 894] chdir("./14" [pid 376] getdents64(4, [pid 374] fstat(4, [pid 372] <... openat resumed>) = 4 [pid 894] <... chdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 372] fstat(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(4 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 374] getdents64(4, [pid 376] rmdir("./14/file0" [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... rmdir resumed>) = 0 [pid 374] close(4 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 372] close(4 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] rmdir("./13/file0" [pid 372] <... close resumed>) = 0 [pid 894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... rmdir resumed>) = 0 [pid 894] <... prctl resumed>) = 0 [pid 376] close(3 [pid 374] getdents64(3, [pid 372] rmdir("./13/file0" [pid 376] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 376] rmdir("./14" [pid 374] close(3 [pid 372] getdents64(3, [pid 376] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] mkdir("./15", 0777 [pid 374] rmdir("./13" [pid 372] close(3 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] mkdir("./14", 0777 [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] rmdir("./13" [pid 894] setpgid(0, 0 [pid 374] <... mkdir resumed>) = 0 [pid 894] <... setpgid resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... rmdir resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 376] close(3 [pid 372] mkdir("./14", 0777 [pid 374] ioctl(3, LOOP_CLR_FD [pid 889] <... mount resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 894] write(3, "1000", 4) = 4 [pid 894] close(3 [pid 889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 899 [pid 372] ioctl(3, LOOP_CLR_FD [pid 889] <... openat resumed>) = 3 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 900 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 889] chdir("./file0") = 0 [pid 372] close(3 [pid 889] ioctl(4, LOOP_CLR_FD) = 0 [pid 372] <... close resumed>) = 0 [pid 889] close(4 [pid 894] <... close resumed>) = 0 [pid 894] symlink("/dev/binderfs", "./binderfs" [pid 889] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 901 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 889] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... open resumed>) = 4 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 889] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... write resumed>) = 9 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... symlink resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 889] open("./bus", O_RDWR [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] <... mmap resumed>) = 0x7f70f5fbd000 [pid 889] <... open resumed>) = 5 [pid 894] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... mprotect resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 894] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 894] <... clone resumed>, parent_tid=[902], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 902 [pid 889] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... mmap resumed>) = 0x20000000 [pid 894] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 ./strace-static-x86_64: Process 901 attached ./strace-static-x86_64: Process 900 attached ./strace-static-x86_64: Process 899 attached [pid 889] write(4, 0x20000f80, 9 [pid 888] <... mount resumed>) = 0 [pid 886] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] set_robust_list(0x5555569495e0, 24 [pid 900] set_robust_list(0x5555569495e0, 24 [pid 899] set_robust_list(0x5555569495e0, 24 [pid 889] <... write resumed>) = 9 [pid 888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 886] <... futex resumed>) = 0 [pid 901] <... set_robust_list resumed>) = 0 [pid 900] <... set_robust_list resumed>) = 0 [pid 899] <... set_robust_list resumed>) = 0 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... openat resumed>) = 3 [pid 886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 901] chdir("./14" [pid 900] chdir("./14" [pid 899] chdir("./15" [pid 889] <... futex resumed>) = 0 [pid 888] chdir("./file0" [pid 886] <... mmap resumed>) = 0x7f70edc9c000 [pid 901] <... chdir resumed>) = 0 [pid 900] <... chdir resumed>) = 0 [pid 899] <... chdir resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] <... chdir resumed>) = 0 [pid 886] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 902 attached [pid 901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 888] ioctl(4, LOOP_CLR_FD [pid 886] <... mprotect resumed>) = 0 [pid 901] <... prctl resumed>) = 0 [pid 900] <... prctl resumed>) = 0 [pid 899] <... prctl resumed>) = 0 [pid 888] <... ioctl resumed>) = 0 [pid 886] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 902] set_robust_list(0x7f70f5fdd9e0, 24 [pid 901] setpgid(0, 0 [pid 900] setpgid(0, 0 [pid 899] setpgid(0, 0 [pid 888] close(4 [pid 901] <... setpgid resumed>) = 0 [pid 900] <... setpgid resumed>) = 0 [pid 899] <... setpgid resumed>) = 0 [pid 888] <... close resumed>) = 0 [pid 901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... clone resumed>, parent_tid=[903], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 903 [pid 901] <... openat resumed>) = 3 [pid 900] <... openat resumed>) = 3 [pid 899] <... openat resumed>) = 3 [pid 888] <... futex resumed>) = 1 [pid 886] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 901] write(3, "1000", 4 [pid 900] write(3, "1000", 4 [pid 899] write(3, "1000", 4 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] <... futex resumed>) = 0 [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... write resumed>) = 4 [pid 900] <... write resumed>) = 4 [pid 899] <... write resumed>) = 4 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... futex resumed>) = 0 [pid 901] close(3 [pid 900] close(3 [pid 899] close(3 [pid 888] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... close resumed>) = 0 [pid 900] <... close resumed>) = 0 [pid 899] <... close resumed>) = 0 [pid 888] <... open resumed>) = 4 [pid 901] symlink("/dev/binderfs", "./binderfs" [pid 900] symlink("/dev/binderfs", "./binderfs" [pid 899] symlink("/dev/binderfs", "./binderfs" [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... set_robust_list resumed>) = 0 [pid 901] <... symlink resumed>) = 0 [pid 900] <... symlink resumed>) = 0 [pid 899] <... symlink resumed>) = 0 [pid 888] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = 0 [pid 900] <... futex resumed>) = 0 [pid 899] <... futex resumed>) = 0 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 888] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] memfd_create("syzkaller", 0 [pid 901] <... mmap resumed>) = 0x7f70f5fbd000 [pid 900] <... mmap resumed>) = 0x7f70f5fbd000 [pid 899] <... mmap resumed>) = 0x7f70f5fbd000 [pid 888] <... write resumed>) = 9 [pid 901] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 900] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 899] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... mprotect resumed>) = 0 [pid 900] <... mprotect resumed>) = 0 [pid 899] <... mprotect resumed>) = 0 [pid 888] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 0 [pid 902] <... memfd_create resumed>) = 3 [pid 901] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 900] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 899] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 903 attached [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 903] set_robust_list(0x7f70edcbc9e0, 24 [pid 901] <... clone resumed>, parent_tid=[904], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 904 [pid 900] <... clone resumed>, parent_tid=[905], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 905 [pid 899] <... clone resumed>, parent_tid=[906], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 906 [pid 888] open("./bus", O_RDWR [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... set_robust_list resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... open resumed>) = 5 ./strace-static-x86_64: Process 906 attached ./strace-static-x86_64: Process 905 attached ./strace-static-x86_64: Process 904 attached [pid 902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 901] <... futex resumed>) = 0 [pid 906] set_robust_list(0x7f70f5fdd9e0, 24 [pid 905] set_robust_list(0x7f70f5fdd9e0, 24 [pid 904] set_robust_list(0x7f70f5fdd9e0, 24 [pid 902] <... mmap resumed>) = 0x7f70edbbd000 [pid 906] <... set_robust_list resumed>) = 0 [pid 905] <... set_robust_list resumed>) = 0 [pid 904] <... set_robust_list resumed>) = 0 [pid 902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 906] memfd_create("syzkaller", 0 [pid 905] memfd_create("syzkaller", 0 [pid 904] memfd_create("syzkaller", 0 [pid 902] <... write resumed>) = 1048576 [pid 906] <... memfd_create resumed>) = 3 [pid 905] <... memfd_create resumed>) = 3 [pid 904] <... memfd_create resumed>) = 3 [pid 906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 906] <... mmap resumed>) = 0x7f70edbbd000 [pid 904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 905] <... mmap resumed>) = 0x7f70edbbd000 [pid 903] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 902] munmap(0x7f70edbbd000, 1048576 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 900] <... futex resumed>) = 0 [pid 904] <... mmap resumed>) = 0x7f70edbbd000 [pid 899] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... munmap resumed>) = 0 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] <... futex resumed>) = ? [pid 888] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = ? [pid 881] <... futex resumed>) = 0 [pid 902] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... openat resumed>) = 4 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 902] ioctl(4, LOOP_SET_FD, 3 [pid 888] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... mmap resumed>) = 0x20000000 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 881] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 888] write(4, 0x20000f80, 9 [pid 881] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... write resumed>) = 9 [pid 881] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 888] <... futex resumed>) = 0 [pid 881] <... mmap resumed>) = 0x7f70edc9c000 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[908], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 908 [pid 881] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] <... ioctl resumed>) = 0 [pid 902] close(3) = 0 [pid 902] mkdir("./file0", 0777) = 0 [pid 902] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 889] +++ killed by SIGBUS +++ [pid 903] +++ killed by SIGBUS +++ [pid 886] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=886, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 906] <... write resumed>) = 1048576 [pid 906] munmap(0x7f70edbbd000, 1048576 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./14/binderfs") = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 906] <... munmap resumed>) = 0 [pid 906] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 906] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 908 attached [pid 908] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 906] <... ioctl resumed>) = 0 [pid 906] close(3) = 0 [pid 906] mkdir("./file0", 0777) = 0 [pid 906] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 908] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 881] <... futex resumed>) = ? [pid 888] <... futex resumed>) = ? [pid 888] +++ killed by SIGBUS +++ [pid 904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 908] +++ killed by SIGBUS +++ [pid 881] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=881, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 902] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, [pid 902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 902] <... openat resumed>) = 3 [pid 373] getdents64(3, [pid 902] chdir("./file0") = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 902] ioctl(4, LOOP_CLR_FD [pid 373] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 902] <... ioctl resumed>) = 0 [pid 373] lstat("./13/binderfs", [pid 902] close(4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 902] <... close resumed>) = 0 [pid 373] unlink("./13/binderfs" [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 902] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... open resumed>) = 4 [pid 894] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 906] <... mount resumed>) = 0 [pid 902] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] <... openat resumed>) = 3 [pid 902] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] chdir("./file0" [pid 894] <... futex resumed>) = 0 [pid 906] <... chdir resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] ioctl(4, LOOP_CLR_FD) = 0 [pid 902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 906] close(4) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... write resumed>) = 9 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 906] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 902] open("./bus", O_RDWR [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... open resumed>) = 4 [pid 902] <... open resumed>) = 5 [pid 894] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 899] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... mmap resumed>) = 0x20000000 [pid 899] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = 0 [pid 906] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] <... write resumed>) = 9 [pid 902] write(4, 0x20000f80, 9 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] <... write resumed>) = 9 [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] <... futex resumed>) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 906] open("./bus", O_RDWR [pid 902] <... futex resumed>) = 0 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] <... mmap resumed>) = 0x7f70edc9c000 [pid 906] <... open resumed>) = 5 [pid 902] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... mprotect resumed>) = 0 [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 894] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 894] <... clone resumed>, parent_tid=[914], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 914 [pid 906] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... mmap resumed>) = 0x20000000 [pid 894] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 906] write(4, 0x20000f80, 9 [ 25.441686][ T903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.474495][ T908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 899] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... write resumed>) = 9 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 914 attached ) = 0 [pid 899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 904] <... write resumed>) = 1048576 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] <... mmap resumed>) = 0x7f70edc9c000 [pid 914] set_robust_list(0x7f70edcbc9e0, 24 [pid 904] munmap(0x7f70edbbd000, 1048576 [pid 899] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 899] <... mprotect resumed>) = 0 [pid 899] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 914] <... set_robust_list resumed>) = 0 [pid 904] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 915 attached [pid 904] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 899] <... clone resumed>, parent_tid=[915], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 915 [pid 915] set_robust_list(0x7f70edcbc9e0, 24 [pid 899] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... set_robust_list resumed>) = 0 [pid 914] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 905] <... write resumed>) = 1048576 [pid 899] <... futex resumed>) = 0 [pid 905] munmap(0x7f70edbbd000, 1048576 [pid 899] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... munmap resumed>) = 0 [pid 905] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 894] <... futex resumed>) = ? [pid 902] <... futex resumed>) = ? [pid 902] +++ killed by SIGBUS +++ [pid 914] +++ killed by SIGBUS +++ [pid 894] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=894, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./14/binderfs") = 0 [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 915] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 906] <... futex resumed>) = ? [pid 899] <... futex resumed>) = ? [pid 906] +++ killed by SIGBUS +++ [pid 915] +++ killed by SIGBUS +++ [pid 899] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=899, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./15/binderfs") = 0 [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./14/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./14") = 0 [pid 375] mkdir("./15", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 905] <... openat resumed>) = 4 [pid 904] <... openat resumed>) = 4 [pid 905] ioctl(4, LOOP_SET_FD, 3 [ 25.509483][ T914] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.509600][ T915] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 904] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./13/file0" [pid 905] <... ioctl resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 905] close(3 [pid 373] getdents64(3, [pid 905] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 905] mkdir("./file0", 0777 [pid 373] close(3 [pid 905] <... mkdir resumed>) = 0 [pid 904] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3 [pid 905] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 904] close(3 [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 904] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 904] mkdir("./file0", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] rmdir("./13" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 904] <... mkdir resumed>) = 0 [pid 377] lstat("./14/file0", [pid 376] lstat("./15/file0", [pid 904] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 918 attached [pid 918] set_robust_list(0x5555569495e0, 24) = 0 [pid 918] chdir("./15") = 0 [pid 918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 918] setpgid(0, 0) = 0 [pid 918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 918 [pid 373] mkdir("./14", 0777 [pid 918] <... openat resumed>) = 3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 918] write(3, "1000", 4) = 4 [pid 918] close(3) = 0 [pid 918] symlink("/dev/binderfs", "./binderfs" [pid 373] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 376] fstat(4, [pid 373] <... openat resumed>) = 3 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] getdents64(4, [pid 918] <... symlink resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 373] <... close resumed>) = 0 [pid 918] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] rmdir("./14/file0" [pid 376] rmdir("./15/file0" [pid 918] <... mmap resumed>) = 0x7f70f5fbd000 [pid 918] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 918] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... rmdir resumed>) = 0 [pid 918] <... clone resumed>, parent_tid=[921], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 921 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 377] getdents64(3, [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 920 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] rmdir("./15" [pid 377] rmdir("./14" [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 920 attached [pid 376] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] mkdir("./16", 0777 [pid 377] mkdir("./15", 0777 [pid 920] set_robust_list(0x5555569495e0, 24) = 0 [pid 920] chdir("./14" [pid 376] <... mkdir resumed>) = 0 [pid 920] <... chdir resumed>) = 0 [pid 920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 920] <... prctl resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 904] <... mount resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 920] setpgid(0, 0) = 0 [pid 920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 920] write(3, "1000", 4) = 4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 926 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 925 [pid 904] <... openat resumed>) = 3 [pid 920] close(3 [pid 904] chdir("./file0" [pid 920] <... close resumed>) = 0 [pid 920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 921 attached ) = 0x7f70f5fbd000 [pid 921] set_robust_list(0x7f70f5fdd9e0, 24 [pid 920] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 921] <... set_robust_list resumed>) = 0 [pid 920] <... mprotect resumed>) = 0 [pid 921] memfd_create("syzkaller", 0 [pid 920] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 904] <... chdir resumed>) = 0 [pid 904] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 927 attached [pid 921] <... memfd_create resumed>) = 3 [pid 904] close(4 [pid 921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 920] <... clone resumed>, parent_tid=[927], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 927 [pid 921] <... mmap resumed>) = 0x7f70edbbd000 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 926 attached ./strace-static-x86_64: Process 925 attached [pid 927] set_robust_list(0x7f70f5fdd9e0, 24 [pid 905] <... mount resumed>) = 0 [pid 904] <... close resumed>) = 0 [pid 927] <... set_robust_list resumed>) = 0 [pid 926] set_robust_list(0x5555569495e0, 24 [pid 925] set_robust_list(0x5555569495e0, 24 [pid 920] <... futex resumed>) = 0 [pid 927] memfd_create("syzkaller", 0 [pid 926] <... set_robust_list resumed>) = 0 [pid 925] <... set_robust_list resumed>) = 0 [pid 905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] <... memfd_create resumed>) = 3 [pid 926] chdir("./15" [pid 925] chdir("./16" [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 905] <... openat resumed>) = 3 [pid 904] <... futex resumed>) = 1 [pid 901] <... futex resumed>) = 0 [pid 927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 926] <... chdir resumed>) = 0 [pid 925] <... chdir resumed>) = 0 [pid 921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 927] <... mmap resumed>) = 0x7f70edbbd000 [pid 926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 905] chdir("./file0" [pid 904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 1048576 [pid 921] munmap(0x7f70edbbd000, 1048576 [pid 905] <... chdir resumed>) = 0 [pid 921] <... munmap resumed>) = 0 [pid 921] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 921] ioctl(4, LOOP_SET_FD, 3 [pid 925] <... prctl resumed>) = 0 [pid 905] ioctl(4, LOOP_CLR_FD [pid 904] <... open resumed>) = 4 [pid 901] <... futex resumed>) = 0 [pid 926] <... prctl resumed>) = 0 [pid 925] setpgid(0, 0 [pid 921] <... ioctl resumed>) = 0 [pid 905] <... ioctl resumed>) = 0 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] close(3 [pid 905] close(4 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] <... futex resumed>) = 0 [pid 927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 926] setpgid(0, 0 [pid 925] <... setpgid resumed>) = 0 [pid 921] <... close resumed>) = 0 [pid 905] <... close resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] mkdir("./file0", 0777 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... mkdir resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 904] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 901] <... futex resumed>) = 0 [pid 900] <... futex resumed>) = 0 [pid 926] <... setpgid resumed>) = 0 [pid 925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 921] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] <... write resumed>) = 9 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] <... futex resumed>) = 0 [pid 905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... open resumed>) = 4 [pid 904] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] open("./bus", O_RDWR [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] <... open resumed>) = 5 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 905] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 904] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... write resumed>) = 9 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 925] <... openat resumed>) = 3 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] <... mmap resumed>) = 0x20000000 [pid 900] <... futex resumed>) = 0 [pid 925] write(3, "1000", 4 [pid 905] open("./bus", O_RDWR [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... openat resumed>) = 3 [pid 925] <... write resumed>) = 4 [pid 905] <... open resumed>) = 5 [pid 904] <... futex resumed>) = 1 [pid 901] <... futex resumed>) = 0 [pid 925] close(3 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] write(3, "1000", 4 [pid 905] <... futex resumed>) = 1 [pid 904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 926] <... write resumed>) = 4 [pid 925] <... close resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] write(4, 0x20000f80, 9 [pid 901] <... futex resumed>) = 0 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 905] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] close(3 [pid 925] symlink("/dev/binderfs", "./binderfs" [pid 905] <... mmap resumed>) = 0x20000000 [pid 904] <... write resumed>) = 9 [pid 901] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 904] <... futex resumed>) = 0 [pid 901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] <... mmap resumed>) = 0x7f70edc9c000 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] <... close resumed>) = 0 [pid 925] <... symlink resumed>) = 0 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 901] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 900] <... futex resumed>) = 0 [pid 926] symlink("/dev/binderfs", "./binderfs" [pid 925] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] write(4, 0x20000f80, 9 [pid 901] <... mprotect resumed>) = 0 [pid 900] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... futex resumed>) = 0 [pid 905] <... write resumed>) = 9 [pid 901] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 905] <... futex resumed>) = 0 [pid 926] <... symlink resumed>) = 0 [pid 900] <... mmap resumed>) = 0x7f70edc9c000 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] <... clone resumed>, parent_tid=[929], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 929 [pid 900] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 901] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... mprotect resumed>) = 0 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... mmap resumed>) = 0x7f70f5fbd000 [pid 901] <... futex resumed>) = 0 [pid 900] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 926] <... futex resumed>) = 0 [pid 925] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 901] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] <... clone resumed>, parent_tid=[930], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 930 [pid 926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 925] <... mprotect resumed>) = 0 [pid 900] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 929 attached [pid 929] set_robust_list(0x7f70edcbc9e0, 24 [pid 925] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 926] <... mmap resumed>) = 0x7f70f5fbd000 [pid 929] <... set_robust_list resumed>) = 0 [pid 926] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 931 attached ./strace-static-x86_64: Process 930 attached [pid 927] <... write resumed>) = 1048576 [pid 926] <... mprotect resumed>) = 0 [pid 925] <... clone resumed>, parent_tid=[931], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 931 [pid 930] set_robust_list(0x7f70edcbc9e0, 24 [pid 927] munmap(0x7f70edbbd000, 1048576 [pid 926] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] set_robust_list(0x7f70f5fdd9e0, 24 [pid 930] <... set_robust_list resumed>) = 0 [pid 927] <... munmap resumed>) = 0 [pid 925] <... futex resumed>) = 0 [pid 931] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 932 attached [pid 932] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 921] <... mount resumed>) = 0 [pid 921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 921] chdir("./file0") = 0 [pid 921] ioctl(4, LOOP_CLR_FD) = 0 [pid 921] close(4) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 918] <... futex resumed>) = 0 [pid 921] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... open resumed>) = 4 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 9 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] open("./bus", O_RDWR [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... open resumed>) = 5 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... mmap resumed>) = 0x20000000 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] write(4, 0x20000f80, 9 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 9 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 918] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 918] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[935], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 935 [pid 918] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 918] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 935 attached [pid 935] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 931] memfd_create("syzkaller", 0 [pid 930] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 929] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 926] <... clone resumed>, parent_tid=[932], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 932 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 931] <... memfd_create resumed>) = 3 [pid 927] <... openat resumed>) = 4 [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = ? [pid 901] <... futex resumed>) = ? [pid 932] <... futex resumed>) = 0 [pid 931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 927] ioctl(4, LOOP_SET_FD, 3 [pid 926] <... futex resumed>) = 1 [pid 904] +++ killed by SIGBUS +++ [pid 932] memfd_create("syzkaller", 0 [pid 931] <... mmap resumed>) = 0x7f70edbbd000 [pid 929] +++ killed by SIGBUS +++ [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 901] +++ killed by SIGBUS +++ [pid 932] <... memfd_create resumed>) = 3 [pid 931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=901, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 932] <... mmap resumed>) = 0x7f70edbbd000 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... restart_syscall resumed>) = 0 [pid 935] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 905] <... futex resumed>) = ? [pid 900] <... futex resumed>) = ? [pid 372] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 931] <... write resumed>) = 1048576 [pid 921] <... futex resumed>) = ? [pid 918] <... futex resumed>) = ? [pid 931] munmap(0x7f70edbbd000, 1048576 [pid 921] +++ killed by SIGBUS +++ [pid 905] +++ killed by SIGBUS +++ [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./14/binderfs") = 0 [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 935] +++ killed by SIGBUS +++ [pid 918] +++ killed by SIGBUS +++ [pid 931] <... munmap resumed>) = 0 [pid 930] +++ killed by SIGBUS +++ [pid 900] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=918, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=900, si_uid=0, si_status=SIGBUS, si_utime=2, si_stime=2} --- [pid 932] <... write resumed>) = 1048576 [pid 931] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 931] <... openat resumed>) = 4 [pid 927] <... ioctl resumed>) = 0 [pid 931] ioctl(4, LOOP_SET_FD, 3 [pid 932] munmap(0x7f70edbbd000, 1048576) = 0 [pid 927] close(3 [pid 932] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 927] <... close resumed>) = 0 [pid 927] mkdir("./file0", 0777 [pid 931] <... ioctl resumed>) = 0 [pid 931] close(3) = 0 [pid 931] mkdir("./file0", 0777 [pid 927] <... mkdir resumed>) = 0 [pid 374] <... restart_syscall resumed>) = 0 [pid 931] <... mkdir resumed>) = 0 [pid 927] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 931] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 374] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 374] getdents64(3, [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./15/binderfs", [pid 374] lstat("./14/binderfs", [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./15/binderfs" [pid 374] unlink("./14/binderfs" [pid 375] <... unlink resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 25.733595][ T929] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.739723][ T930] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.759285][ T935] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 932] <... openat resumed>) = 4 [pid 932] ioctl(4, LOOP_SET_FD, 3 [pid 927] <... mount resumed>) = 0 [pid 927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 927] chdir("./file0") = 0 [pid 927] ioctl(4, LOOP_CLR_FD [pid 932] <... ioctl resumed>) = 0 [pid 927] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 932] close(3 [pid 927] close(4 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 932] <... close resumed>) = 0 [pid 927] <... close resumed>) = 0 [pid 375] getdents64(4, [pid 932] mkdir("./file0", 0777 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./15/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./15") = 0 [pid 375] mkdir("./16", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 941 [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./14/file0") = 0 [pid 374] getdents64(3, [pid 927] <... futex resumed>) = 1 [pid 920] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 932] <... mkdir resumed>) = 0 [pid 374] rmdir("./14" [pid 932] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 927] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./15", 0777 [pid 927] <... open resumed>) = 4 [pid 920] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 927] <... futex resumed>) = 0 [pid 920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... openat resumed>) = 3 [pid 927] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 942 [pid 927] <... write resumed>) = 9 [pid 920] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./14/file0", [pid 927] <... futex resumed>) = 0 [pid 920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 941 attached [pid 927] open("./bus", O_RDWR [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 920] <... futex resumed>) = 0 [pid 927] <... open resumed>) = 5 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 941] set_robust_list(0x5555569495e0, 24) = 0 [pid 927] <... futex resumed>) = 1 [pid 920] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 920] <... futex resumed>) = 0 [pid 372] fstat(4, [pid 927] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] <... mmap resumed>) = 0x20000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 920] <... futex resumed>) = 0 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 920] <... futex resumed>) = 0 [pid 927] write(4, 0x20000f80, 9 [pid 920] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 920] <... futex resumed>) = 0 [pid 927] <... write resumed>) = 9 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] getdents64(4, [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] <... mmap resumed>) = 0x7f70edc9c000 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 927] <... futex resumed>) = 0 [pid 920] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 372] close(4 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] <... mprotect resumed>) = 0 [pid 920] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./14/file0" [pid 920] <... clone resumed>, parent_tid=[944], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 944 [pid 941] chdir("./16") = 0 [pid 941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] <... rmdir resumed>) = 0 [pid 920] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 920] <... futex resumed>) = 0 [pid 920] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 941] <... prctl resumed>) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./14" [pid 941] setpgid(0, 0) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./15", 0777 [pid 941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] <... mkdir resumed>) = 0 [pid 941] write(3, "1000", 4 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 941] <... write resumed>) = 4 [pid 372] <... openat resumed>) = 3 [pid 941] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 941] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 941] symlink("/dev/binderfs", "./binderfs" [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 941] <... symlink resumed>) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 946 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 941] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[947], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 947 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 946 attached [pid 946] set_robust_list(0x5555569495e0, 24) = 0 [pid 946] chdir("./15") = 0 [pid 946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 946] setpgid(0, 0) = 0 [pid 946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 946] write(3, "1000", 4) = 4 [pid 946] close(3) = 0 [pid 946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 946] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 946] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[948], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 948 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 948 attached [pid 948] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 948] memfd_create("syzkaller", 0) = 3 [pid 948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 944 attached [pid 931] <... mount resumed>) = 0 [pid 931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 931] chdir("./file0") = 0 [pid 931] ioctl(4, LOOP_CLR_FD) = 0 [pid 931] close(4 [pid 944] set_robust_list(0x7f70edcbc9e0, 24 [pid 931] <... close resumed>) = 0 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] <... futex resumed>) = 0 [pid 944] <... set_robust_list resumed>) = 0 [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 931] <... futex resumed>) = 0 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 948] munmap(0x7f70edbbd000, 1048576) = 0 [pid 948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 948] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 942 attached [pid 942] set_robust_list(0x5555569495e0, 24) = 0 [pid 942] chdir("./15") = 0 [pid 942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 942] setpgid(0, 0) = 0 [pid 942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 942] write(3, "1000", 4) = 4 [pid 942] close(3) = 0 [pid 942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 942] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 942] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[951], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 951 [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 951 attached [pid 951] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 951] memfd_create("syzkaller", 0) = 3 [pid 951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 931] <... open resumed>) = 4 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... mount resumed>) = 0 [pid 931] <... futex resumed>) = 1 [pid 932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 932] <... openat resumed>) = 3 [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] chdir("./file0" [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 932] <... chdir resumed>) = 0 [pid 931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] ioctl(4, LOOP_CLR_FD [pid 931] <... write resumed>) = 9 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 931] open("./bus", O_RDWR [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... open resumed>) = 5 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 ./strace-static-x86_64: Process 947 attached [pid 931] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... mmap resumed>) = 0x20000000 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 931] write(4, 0x20000f80, 9 [pid 925] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 947] set_robust_list(0x7f70f5fdd9e0, 24 [pid 931] <... write resumed>) = 9 [pid 925] <... mmap resumed>) = 0x7f70edc9c000 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... set_robust_list resumed>) = 0 [pid 931] <... futex resumed>) = 0 [pid 925] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] <... mprotect resumed>) = 0 [pid 925] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[953], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 953 [pid 925] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] memfd_create("syzkaller", 0 [pid 925] <... futex resumed>) = 0 [pid 947] <... memfd_create resumed>) = 3 [pid 925] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 948] <... ioctl resumed>) = 0 [pid 932] <... ioctl resumed>) = 0 [pid 948] close(3) = 0 [pid 932] close(4 [pid 948] mkdir("./file0", 0777) = 0 [pid 932] <... close resumed>) = 0 [pid 948] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... open resumed>) = 4 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... write resumed>) = 9 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] open("./bus", O_RDWR [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... open resumed>) = 5 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 932] <... futex resumed>) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... mmap resumed>) = 0x20000000 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 ./strace-static-x86_64: Process 953 attached [pid 932] write(4, 0x20000f80, 9 [pid 926] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 932] <... write resumed>) = 9 [pid 953] set_robust_list(0x7f70edcbc9e0, 24 [pid 926] <... mmap resumed>) = 0x7f70edc9c000 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... set_robust_list resumed>) = 0 [pid 932] <... futex resumed>) = 0 [pid 926] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] <... mprotect resumed>) = 0 [pid 926] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 951] <... write resumed>) = 1048576 [pid 951] munmap(0x7f70edbbd000, 1048576) = 0 [pid 951] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 951] ioctl(4, LOOP_SET_FD, 3 [pid 944] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 947] munmap(0x7f70edbbd000, 1048576) = 0 [pid 947] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 926] <... clone resumed>, parent_tid=[954], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 954 [pid 926] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 954 attached [pid 954] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 953] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 927] <... futex resumed>) = ? [pid 920] <... futex resumed>) = ? [pid 927] +++ killed by SIGBUS +++ [pid 944] +++ killed by SIGBUS +++ [pid 920] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=920, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 931] <... futex resumed>) = ? [pid 925] <... futex resumed>) = ? [pid 931] +++ killed by SIGBUS +++ [pid 373] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 951] <... ioctl resumed>) = 0 [pid 373] fstat(3, [pid 951] close(3 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 951] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 951] mkdir("./file0", 0777 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 951] <... mkdir resumed>) = 0 [pid 373] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 951] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./14/binderfs") = 0 [ 25.950056][ T944] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.979122][ T953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 953] +++ killed by SIGBUS +++ [pid 925] +++ killed by SIGBUS +++ [pid 947] <... openat resumed>) = 4 [pid 954] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 947] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=925, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 932] <... futex resumed>) = ? [pid 948] <... mount resumed>) = 0 [pid 947] <... ioctl resumed>) = 0 [pid 926] <... futex resumed>) = ? [pid 376] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 947] close(3 [pid 376] <... openat resumed>) = 3 [pid 948] <... openat resumed>) = 3 [pid 947] <... close resumed>) = 0 [pid 376] fstat(3, [pid 948] chdir("./file0" [pid 947] mkdir("./file0", 0777 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 948] <... chdir resumed>) = 0 [pid 947] <... mkdir resumed>) = 0 [pid 932] +++ killed by SIGBUS +++ [pid 376] getdents64(3, [pid 948] ioctl(4, LOOP_CLR_FD [pid 947] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./16/binderfs") = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 954] +++ killed by SIGBUS +++ [pid 926] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=926, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./15/binderfs") = 0 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 951] <... mount resumed>) = 0 [pid 951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 951] chdir("./file0") = 0 [ 25.994091][ T954] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 951] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 951] <... ioctl resumed>) = 0 [pid 948] <... ioctl resumed>) = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = 0 [pid 951] close(4 [pid 948] close(4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] lstat("./14/file0", [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./14/file0" [pid 376] getdents64(4, [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./14") = 0 [pid 376] getdents64(4, [pid 373] mkdir("./15", 0777 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 376] close(4 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./16/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./16") = 0 [pid 376] mkdir("./17", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 951] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./15/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./15") = 0 [pid 377] mkdir("./16", 0777 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 951] <... futex resumed>) = 1 [pid 942] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] <... futex resumed>) = 0 [pid 951] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] <... open resumed>) = 4 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] <... futex resumed>) = 0 [pid 951] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] <... write resumed>) = 9 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] open("./bus", O_RDWR) = 5 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] write(4, 0x20000f80, 9 [pid 942] <... futex resumed>) = 0 [pid 942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 951] <... write resumed>) = 9 [pid 942] <... mmap resumed>) = 0x7f70edc9c000 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 951] <... futex resumed>) = 0 [pid 942] <... mprotect resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[961], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 961 [pid 942] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 961 attached [pid 961] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 961] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 951] <... futex resumed>) = ? [pid 942] <... futex resumed>) = ? [pid 951] +++ killed by SIGBUS +++ [pid 961] +++ killed by SIGBUS +++ [pid 942] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=942, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./15/binderfs") = 0 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 948] <... close resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 962 ./strace-static-x86_64: Process 962 attached [pid 962] set_robust_list(0x5555569495e0, 24) = 0 [pid 962] chdir("./15") = 0 [pid 962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] ioctl(3, LOOP_CLR_FD [pid 948] <... futex resumed>) = 1 [pid 376] close(3 [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 946] <... futex resumed>) = 0 [pid 962] <... prctl resumed>) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... open resumed>) = 4 [pid 962] setpgid(0, 0) = 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 962] write(3, "1000", 4) = 4 [pid 962] close(3) = 0 [pid 962] symlink("/dev/binderfs", "./binderfs" [pid 948] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... symlink resumed>) = 0 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] <... futex resumed>) = 0 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 948] <... write resumed>) = 9 [pid 962] <... mprotect resumed>) = 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 962] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[965], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 965 [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 965 attached [pid 965] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 965] memfd_create("syzkaller", 0) = 3 [pid 965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] open("./bus", O_RDWR [pid 946] <... futex resumed>) = 0 [pid 948] <... open resumed>) = 5 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... mmap resumed>) = 0x20000000 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 948] write(4, 0x20000f80, 9 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 948] <... write resumed>) = 9 [pid 946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 946] <... mmap resumed>) = 0x7f70edc9c000 [pid 948] <... futex resumed>) = 0 [pid 946] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 948] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[966], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 966 [pid 946] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... mount resumed>) = 0 [pid 947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 947] chdir("./file0") = 0 [pid 947] ioctl(4, LOOP_CLR_FD [pid 965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 966 attached [pid 966] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 26.096768][ T961] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 965] <... write resumed>) = 1048576 [pid 965] munmap(0x7f70edbbd000, 1048576 [pid 966] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 965] <... munmap resumed>) = 0 [pid 948] <... futex resumed>) = ? [pid 946] <... futex resumed>) = ? [pid 948] +++ killed by SIGBUS +++ [pid 966] +++ killed by SIGBUS +++ [pid 946] +++ killed by SIGBUS +++ [pid 965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = 0 [pid 377] close(3 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 965] <... openat resumed>) = 4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=946, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 965] ioctl(4, LOOP_SET_FD, 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 374] fstat(4, [pid 376] <... close resumed>) = 0 [pid 965] <... ioctl resumed>) = 0 [pid 965] close(3) = 0 [pid 965] mkdir("./file0", 0777) = 0 [pid 965] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./15/binderfs") = 0 [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./15/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 947] <... ioctl resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] rmdir("./15" [pid 947] close(4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 968 [pid 374] <... rmdir resumed>) = 0 [pid 947] <... close resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 969 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... open resumed>) = 4 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./16", 0777 [pid 947] <... futex resumed>) = 1 [pid 941] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 947] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... write resumed>) = 9 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDWR [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... open resumed>) = 5 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... mmap resumed>) = 0x20000000 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] write(4, 0x20000f80, 9 [pid 941] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... write resumed>) = 9 [pid 941] <... futex resumed>) = 0 ./strace-static-x86_64: Process 969 attached ./strace-static-x86_64: Process 968 attached [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 947] <... futex resumed>) = 0 [pid 941] <... mmap resumed>) = 0x7f70edc9c000 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[971], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 971 [pid 941] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] set_robust_list(0x5555569495e0, 24 [pid 969] set_robust_list(0x5555569495e0, 24./strace-static-x86_64: Process 971 attached [pid 971] set_robust_list(0x7f70edcbc9e0, 24 [pid 969] <... set_robust_list resumed>) = 0 [pid 968] <... set_robust_list resumed>) = 0 [pid 968] chdir("./16" [pid 971] <... set_robust_list resumed>) = 0 [pid 969] chdir("./17") = 0 [pid 968] <... chdir resumed>) = 0 [pid 965] <... mount resumed>) = 0 [pid 965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 965] chdir("./file0") = 0 [pid 965] ioctl(4, LOOP_CLR_FD [pid 969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 969] setpgid(0, 0) = 0 [pid 969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 969] write(3, "1000", 4) = 4 [pid 969] close(3) = 0 [pid 969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 969] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 969] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[973], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 973 [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 968] setpgid(0, 0) = 0 [pid 968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 968] write(3, "1000", 4) = 4 [pid 968] close(3) = 0 [pid 968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 968] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 968] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[974], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 974 [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 973 attached [pid 973] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 973] memfd_create("syzkaller", 0) = 3 [pid 973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 26.139431][ T966] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 974 attached [pid 971] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 974] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 974] memfd_create("syzkaller", 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 974] <... memfd_create resumed>) = 3 [pid 974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 965] <... ioctl resumed>) = 0 [pid 947] <... futex resumed>) = ? [pid 941] <... futex resumed>) = ? [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 974] <... mmap resumed>) = 0x7f70edbbd000 [pid 374] close(3 [pid 965] close(4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] <... close resumed>) = 0 [pid 973] <... write resumed>) = 1048576 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 973] munmap(0x7f70edbbd000, 1048576) = 0 [pid 973] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 973] ioctl(4, LOOP_SET_FD, 3 [pid 372] lstat("./15/file0", [pid 965] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 975 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 971] +++ killed by SIGBUS +++ [pid 973] <... ioctl resumed>) = 0 [pid 973] close(3) = 0 [pid 947] +++ killed by SIGBUS +++ [pid 941] +++ killed by SIGBUS +++ [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 962] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 965] <... futex resumed>) = 1 [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=941, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, [pid 965] <... open resumed>) = 4 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] getdents64(4, [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 965] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 962] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 372] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] close(4 [pid 965] <... write resumed>) = 9 [pid 375] unlink("./16/binderfs" [pid 372] <... close resumed>) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 372] rmdir("./15/file0" [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 965] open("./bus", O_RDWR [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 975 attached [pid 974] <... write resumed>) = 1048576 [pid 965] <... open resumed>) = 5 [pid 962] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 965] <... futex resumed>) = 0 [pid 962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 965] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 962] <... futex resumed>) = 0 [pid 973] mkdir("./file0", 0777 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 965] <... mmap resumed>) = 0x20000000 [pid 372] rmdir("./15" [pid 973] <... mkdir resumed>) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 973] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 372] mkdir("./16", 0777 [pid 975] set_robust_list(0x5555569495e0, 24 [pid 974] munmap(0x7f70edbbd000, 1048576 [pid 965] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... mkdir resumed>) = 0 [pid 965] write(4, 0x20000f80, 9 [pid 962] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 965] <... write resumed>) = 9 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... mmap resumed>) = 0x7f70edc9c000 [pid 965] <... futex resumed>) = 0 [pid 962] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 965] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] <... mprotect resumed>) = 0 [pid 962] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 977 attached , parent_tid=[977], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 977 [pid 962] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 975] <... set_robust_list resumed>) = 0 [pid 977] set_robust_list(0x7f70edcbc9e0, 24 [pid 974] <... munmap resumed>) = 0 [pid 977] <... set_robust_list resumed>) = 0 [ 26.175953][ T971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 975] chdir("./16" [pid 974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 977] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 975] <... chdir resumed>) = 0 [pid 975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 965] <... futex resumed>) = ? [pid 962] <... futex resumed>) = ? [pid 975] <... prctl resumed>) = 0 [pid 965] +++ killed by SIGBUS +++ [pid 975] setpgid(0, 0 [pid 974] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 975] <... setpgid resumed>) = 0 [pid 974] ioctl(4, LOOP_SET_FD, 3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 973] <... mount resumed>) = 0 [pid 975] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 975] write(3, "1000", 4 [pid 973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 975] <... write resumed>) = 4 [pid 375] lstat("./16/file0", [pid 975] close(3 [pid 973] <... openat resumed>) = 3 [pid 975] <... close resumed>) = 0 [pid 973] chdir("./file0" [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 975] symlink("/dev/binderfs", "./binderfs" [pid 973] <... chdir resumed>) = 0 [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 975] <... symlink resumed>) = 0 [pid 973] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 975] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 975] <... futex resumed>) = 0 [pid 975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 4 [pid 977] +++ killed by SIGBUS +++ [pid 975] <... mmap resumed>) = 0x7f70f5fbd000 [pid 962] +++ killed by SIGBUS +++ [pid 375] fstat(4, [pid 975] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 975] <... mprotect resumed>) = 0 [pid 375] getdents64(4, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=962, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 975] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 974] <... ioctl resumed>) = 0 [pid 973] <... ioctl resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 975] <... clone resumed>, parent_tid=[981], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 981 [pid 974] close(3 [pid 973] close(4 [pid 375] getdents64(4, [pid 373] <... restart_syscall resumed>) = 0 [pid 372] close(3 [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] <... close resumed>) = 0 [pid 973] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... close resumed>) = 0 [pid 975] <... futex resumed>) = 0 [pid 974] mkdir("./file0", 0777 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 982 attached ./strace-static-x86_64: Process 981 attached [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 974] <... mkdir resumed>) = 0 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 982] set_robust_list(0x5555569495e0, 24 [pid 981] set_robust_list(0x7f70f5fdd9e0, 24 [pid 974] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./16/file0" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 982 [pid 982] <... set_robust_list resumed>) = 0 [pid 981] <... set_robust_list resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 982] chdir("./16" [pid 981] memfd_create("syzkaller", 0 [pid 973] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 373] <... openat resumed>) = 3 [pid 982] <... chdir resumed>) = 0 [pid 981] <... memfd_create resumed>) = 3 [pid 973] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] fstat(3, [pid 982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 982] <... prctl resumed>) = 0 [pid 981] <... mmap resumed>) = 0x7f70edbbd000 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 982] setpgid(0, 0 [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./16" [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 982] <... setpgid resumed>) = 0 [pid 981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 974] <... mount resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] mkdir("./17", 0777 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 982] <... openat resumed>) = 3 [pid 974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 973] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mkdir resumed>) = 0 [pid 373] lstat("./15/binderfs", [pid 982] write(3, "1000", 4 [pid 974] <... openat resumed>) = 3 [pid 973] <... write resumed>) = 9 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 982] <... write resumed>) = 4 [pid 974] chdir("./file0" [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 373] unlink("./15/binderfs" [pid 982] close(3 [pid 974] <... chdir resumed>) = 0 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] <... unlink resumed>) = 0 [pid 982] <... close resumed>) = 0 [pid 974] ioctl(4, LOOP_CLR_FD [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 982] symlink("/dev/binderfs", "./binderfs" [pid 974] <... ioctl resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 375] close(3 [pid 982] <... symlink resumed>) = 0 [pid 974] close(4 [pid 973] open("./bus", O_RDWR [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 973] <... open resumed>) = 5 [pid 982] <... futex resumed>) = 0 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 982] <... mmap resumed>) = 0x7f70f5fbd000 [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 982] <... mprotect resumed>) = 0 [pid 973] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 973] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 985 attached [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] <... clone resumed>, parent_tid=[985], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 985 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] set_robust_list(0x7f70f5fdd9e0, 24 [pid 982] <... futex resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 982] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 973] write(4, 0x20000f80, 9 [pid 969] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] <... set_robust_list resumed>) = 0 [pid 981] <... write resumed>) = 1048576 [pid 973] <... write resumed>) = 9 [pid 969] <... futex resumed>) = 0 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 973] <... futex resumed>) = 0 [pid 969] <... mmap resumed>) = 0x7f70edc9c000 [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 985] memfd_create("syzkaller", 0 [pid 969] <... mprotect resumed>) = 0 [pid 969] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[986], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 986 [pid 985] <... memfd_create resumed>) = 3 [pid 969] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 981] munmap(0x7f70edbbd000, 1048576 [pid 985] <... mmap resumed>) = 0x7f70edbbd000 [pid 981] <... munmap resumed>) = 0 [pid 981] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 986 attached [pid 986] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 26.227706][ T977] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 985] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 986] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 973] <... futex resumed>) = ? [pid 969] <... futex resumed>) = ? [pid 973] +++ killed by SIGBUS +++ [pid 986] +++ killed by SIGBUS +++ [pid 969] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=969, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 985] <... write resumed>) = 1048576 [pid 376] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 985] munmap(0x7f70edbbd000, 1048576 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./17/binderfs") = 0 [pid 376] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 985] <... munmap resumed>) = 0 [pid 985] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 974] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 974] <... futex resumed>) = 1 [pid 974] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 987 ./strace-static-x86_64: Process 987 attached [pid 985] <... openat resumed>) = 4 [pid 981] <... openat resumed>) = 4 [pid 968] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 987] set_robust_list(0x5555569495e0, 24 [pid 985] ioctl(4, LOOP_SET_FD, 3 [pid 981] ioctl(4, LOOP_SET_FD, 3 [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 987] <... set_robust_list resumed>) = 0 [pid 987] chdir("./17") = 0 [pid 987] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 987] setpgid(0, 0) = 0 [pid 987] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 987] write(3, "1000", 4) = 4 [pid 974] <... futex resumed>) = 0 [pid 968] <... futex resumed>) = 1 [pid 373] lstat("./15/file0", [pid 987] close(3) = 0 [pid 987] symlink("/dev/binderfs", "./binderfs" [pid 974] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 987] <... symlink resumed>) = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 987] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 987] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 987] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[988], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 988 [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 987] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 988 attached [pid 988] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 988] memfd_create("syzkaller", 0) = 3 [pid 988] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 373] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 974] <... open resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] fstat(4, [pid 974] <... futex resumed>) = 1 [pid 968] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 974] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 968] <... futex resumed>) = 0 [pid 373] getdents64(4, [pid 974] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, [pid 974] <... write resumed>) = 9 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 974] <... futex resumed>) = 1 [pid 968] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] open("./bus", O_RDWR [pid 373] rmdir("./15/file0" [pid 968] <... futex resumed>) = 0 [pid 974] <... open resumed>) = 5 [pid 373] <... rmdir resumed>) = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 974] <... futex resumed>) = 0 [pid 968] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 974] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 968] <... futex resumed>) = 0 [pid 373] close(3 [pid 974] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 974] <... mmap resumed>) = 0x20000000 [pid 373] rmdir("./15" [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 974] <... futex resumed>) = 1 [pid 968] <... futex resumed>) = 0 [pid 974] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./16", 0777 [pid 974] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 968] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 968] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] write(4, 0x20000f80, 9 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 968] <... futex resumed>) = 0 [pid 974] <... write resumed>) = 9 [pid 968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 974] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 968] <... mmap resumed>) = 0x7f70edc9c000 [pid 974] <... futex resumed>) = 0 [pid 968] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 974] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 968] <... mprotect resumed>) = 0 [pid 968] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[989], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 989 [pid 968] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 989 attached [pid 989] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 26.287243][ T986] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 988] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 988] munmap(0x7f70edbbd000, 1048576) = 0 [pid 988] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 989] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 974] <... futex resumed>) = ? [pid 968] <... futex resumed>) = ? [pid 974] +++ killed by SIGBUS +++ [pid 989] +++ killed by SIGBUS +++ [pid 968] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=968, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./16/binderfs") = 0 [pid 377] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 985] <... ioctl resumed>) = 0 [pid 981] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 985] close(3 [pid 981] close(3 [pid 377] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 985] <... close resumed>) = 0 [pid 981] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 985] mkdir("./file0", 0777 [pid 981] mkdir("./file0", 0777 [pid 377] lstat("./16/file0", [pid 376] lstat("./17/file0", [pid 985] <... mkdir resumed>) = 0 [pid 981] <... mkdir resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 985] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 981] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 376] fstat(4, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 376] close(4 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] rmdir("./16/file0" [pid 376] rmdir("./17/file0" [pid 377] <... rmdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 376] getdents64(3, [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 376] close(3 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] rmdir("./16" [pid 376] rmdir("./17" [pid 377] <... rmdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] mkdir("./17", 0777 [pid 376] mkdir("./18", 0777 [pid 377] <... mkdir resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 988] <... openat resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 988] ioctl(4, LOOP_SET_FD, 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 376] close(3 [pid 988] <... ioctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 988] close(3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] close(3 [pid 988] <... close resumed>) = 0 [pid 988] mkdir("./file0", 0777 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 993 [pid 988] <... mkdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 994 [pid 988] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [ 26.329956][ T989] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 995 ./strace-static-x86_64: Process 995 attached [pid 995] set_robust_list(0x5555569495e0, 24) = 0 [pid 995] chdir("./16") = 0 [pid 995] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 995] setpgid(0, 0) = 0 [pid 995] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 995] write(3, "1000", 4) = 4 [pid 995] close(3) = 0 [pid 995] symlink("/dev/binderfs", "./binderfs") = 0 [pid 995] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 ./strace-static-x86_64: Process 994 attached ./strace-static-x86_64: Process 993 attached [pid 995] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 981] <... mount resumed>) = 0 [pid 995] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 981] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 994] set_robust_list(0x5555569495e0, 24./strace-static-x86_64: Process 1002 attached ) = 0 [pid 993] set_robust_list(0x5555569495e0, 24 [pid 988] <... mount resumed>) = 0 [pid 985] <... mount resumed>) = 0 [pid 981] <... openat resumed>) = 3 [pid 1002] set_robust_list(0x7f70f5fdd9e0, 24 [pid 995] <... clone resumed>, parent_tid=[1002], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1002 [pid 994] chdir("./18" [pid 993] <... set_robust_list resumed>) = 0 [pid 988] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 985] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 981] chdir("./file0" [pid 1002] <... set_robust_list resumed>) = 0 [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... chdir resumed>) = 0 [pid 993] chdir("./17" [pid 988] <... openat resumed>) = 3 [pid 985] <... openat resumed>) = 3 [pid 981] <... chdir resumed>) = 0 [pid 1002] memfd_create("syzkaller", 0 [pid 995] <... futex resumed>) = 0 [pid 994] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 993] <... chdir resumed>) = 0 [pid 988] chdir("./file0" [pid 985] chdir("./file0" [pid 981] ioctl(4, LOOP_CLR_FD [pid 1002] <... memfd_create resumed>) = 3 [pid 995] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 994] <... prctl resumed>) = 0 [pid 993] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 988] <... chdir resumed>) = 0 [pid 985] <... chdir resumed>) = 0 [pid 981] <... ioctl resumed>) = 0 [pid 1002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 994] setpgid(0, 0 [pid 993] <... prctl resumed>) = 0 [pid 988] ioctl(4, LOOP_CLR_FD [pid 985] ioctl(4, LOOP_CLR_FD [pid 981] close(4 [pid 1002] <... mmap resumed>) = 0x7f70edbbd000 [pid 994] <... setpgid resumed>) = 0 [pid 993] setpgid(0, 0 [pid 988] <... ioctl resumed>) = 0 [pid 985] <... ioctl resumed>) = 0 [pid 988] close(4 [pid 985] close(4 [pid 981] <... close resumed>) = 0 [pid 988] <... close resumed>) = 0 [pid 985] <... close resumed>) = 0 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = 1 [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = 1 [pid 982] <... futex resumed>) = 0 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 982] <... futex resumed>) = 0 [pid 988] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 987] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 982] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... open resumed>) = 4 [pid 985] <... open resumed>) = 4 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = 1 [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = 1 [pid 982] <... futex resumed>) = 0 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 982] <... futex resumed>) = 0 [pid 988] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 987] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 982] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... write resumed>) = 9 [pid 985] <... write resumed>) = 9 [pid 994] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 993] <... setpgid resumed>) = 0 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 988] <... futex resumed>) = 1 [pid 994] <... openat resumed>) = 3 [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = 1 [pid 982] <... futex resumed>) = 0 [pid 981] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 994] write(3, "1000", 4 [pid 993] <... openat resumed>) = 3 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... write resumed>) = 4 [pid 993] write(3, "1000", 4 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 982] <... futex resumed>) = 0 [pid 988] open("./bus", O_RDWR [pid 987] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] open("./bus", O_RDWR [pid 982] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... open resumed>) = 5 [pid 985] <... open resumed>) = 5 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = 1 [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = 1 [pid 982] <... futex resumed>) = 0 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 982] <... futex resumed>) = 0 [pid 988] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 987] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 985] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 982] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 988] <... mmap resumed>) = 0x20000000 [pid 985] <... mmap resumed>) = 0x20000000 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] <... futex resumed>) = 1 [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = 1 [pid 982] <... futex resumed>) = 0 [pid 975] <... futex resumed>) = 0 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 993] <... write resumed>) = 4 [pid 994] close(3) = 0 [pid 993] close(3 [pid 988] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 987] <... futex resumed>) = 0 [pid 985] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 982] <... futex resumed>) = 0 [pid 981] <... open resumed>) = 4 [pid 994] symlink("/dev/binderfs", "./binderfs" [pid 993] <... close resumed>) = 0 [pid 988] write(4, 0x20000f80, 9 [pid 987] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 985] write(4, 0x20000f80, 9 [pid 982] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... symlink resumed>) = 0 [pid 993] symlink("/dev/binderfs", "./binderfs" [pid 988] <... write resumed>) = 9 [pid 987] <... futex resumed>) = 0 [pid 985] <... write resumed>) = 9 [pid 982] <... futex resumed>) = 0 [pid 994] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 987] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 985] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 981] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 994] <... futex resumed>) = 0 [pid 993] <... symlink resumed>) = 0 [pid 988] <... futex resumed>) = 0 [pid 987] <... mmap resumed>) = 0x7f70edc9c000 [pid 985] <... futex resumed>) = 0 [pid 982] <... mmap resumed>) = 0x7f70edc9c000 [pid 981] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 993] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 988] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 987] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 985] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 982] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 975] <... futex resumed>) = 0 [pid 994] <... mmap resumed>) = 0x7f70f5fbd000 [pid 993] <... futex resumed>) = 0 [pid 987] <... mprotect resumed>) = 0 [pid 982] <... mprotect resumed>) = 0 [pid 981] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 987] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 982] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 994] <... mprotect resumed>) = 0 [pid 993] <... mmap resumed>) = 0x7f70f5fbd000 [pid 981] <... write resumed>) = 9 [pid 987] <... clone resumed>, parent_tid=[1003], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1003 [pid 982] <... clone resumed>, parent_tid=[1004], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1004 [pid 994] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 993] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 987] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 982] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 987] <... futex resumed>) = 0 [pid 982] <... futex resumed>) = 0 [pid 993] <... mprotect resumed>) = 0 [pid 987] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 982] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 981] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 994] <... clone resumed>, parent_tid=[1005], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1005 [pid 993] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 981] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1005 attached [pid 1005] set_robust_list(0x7f70f5fdd9e0, 24 [pid 975] <... futex resumed>) = 0 [pid 981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 994] <... futex resumed>) = 0 [pid 993] <... clone resumed>, parent_tid=[1006], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1006 [pid 981] open("./bus", O_RDWR [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 994] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... open resumed>) = 5 [pid 993] <... futex resumed>) = 0 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 981] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 981] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 975] <... futex resumed>) = 0 [pid 981] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... set_robust_list resumed>) = 0 [pid 981] <... mmap resumed>) = 0x20000000 [pid 1005] memfd_create("syzkaller", 0 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... memfd_create resumed>) = 3 [pid 981] <... futex resumed>) = 1 [pid 975] <... futex resumed>) = 0 [pid 981] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 981] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 975] <... futex resumed>) = 0 [pid 981] write(4, 0x20000f80, 9 [pid 975] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 975] <... futex resumed>) = 0 [pid 981] <... write resumed>) = 9 [pid 975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 981] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 975] <... mmap resumed>) = 0x7f70edc9c000 [pid 1002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 981] <... futex resumed>) = 0 [pid 975] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 981] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 975] <... mprotect resumed>) = 0 [pid 975] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1007 attached [pid 1007] set_robust_list(0x7f70edcbc9e0, 24 [pid 975] <... clone resumed>, parent_tid=[1007], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1007 ./strace-static-x86_64: Process 1004 attached [pid 1004] set_robust_list(0x7f70edcbc9e0, 24 [pid 1007] <... set_robust_list resumed>) = 0 [pid 975] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1004] <... set_robust_list resumed>) = 0 [pid 975] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1006 attached ./strace-static-x86_64: Process 1003 attached [pid 1007] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1005] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1004] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1002] <... write resumed>) = 1048576 [pid 975] syscall_0x100000(0, 0x7f70edbbd000, 0x100000, 0x100000, 0, 0x760 [pid 1006] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1005] <... write resumed>) = 1048576 [pid 1003] set_robust_list(0x7f70edcbc9e0, 24 [pid 985] <... futex resumed>) = ? [pid 982] <... futex resumed>) = ? [pid 981] <... futex resumed>) = ? [pid 985] +++ killed by SIGBUS +++ [pid 1006] <... set_robust_list resumed>) = 0 [pid 1005] munmap(0x7f70edbbd000, 1048576 [pid 1003] <... set_robust_list resumed>) = 0 [pid 1002] munmap(0x7f70edbbd000, 1048576 [pid 981] +++ killed by SIGBUS +++ [pid 1004] +++ killed by SIGBUS +++ [pid 982] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=982, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1006] memfd_create("syzkaller", 0 [pid 1007] +++ killed by SIGBUS +++ [pid 1006] <... memfd_create resumed>) = 3 [pid 975] +++ killed by SIGBUS +++ [pid 1006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 1006] <... mmap resumed>) = 0x7f70edbbd000 [pid 1006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 987] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1006] <... write resumed>) = 1048576 [pid 372] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./16/binderfs") = 0 [pid 372] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1006] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1006] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [ 26.422803][ T1007] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.422882][ T1004] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1006] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1006] close(3) = 0 [pid 1006] mkdir("./file0", 0777) = 0 [pid 1006] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1005] <... munmap resumed>) = 0 [pid 1003] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1002] <... munmap resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=975, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1005] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1002] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1005] <... openat resumed>) = 4 [pid 1002] <... openat resumed>) = 4 [pid 1005] ioctl(4, LOOP_SET_FD, 3 [pid 1002] ioctl(4, LOOP_SET_FD, 3 [pid 988] <... futex resumed>) = 230 [pid 988] +++ killed by SIGBUS +++ [pid 374] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./16/binderfs" [pid 1003] +++ killed by SIGBUS +++ [pid 987] +++ killed by SIGBUS +++ [pid 374] <... unlink resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=987, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 1006] <... mount resumed>) = 0 [pid 1006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1006] <... openat resumed>) = 3 [pid 1006] chdir("./file0" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1006] <... chdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1006] ioctl(4, LOOP_CLR_FD [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./17/binderfs") = 0 [pid 375] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1005] <... ioctl resumed>) = 0 [pid 1002] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1005] close(3 [pid 1002] close(3 [pid 1005] <... close resumed>) = 0 [pid 1002] <... close resumed>) = 0 [pid 372] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1005] mkdir("./file0", 0777 [pid 1002] mkdir("./file0", 0777 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./16/file0", [pid 1005] <... mkdir resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1005] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1002] <... mkdir resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 1002] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./16/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./16") = 0 [pid 372] mkdir("./17", 0777) = 0 [ 26.459932][ T1003] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1006] <... ioctl resumed>) = 0 [pid 1006] close(4) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1006] <... futex resumed>) = 1 [pid 993] <... futex resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1006] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] close(3 [pid 1006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 993] <... futex resumed>) = 0 [pid 1006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 375] lstat("./17/file0", [pid 993] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./16/file0", [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1006] <... open resumed>) = 4 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 1017 attached [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1006] <... futex resumed>) = 1 [pid 993] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1017 [pid 1006] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 993] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 4 [pid 1006] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 993] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fstat(4, [pid 374] fstat(4, [pid 1017] set_robust_list(0x5555569495e0, 24 [pid 1006] <... write resumed>) = 9 [pid 1005] <... mount resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1017] <... set_robust_list resumed>) = 0 [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 374] getdents64(4, [pid 1017] chdir("./17" [pid 1006] <... futex resumed>) = 1 [pid 993] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1017] <... chdir resumed>) = 0 [pid 1006] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1005] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 374] getdents64(4, [pid 1017] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1005] <... openat resumed>) = 3 [pid 993] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1017] <... prctl resumed>) = 0 [pid 1006] open("./bus", O_RDWR [pid 993] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(4 [pid 374] close(4 [pid 1017] setpgid(0, 0 [pid 1006] <... open resumed>) = 5 [pid 1005] chdir("./file0" [pid 1002] <... mount resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 1017] <... setpgid resumed>) = 0 [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... chdir resumed>) = 0 [pid 1002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] rmdir("./17/file0" [pid 374] rmdir("./16/file0" [pid 1017] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1006] <... futex resumed>) = 1 [pid 1005] ioctl(4, LOOP_CLR_FD [pid 1002] <... openat resumed>) = 3 [pid 993] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1006] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1005] <... ioctl resumed>) = 0 [pid 1002] chdir("./file0" [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 374] getdents64(3, [pid 1006] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1005] close(4 [pid 1002] <... chdir resumed>) = 0 [pid 993] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1006] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1005] <... close resumed>) = 0 [pid 1002] ioctl(4, LOOP_CLR_FD [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] <... ioctl resumed>) = 0 [pid 1005] <... futex resumed>) = 1 [pid 1002] close(4 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1002] <... close resumed>) = 0 [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = 0 [pid 1005] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1002] <... futex resumed>) = 1 [pid 994] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... open resumed>) = 4 [pid 1002] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 994] <... futex resumed>) = 0 [pid 1005] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 994] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... write resumed>) = 9 [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 994] <... futex resumed>) = 0 [pid 1005] open("./bus", O_RDWR [pid 994] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... open resumed>) = 5 [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 994] <... futex resumed>) = 0 [pid 1005] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 994] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1005] <... mmap resumed>) = 0x20000000 [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 994] <... futex resumed>) = 0 [pid 1005] write(4, 0x20000f80, 9 [pid 994] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1005] <... write resumed>) = 9 [pid 994] <... futex resumed>) = 0 [pid 1005] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1005] <... futex resumed>) = 0 [pid 994] <... mmap resumed>) = 0x7f70edc9c000 [pid 1005] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 994] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 994] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1018], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1018 [pid 994] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 994] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1017] <... openat resumed>) = 3 [pid 1017] write(3, "1000", 4) = 4 [pid 1017] close(3./strace-static-x86_64: Process 1018 attached ) = 0 [pid 1006] <... mmap resumed>) = 0x20000000 [pid 995] <... futex resumed>) = 0 [pid 993] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(3 [pid 374] close(3 [pid 1017] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1006] <... futex resumed>) = 0 [pid 1017] <... futex resumed>) = 0 [pid 1006] write(4, 0x20000f80, 9 [pid 1002] <... futex resumed>) = 0 [pid 995] <... futex resumed>) = 1 [pid 993] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./17" [pid 374] rmdir("./16" [pid 1002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 995] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 993] <... futex resumed>) = 0 [pid 1017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1017] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1017] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 993] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1017] <... clone resumed>, parent_tid=[1019], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1019 [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 993] <... futex resumed>) = 0 [pid 1017] <... futex resumed>) = 0 [pid 1006] <... write resumed>) = 9 [pid 1002] <... open resumed>) = 4 [pid 374] mkdir("./17", 0777 [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1006] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] mkdir("./18", 0777 [pid 1006] <... futex resumed>) = 0 [pid 1002] <... futex resumed>) = 1 [pid 995] <... futex resumed>) = 0 [pid 993] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] <... mkdir resumed>) = 0 [pid 1018] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1019 attached [pid 1006] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1002] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 993] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1019] set_robust_list(0x7f70f5fdd9e0, 24 [pid 995] <... futex resumed>) = 0 [pid 993] <... mprotect resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... openat resumed>) = 3 [pid 1019] <... set_robust_list resumed>) = 0 [pid 995] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 993] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 1019] memfd_create("syzkaller", 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1019] <... memfd_create resumed>) = 3 [pid 993] <... clone resumed>, parent_tid=[1020], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1020 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 1019] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 993] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 374] <... close resumed>) = 0 ./strace-static-x86_64: Process 1020 attached [pid 1019] <... mmap resumed>) = 0x7f70edbbd000 [pid 1018] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1002] <... write resumed>) = 9 [pid 993] <... futex resumed>) = 0 [pid 1020] set_robust_list(0x7f70edcbc9e0, 24 [pid 1005] <... futex resumed>) = ? [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] <... futex resumed>) = ? [pid 993] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1020] <... set_robust_list resumed>) = 0 [pid 1005] +++ killed by SIGBUS +++ [pid 1002] <... futex resumed>) = 1 [pid 995] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1021 attached [pid 1019] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1018] +++ killed by SIGBUS +++ [pid 1002] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 994] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1022 attached [pid 1021] set_robust_list(0x5555569495e0, 24 [pid 1020] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 995] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=994, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1022 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1021 [pid 1022] set_robust_list(0x5555569495e0, 24 [pid 1021] <... set_robust_list resumed>) = 0 [pid 1006] <... futex resumed>) = ? [pid 1002] open("./bus", O_RDWR [pid 995] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 993] <... futex resumed>) = ? [pid 1022] <... set_robust_list resumed>) = 0 [pid 1021] chdir("./17" [pid 1006] +++ killed by SIGBUS +++ [pid 1002] <... open resumed>) = 5 [pid 1022] chdir("./18" [pid 1020] +++ killed by SIGBUS +++ [pid 1019] <... write resumed>) = 1048576 [pid 993] +++ killed by SIGBUS +++ [pid 1022] <... chdir resumed>) = 0 [pid 1019] munmap(0x7f70edbbd000, 1048576 [pid 1022] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1019] <... munmap resumed>) = 0 [pid 1022] <... prctl resumed>) = 0 [pid 1019] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1022] setpgid(0, 0) = 0 [pid 1019] <... openat resumed>) = 4 [pid 1022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1019] ioctl(4, LOOP_SET_FD, 3 [pid 1022] write(3, "1000", 4) = 4 [pid 1022] close(3) = 0 [pid 1022] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1022] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1022] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1023], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1023 [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1021] <... chdir resumed>) = 0 [pid 1021] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1021] setpgid(0, 0) = 0 [pid 1021] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1021] write(3, "1000", 4) = 4 [pid 1021] close(3) = 0 [pid 1021] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1021] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1021] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1024], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1024 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1024 attached ./strace-static-x86_64: Process 1023 attached [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=993, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1024] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1023] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1002] <... futex resumed>) = 1 [pid 995] <... futex resumed>) = 0 [pid 1024] <... set_robust_list resumed>) = 0 [pid 1023] <... set_robust_list resumed>) = 0 [pid 1002] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1024] memfd_create("syzkaller", 0 [pid 1023] memfd_create("syzkaller", 0 [pid 1002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 995] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1024] <... memfd_create resumed>) = 3 [pid 1023] <... memfd_create resumed>) = 3 [pid 1002] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 995] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1023] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1002] <... mmap resumed>) = 0x20000000 [pid 376] <... openat resumed>) = 3 [pid 1024] <... mmap resumed>) = 0x7f70edbbd000 [pid 1023] <... mmap resumed>) = 0x7f70edbbd000 [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 1019] <... ioctl resumed>) = 0 [pid 1002] <... futex resumed>) = 1 [pid 995] <... futex resumed>) = 0 [pid 1024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1023] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1002] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 995] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1019] close(3 [pid 1002] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 995] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] getdents64(3, [pid 1019] <... close resumed>) = 0 [pid 1002] write(4, 0x20000f80, 9 [pid 995] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1019] mkdir("./file0", 0777 [pid 1002] <... write resumed>) = 9 [pid 995] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1019] <... mkdir resumed>) = 0 [pid 1002] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 995] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] fstat(3, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1024] <... write resumed>) = 1048576 [pid 1023] <... write resumed>) = 1048576 [pid 1019] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1002] <... futex resumed>) = 0 [pid 995] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] lstat("./18/binderfs", [pid 1024] munmap(0x7f70edbbd000, 1048576 [pid 1023] munmap(0x7f70edbbd000, 1048576 [pid 1002] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 995] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] getdents64(3, [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1024] <... munmap resumed>) = 0 [pid 1023] <... munmap resumed>) = 0 [pid 995] <... mprotect resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] unlink("./18/binderfs" [pid 1024] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1023] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 995] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... unlink resumed>) = 0 [pid 1024] <... openat resumed>) = 4 [pid 1023] <... openat resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1024] ioctl(4, LOOP_SET_FD, 3 [pid 1023] ioctl(4, LOOP_SET_FD, 3 [pid 995] <... clone resumed>, parent_tid=[1026], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1026 [pid 377] lstat("./17/binderfs", [pid 995] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 995] <... futex resumed>) = 0 [pid 377] unlink("./17/binderfs" [pid 995] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1026 attached [pid 1026] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1023] <... ioctl resumed>) = 0 [ 26.610549][ T1018] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.628379][ T1020] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1026] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1023] close(3 [pid 1024] <... ioctl resumed>) = 0 [pid 1023] <... close resumed>) = 0 [pid 1024] close(3 [pid 1023] mkdir("./file0", 0777 [pid 1024] <... close resumed>) = 0 [pid 1023] <... mkdir resumed>) = 0 [pid 1024] mkdir("./file0", 0777 [pid 1023] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1024] <... mkdir resumed>) = 0 [pid 1024] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1019] <... mount resumed>) = 0 [pid 1019] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1019] chdir("./file0" [pid 1002] <... futex resumed>) = ? [pid 995] <... futex resumed>) = ? [pid 1019] <... chdir resumed>) = 0 [pid 1019] ioctl(4, LOOP_CLR_FD [pid 1002] +++ killed by SIGBUS +++ [pid 1026] +++ killed by SIGBUS +++ [pid 995] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=995, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./16/binderfs") = 0 [pid 373] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1019] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 1019] close(4 [pid 377] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./17/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./17") = 0 [pid 377] mkdir("./18", 0777) = 0 [pid 1024] <... mount resumed>) = 0 [pid 1023] <... mount resumed>) = 0 [pid 1024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1023] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1023] <... openat resumed>) = 3 [pid 1024] <... openat resumed>) = 3 [pid 1024] chdir("./file0" [pid 1023] chdir("./file0") = 0 [pid 1024] <... chdir resumed>) = 0 [pid 1023] ioctl(4, LOOP_CLR_FD [ 26.678798][ T1026] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1024] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./16/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./16") = 0 [pid 373] mkdir("./17", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1024] <... ioctl resumed>) = 0 [pid 1023] <... ioctl resumed>) = 0 [pid 1019] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 1024] close(4 [pid 1023] close(4 [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 1024] <... close resumed>) = 0 [pid 1023] <... close resumed>) = 0 [pid 1019] <... futex resumed>) = 1 [pid 1017] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 373] close(3 [pid 1024] <... futex resumed>) = 1 [pid 1023] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... open resumed>) = 4 [pid 376] lstat("./18/file0", [pid 1024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1023] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1035 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1036 [pid 1024] <... open resumed>) = 4 [pid 1023] <... open resumed>) = 4 [pid 1019] <... futex resumed>) = 1 [pid 1017] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1036 attached [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1036] set_robust_list(0x5555569495e0, 24 [pid 1024] <... futex resumed>) = 1 [pid 1023] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1036] <... set_robust_list resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1036] chdir("./17" [pid 1024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... write resumed>) = 9 [pid 376] <... openat resumed>) = 4 [pid 1036] <... chdir resumed>) = 0 [pid 1024] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1023] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 1036] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1024] <... write resumed>) = 9 [pid 1023] <... write resumed>) = 9 [pid 1019] <... futex resumed>) = 1 [pid 1017] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1036] <... prctl resumed>) = 0 [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 1036] setpgid(0, 0 [pid 1024] <... futex resumed>) = 1 [pid 1023] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] <... futex resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1036] <... setpgid resumed>) = 0 [pid 1019] open("./bus", O_RDWR [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... open resumed>) = 5 [pid 376] getdents64(4, [pid 1036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1024] open("./bus", O_RDWR [pid 1023] open("./bus", O_RDWR [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1036] <... openat resumed>) = 3 [pid 1024] <... open resumed>) = 5 [pid 1023] <... open resumed>) = 5 [pid 1019] <... futex resumed>) = 1 [pid 1017] <... futex resumed>) = 0 [pid 376] close(4./strace-static-x86_64: Process 1035 attached [pid 1036] write(3, "1000", 4 [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 1036] <... write resumed>) = 4 [pid 1035] set_robust_list(0x5555569495e0, 24 [pid 1024] <... futex resumed>) = 1 [pid 1023] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] <... futex resumed>) = 0 [pid 376] rmdir("./18/file0" [pid 1036] close(3 [pid 1035] <... set_robust_list resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1017] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1036] <... close resumed>) = 0 [pid 1035] chdir("./18" [pid 1024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... mmap resumed>) = 0x20000000 [pid 376] <... rmdir resumed>) = 0 [pid 1036] symlink("/dev/binderfs", "./binderfs" [pid 1035] <... chdir resumed>) = 0 [pid 1024] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1023] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1022] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 1036] <... symlink resumed>) = 0 [pid 1035] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1024] <... mmap resumed>) = 0x20000000 [pid 1023] <... mmap resumed>) = 0x20000000 [pid 1019] <... futex resumed>) = 1 [pid 1017] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] <... prctl resumed>) = 0 [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 1036] <... futex resumed>) = 0 [pid 1035] setpgid(0, 0 [pid 1024] <... futex resumed>) = 1 [pid 1023] <... futex resumed>) = 1 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1017] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1035] <... setpgid resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] write(4, 0x20000f80, 9 [pid 1017] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./18" [pid 1036] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1035] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1024] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1023] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... write resumed>) = 9 [pid 1017] <... futex resumed>) = 0 [pid 1036] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1035] <... openat resumed>) = 3 [pid 1024] write(4, 0x20000f80, 9 [pid 1023] write(4, 0x20000f80, 9 [pid 1022] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1021] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1019] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1017] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... rmdir resumed>) = 0 [pid 1036] <... mprotect resumed>) = 0 [pid 1035] write(3, "1000", 4 [pid 1024] <... write resumed>) = 9 [pid 1023] <... write resumed>) = 9 [pid 1022] <... futex resumed>) = 0 [pid 1021] <... futex resumed>) = 0 [pid 1019] <... futex resumed>) = 0 [pid 1017] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] mkdir("./19", 0777 [pid 1036] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1035] <... write resumed>) = 4 [pid 1024] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1023] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1022] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1021] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1019] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1017] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1035] close(3 [pid 1024] <... futex resumed>) = 0 [pid 1023] <... futex resumed>) = 0 [pid 1022] <... mmap resumed>) = 0x7f70edc9c000 [pid 1021] <... mmap resumed>) = 0x7f70edc9c000 [pid 1017] <... mprotect resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 1036] <... clone resumed>, parent_tid=[1037], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1037 [pid 1035] <... close resumed>) = 0 [pid 1024] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1023] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1022] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1021] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1017] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 1038 attached [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] symlink("/dev/binderfs", "./binderfs" [pid 1022] <... mprotect resumed>) = 0 [pid 1021] <... mprotect resumed>) = 0 [pid 1036] <... futex resumed>) = 0 [pid 1035] <... symlink resumed>) = 0 [pid 1022] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1021] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1017] <... clone resumed>, parent_tid=[1038], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1038 [pid 376] <... openat resumed>) = 3 [pid 1038] set_robust_list(0x7f70edcbc9e0, 24./strace-static-x86_64: Process 1039 attached [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1017] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] <... futex resumed>) = 0 [pid 1022] <... clone resumed>, parent_tid=[1039], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1039 [pid 1017] <... futex resumed>) = 0 [pid 1035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1038] <... set_robust_list resumed>) = 0 [pid 1022] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1039] set_robust_list(0x7f70edcbc9e0, 24 [pid 1017] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] ioctl(3, LOOP_CLR_FD [pid 1035] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1022] <... futex resumed>) = 0 [pid 1035] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1022] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1021] <... clone resumed>, parent_tid=[1040], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1040 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1035] <... mprotect resumed>) = 0 [pid 1035] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1041], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1041 [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1040 attached [pid 1040] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1040] futex(0x7f70f60b67b8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1041 attached [pid 1041] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1041] memfd_create("syzkaller", 0) = 3 [pid 1041] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1037 attached [pid 1037] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1037] memfd_create("syzkaller", 0) = 3 [pid 1037] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1041] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1021] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 1040] <... futex resumed>) = 0 [pid 1039] <... set_robust_list resumed>) = 0 [pid 1038] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1021] <... futex resumed>) = 1 [pid 376] <... close resumed>) = 0 [pid 1041] <... write resumed>) = 1048576 [pid 1037] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1040] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1024] <... futex resumed>) = ? [pid 1019] <... futex resumed>) = ? [pid 1017] <... futex resumed>) = ? [pid 1019] +++ killed by SIGBUS +++ [pid 1038] +++ killed by SIGBUS +++ [pid 1017] +++ killed by SIGBUS +++ [pid 1024] +++ killed by SIGBUS +++ [pid 1040] +++ killed by SIGBUS +++ [pid 1021] +++ killed by SIGBUS +++ [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1042 ./strace-static-x86_64: Process 1042 attached [pid 1042] set_robust_list(0x5555569495e0, 24) = 0 [pid 1042] chdir("./19") = 0 [pid 1042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1042] setpgid(0, 0) = 0 [pid 1042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1042] write(3, "1000", 4) = 4 [pid 1042] close(3) = 0 [pid 1042] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1042] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1042] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1043], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1043 [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1043 attached [pid 1043] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1043] memfd_create("syzkaller", 0) = 3 [pid 1043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1021, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1017, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 374] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] <... openat resumed>) = 3 [pid 374] fstat(3, [pid 372] fstat(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 1022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1022] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1022] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 374] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./17/binderfs", [pid 372] lstat("./17/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./17/binderfs" [pid 372] unlink("./17/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1043] <... write resumed>) = 1048576 [pid 1043] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1039] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1041] munmap(0x7f70edbbd000, 1048576 [pid 1043] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1041] <... munmap resumed>) = 0 [pid 1023] <... futex resumed>) = ? [pid 1041] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1023] +++ killed by SIGBUS +++ [pid 1037] <... write resumed>) = 1048576 [pid 1037] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1039] +++ killed by SIGBUS +++ [pid 1022] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1022, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1037] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./18/binderfs") = 0 [ 26.853155][ T1038] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.871163][ T1040] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.886487][ T1039] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./17/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./17") = 0 [pid 374] mkdir("./18", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1043] <... openat resumed>) = 4 [pid 1041] <... openat resumed>) = 4 [pid 1037] <... openat resumed>) = 4 [pid 1043] ioctl(4, LOOP_SET_FD, 3 [pid 1037] ioctl(4, LOOP_SET_FD, 3 [pid 1041] ioctl(4, LOOP_SET_FD, 3 [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1044 ./strace-static-x86_64: Process 1044 attached [pid 1044] set_robust_list(0x5555569495e0, 24) = 0 [pid 1044] chdir("./18") = 0 [pid 1044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1044] setpgid(0, 0) = 0 [pid 1044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1044] write(3, "1000", 4) = 4 [pid 1044] close(3) = 0 [pid 1044] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1044] <... futex resumed>) = 0 [pid 1044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1044] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1044] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1046], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1046 [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1046 attached [pid 1046] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1046] memfd_create("syzkaller", 0) = 3 [pid 1046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1043] <... ioctl resumed>) = 0 [pid 1043] close(3) = 0 [pid 372] lstat("./17/file0", [pid 1043] mkdir("./file0", 0777) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1043] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, [pid 1037] <... ioctl resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, [pid 1037] close(3 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1037] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 1037] mkdir("./file0", 0777 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1037] <... mkdir resumed>) = 0 [pid 372] close(4) = 0 [pid 1037] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] rmdir("./17/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./17") = 0 [pid 372] mkdir("./18", 0777) = 0 [pid 1046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1046] <... write resumed>) = 1048576 [pid 1046] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1046] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1041] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 1041] close(3) = 0 [pid 1041] mkdir("./file0", 0777) = 0 [pid 1041] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1049 [pid 375] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./18/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./18") = 0 [pid 375] mkdir("./19", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1051 [pid 1046] <... openat resumed>) = 4 [pid 1046] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1049 attached [pid 1049] set_robust_list(0x5555569495e0, 24) = 0 [pid 1049] chdir("./18") = 0 [pid 1049] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1049] setpgid(0, 0) = 0 ./strace-static-x86_64: Process 1051 attached [pid 1051] set_robust_list(0x5555569495e0, 24 [pid 1043] <... mount resumed>) = 0 [pid 1051] <... set_robust_list resumed>) = 0 [pid 1051] chdir("./19" [pid 1043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1051] <... chdir resumed>) = 0 [pid 1051] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1043] <... openat resumed>) = 3 [pid 1051] <... prctl resumed>) = 0 [pid 1051] setpgid(0, 0 [pid 1046] <... ioctl resumed>) = 0 [pid 1043] chdir("./file0" [pid 1037] <... mount resumed>) = 0 [pid 1046] close(3 [pid 1043] <... chdir resumed>) = 0 [pid 1046] <... close resumed>) = 0 [pid 1043] ioctl(4, LOOP_CLR_FD [pid 1046] mkdir("./file0", 0777 [pid 1043] <... ioctl resumed>) = 0 [pid 1051] <... setpgid resumed>) = 0 [pid 1046] <... mkdir resumed>) = 0 [pid 1043] close(4 [pid 1037] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1051] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1046] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1051] <... openat resumed>) = 3 [pid 1043] <... close resumed>) = 0 [pid 1037] <... openat resumed>) = 3 [pid 1051] write(3, "1000", 4 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... write resumed>) = 4 [pid 1043] <... futex resumed>) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1037] chdir("./file0" [pid 1051] close(3 [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... close resumed>) = 0 [pid 1043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] <... futex resumed>) = 0 [pid 1037] <... chdir resumed>) = 0 [pid 1043] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1051] symlink("/dev/binderfs", "./binderfs" [pid 1043] <... open resumed>) = 4 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] ioctl(4, LOOP_CLR_FD [pid 1043] <... futex resumed>) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1051] <... symlink resumed>) = 0 [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... ioctl resumed>) = 0 [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] <... futex resumed>) = 0 [pid 1037] close(4 [pid 1051] <... futex resumed>) = 0 [pid 1043] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] <... close resumed>) = 0 [pid 1051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1043] <... write resumed>) = 9 [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... futex resumed>) = 1 [pid 1036] <... futex resumed>) = 0 [pid 1051] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1043] <... futex resumed>) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1037] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... mprotect resumed>) = 0 [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1036] <... futex resumed>) = 0 [pid 1051] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] <... futex resumed>) = 0 [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1043] open("./bus", O_RDWR [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1043] <... open resumed>) = 5 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1051] <... clone resumed>, parent_tid=[1058], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1058 [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... open resumed>) = 4 [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] <... futex resumed>) = 0 [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... futex resumed>) = 0 [pid 1043] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1042] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] <... futex resumed>) = 1 [pid 1036] <... futex resumed>) = 0 [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1043] <... mmap resumed>) = 0x20000000 [pid 1037] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1036] <... futex resumed>) = 0 [pid 1043] <... futex resumed>) = 1 [pid 1042] <... futex resumed>) = 0 [pid 1037] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1049] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] <... openat resumed>) = 3 [pid 1043] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1042] <... futex resumed>) = 0 [pid 1037] <... write resumed>) = 9 [pid 1049] write(3, "1000", 4 [pid 1043] write(4, 0x20000f80, 9 [pid 1042] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] <... write resumed>) = 4 [pid 1043] <... write resumed>) = 9 [pid 1042] <... futex resumed>) = 0 [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] close(3 [pid 1043] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1037] <... futex resumed>) = 1 [pid 1036] <... futex resumed>) = 0 [pid 1049] <... close resumed>) = 0 [pid 1043] <... futex resumed>) = 0 [pid 1042] <... mmap resumed>) = 0x7f70edc9c000 [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] open("./bus", O_RDWR [pid 1043] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1042] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1037] <... open resumed>) = 5 [pid 1036] <... futex resumed>) = 0 [pid 1042] <... mprotect resumed>) = 0 [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1042] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1036] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1037] <... futex resumed>) = 0 [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1042] <... clone resumed>, parent_tid=[1061], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1061 [pid 1037] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1036] <... futex resumed>) = 0 [pid 1042] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1036] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1042] <... futex resumed>) = 0 [pid 1037] <... mmap resumed>) = 0x20000000 [pid 1049] symlink("/dev/binderfs", "./binderfs" [pid 1042] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1036] <... futex resumed>) = 0 [pid 1037] write(4, 0x20000f80, 9 [pid 1036] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1036] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... write resumed>) = 9 [pid 1036] <... futex resumed>) = 0 [pid 1049] <... symlink resumed>) = 0 [pid 1037] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1036] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1037] <... futex resumed>) = 0 [pid 1036] <... mmap resumed>) = 0x7f70edc9c000 [pid 1049] <... futex resumed>) = 0 [pid 1041] <... mount resumed>) = 0 [pid 1037] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1036] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1041] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1036] <... mprotect resumed>) = 0 [pid 1041] <... openat resumed>) = 3 [pid 1036] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1049] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1041] chdir("./file0" [pid 1049] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1041] <... chdir resumed>) = 0 [pid 1036] <... clone resumed>, parent_tid=[1062], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1062 [pid 1041] ioctl(4, LOOP_CLR_FD [pid 1036] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] <... mprotect resumed>) = 0 [pid 1041] <... ioctl resumed>) = 0 [pid 1036] <... futex resumed>) = 0 [pid 1041] close(4 [pid 1036] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1062 attached ./strace-static-x86_64: Process 1061 attached [pid 1049] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1041] <... close resumed>) = 0 [pid 1061] set_robust_list(0x7f70edcbc9e0, 24 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1061] <... set_robust_list resumed>) = 0 [pid 1041] <... futex resumed>) = 1 [pid 1035] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1063 attached ./strace-static-x86_64: Process 1058 attached [pid 1062] set_robust_list(0x7f70edcbc9e0, 24 [pid 1049] <... clone resumed>, parent_tid=[1063], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1063 [pid 1046] <... mount resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1061] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1063] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1062] <... set_robust_list resumed>) = 0 [pid 1058] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1043] <... futex resumed>) = ? [pid 1042] <... futex resumed>) = ? [pid 1041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1035] <... futex resumed>) = 0 [pid 1063] <... set_robust_list resumed>) = 0 [pid 1046] <... openat resumed>) = 3 [pid 1043] +++ killed by SIGBUS +++ [pid 1041] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1061] +++ killed by SIGBUS +++ [pid 1046] chdir("./file0" [pid 1042] +++ killed by SIGBUS +++ [pid 1041] <... open resumed>) = 4 [pid 1046] <... chdir resumed>) = 0 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] ioctl(4, LOOP_CLR_FD [pid 1041] <... futex resumed>) = 1 [pid 1035] <... futex resumed>) = 0 [pid 1046] <... ioctl resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] close(4 [pid 1041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1035] <... futex resumed>) = 0 [pid 1046] <... close resumed>) = 0 [pid 1041] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... write resumed>) = 9 [pid 1046] <... futex resumed>) = 1 [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... futex resumed>) = 1 [pid 1035] <... futex resumed>) = 0 [pid 1046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1035] <... futex resumed>) = 0 [pid 1046] <... open resumed>) = 4 [pid 1041] open("./bus", O_RDWR [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... open resumed>) = 5 [pid 1046] <... futex resumed>) = 1 [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... futex resumed>) = 1 [pid 1035] <... futex resumed>) = 0 [pid 1046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1035] <... futex resumed>) = 0 [pid 1046] <... write resumed>) = 9 [pid 1041] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1035] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... mmap resumed>) = 0x20000000 [pid 1046] <... futex resumed>) = 1 [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... futex resumed>) = 1 [pid 1035] <... futex resumed>) = 0 [pid 1046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] open("./bus", O_RDWR [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1041] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1035] <... futex resumed>) = 0 [pid 1046] <... open resumed>) = 5 [pid 1041] write(4, 0x20000f80, 9 [pid 1035] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... write resumed>) = 9 [pid 1035] <... futex resumed>) = 0 [pid 1046] <... futex resumed>) = 1 [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1041] <... futex resumed>) = 0 [pid 1035] <... mmap resumed>) = 0x7f70edc9c000 [pid 1046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1044] <... futex resumed>) = 0 [pid 1041] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1035] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1046] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1044] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1035] <... mprotect resumed>) = 0 [pid 1049] <... futex resumed>) = 0 [pid 1046] <... mmap resumed>) = 0x20000000 [pid 1035] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1058] <... set_robust_list resumed>) = 0 [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1042, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1046] <... futex resumed>) = 1 [pid 1044] <... futex resumed>) = 0 [pid 1058] memfd_create("syzkaller", 0 [pid 1035] <... clone resumed>, parent_tid=[1064], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1064 [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1046] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1044] <... futex resumed>) = 0 [pid 1035] <... futex resumed>) = 0 [pid 1046] write(4, 0x20000f80, 9 [pid 1044] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1035] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1058] <... memfd_create resumed>) = 3 [pid 1046] <... write resumed>) = 9 [pid 1044] <... futex resumed>) = 0 [pid 376] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1058] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1046] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1044] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1058] <... mmap resumed>) = 0x7f70edbbd000 [pid 1046] <... futex resumed>) = 0 [pid 1044] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1046] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1044] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1044] <... mprotect resumed>) = 0 [pid 1044] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, [pid 1044] <... clone resumed>, parent_tid=[1065], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1065 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1044] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 1044] <... futex resumed>) = 0 [pid 1044] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1064 attached ) = -1 EINVAL (Invalid argument) [pid 376] lstat("./19/binderfs", [pid 1064] set_robust_list(0x7f70edcbc9e0, 24 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1064] <... set_robust_list resumed>) = 0 [pid 376] unlink("./19/binderfs"./strace-static-x86_64: Process 1065 attached [pid 1063] memfd_create("syzkaller", 0 [pid 1062] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1058] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] <... unlink resumed>) = 0 [pid 1063] <... memfd_create resumed>) = 3 [pid 1058] <... write resumed>) = 1048576 [pid 376] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1063] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1058] munmap(0x7f70edbbd000, 1048576 [pid 1063] <... mmap resumed>) = 0x7f70edbbd000 [pid 1058] <... munmap resumed>) = 0 [pid 1064] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1036] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1058] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1058] ioctl(4, LOOP_SET_FD, 3 [pid 1037] <... futex resumed>) = ? [pid 1037] +++ killed by SIGBUS +++ [pid 1065] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1063] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1041] <... futex resumed>) = ? [pid 1035] <... futex resumed>) = ? [pid 1041] +++ killed by SIGBUS +++ [pid 1064] +++ killed by SIGBUS +++ [pid 1035] +++ killed by SIGBUS +++ [ 27.107762][ T1061] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.125345][ T1062] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.143369][ T1064] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1035, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1062] +++ killed by SIGBUS +++ [pid 1036] +++ killed by SIGBUS +++ [pid 1063] <... write resumed>) = 1048576 [pid 1063] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1063] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./18/binderfs") = 0 [pid 377] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1036, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./17/binderfs") = 0 [pid 373] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1065] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1046] <... futex resumed>) = ? [pid 1044] <... futex resumed>) = ? [pid 1065] +++ killed by SIGBUS +++ [pid 1046] +++ killed by SIGBUS +++ [pid 1044] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1044, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./18/binderfs") = 0 [pid 374] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1058] <... ioctl resumed>) = 0 [pid 1058] close(3) = 0 [pid 1058] mkdir("./file0", 0777) = 0 [pid 1058] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... umount2 resumed>) = 0 [pid 1063] <... openat resumed>) = 4 [pid 376] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1063] ioctl(4, LOOP_SET_FD, 3 [pid 376] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./19/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./19") = 0 [pid 376] mkdir("./20", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1058] <... mount resumed>) = 0 [pid 1058] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1058] chdir("./file0") = 0 [ 27.163686][ T1065] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1058] ioctl(4, LOOP_CLR_FD [pid 376] <... openat resumed>) = 3 [pid 1063] <... ioctl resumed>) = 0 [pid 1058] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 1063] close(3 [pid 1058] close(4 [pid 377] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1058] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./18/file0", [pid 374] lstat("./18/file0", [pid 373] lstat("./17/file0", [pid 1058] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1058] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1063] <... close resumed>) = 0 [pid 1058] <... open resumed>) = 4 [pid 377] <... openat resumed>) = 4 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 374] fstat(4, [pid 373] fstat(4, [pid 1058] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1058] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 374] close(4 [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./18/file0" [pid 374] rmdir("./18/file0" [pid 373] rmdir("./17/file0" [pid 1063] mkdir("./file0", 0777 [pid 377] <... rmdir resumed>) = 0 [pid 376] close(3 [pid 1063] <... mkdir resumed>) = 0 [pid 1058] <... write resumed>) = 9 [pid 377] getdents64(3, [pid 374] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1063] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] getdents64(3, [pid 373] getdents64(3, [pid 1058] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 377] close(3 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 374] close(3 [pid 373] close(3 [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 0 [pid 377] rmdir("./18" [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 ./strace-static-x86_64: Process 1070 attached [pid 1058] open("./bus", O_RDWR [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1070 [pid 374] rmdir("./18" [pid 373] rmdir("./17" [pid 1058] <... open resumed>) = 5 [pid 377] mkdir("./19", 0777 [pid 374] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 374] mkdir("./19", 0777 [pid 373] mkdir("./18", 0777 [pid 1058] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... mkdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 1058] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1051] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 1058] <... mmap resumed>) = 0x20000000 [pid 377] close(3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1070] set_robust_list(0x5555569495e0, 24 [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 374] close(3 [pid 373] close(3 [pid 1070] <... set_robust_list resumed>) = 0 [pid 1058] <... futex resumed>) = 1 [pid 1051] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1070] chdir("./20" [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1051] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] <... chdir resumed>) = 0 [pid 1058] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1051] <... futex resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1070] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1058] write(4, 0x20000f80, 9 [pid 1051] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1071 [pid 1070] <... prctl resumed>) = 0 [pid 1070] setpgid(0, 0) = 0 [pid 1051] <... futex resumed>) = 0 [pid 1070] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1070] write(3, "1000", 4 [pid 1051] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1070] <... write resumed>) = 4 [pid 1051] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1072 [pid 1070] close(3 [pid 1058] <... write resumed>) = 9 [pid 1051] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1073 [pid 1070] <... close resumed>) = 0 [pid 1058] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... mprotect resumed>) = 0 [pid 1070] symlink("/dev/binderfs", "./binderfs" [pid 1058] <... futex resumed>) = 0 [pid 1051] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1070] <... symlink resumed>) = 0 [pid 1058] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1051] <... clone resumed>, parent_tid=[1074], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1074 [pid 1070] <... futex resumed>) = 0 [pid 1051] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1051] <... futex resumed>) = 0 [pid 1051] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1070] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1070] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1075], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1075 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 1072 attached [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1072] set_robust_list(0x5555569495e0, 24) = 0 [pid 1072] chdir("./19") = 0 [pid 1072] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1072] setpgid(0, 0) = 0 [pid 1072] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1072] write(3, "1000", 4) = 4 [pid 1072] close(3) = 0 [pid 1072] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1072] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1072] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1076], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1076 [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1071 attached [pid 1071] set_robust_list(0x5555569495e0, 24) = 0 [pid 1071] chdir("./19") = 0 [pid 1071] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1071] setpgid(0, 0) = 0 [pid 1071] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1071] write(3, "1000", 4) = 4 [pid 1071] close(3) = 0 [pid 1071] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 ./strace-static-x86_64: Process 1073 attached [pid 1071] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1073] set_robust_list(0x5555569495e0, 24) = 0 [pid 1071] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1078], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1078 ./strace-static-x86_64: Process 1074 attached [pid 1073] chdir("./18" [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... chdir resumed>) = 0 [pid 1071] <... futex resumed>) = 0 [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1078 attached [pid 1078] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1074] set_robust_list(0x7f70edcbc9e0, 24 [pid 1073] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1078] memfd_create("syzkaller", 0) = 3 [pid 1078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1074] <... set_robust_list resumed>) = 0 [pid 1073] <... prctl resumed>) = 0 [pid 1078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1078] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1078] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 1078] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1075 attached [pid 1075] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1075] memfd_create("syzkaller", 0) = 3 [pid 1075] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1073] setpgid(0, 0 [pid 1075] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1073] <... setpgid resumed>) = 0 [pid 1073] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1073] write(3, "1000", 4) = 4 [pid 1073] close(3) = 0 [pid 1073] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 1076 attached [pid 1076] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1073] <... symlink resumed>) = 0 [pid 1076] <... set_robust_list resumed>) = 0 [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... ioctl resumed>) = 0 [pid 1076] memfd_create("syzkaller", 0 [pid 1074] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1073] <... futex resumed>) = 0 [pid 1063] <... mount resumed>) = 0 [pid 1078] close(3 [pid 1063] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1078] <... close resumed>) = 0 [pid 1063] <... openat resumed>) = 3 [pid 1076] <... memfd_create resumed>) = 3 [pid 1073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1078] mkdir("./file0", 0777 [pid 1073] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1076] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1063] chdir("./file0" [pid 1051] <... futex resumed>) = 230 [pid 1058] <... futex resumed>) = ? [pid 1078] <... mkdir resumed>) = 0 [pid 1076] <... mmap resumed>) = 0x7f70edbbd000 [pid 1073] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1063] <... chdir resumed>) = 0 [pid 1058] +++ killed by SIGBUS +++ [pid 1078] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1063] ioctl(4, LOOP_CLR_FD) = 0 [pid 1063] close(4 [pid 1073] <... mprotect resumed>) = 0 [pid 1063] <... close resumed>) = 0 [pid 1076] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1073] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... clone resumed>, parent_tid=[1081], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1081 [pid 1063] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] <... futex resumed>) = 0 [pid 1049] <... futex resumed>) = 0 [pid 1074] +++ killed by SIGBUS +++ [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1051] +++ killed by SIGBUS +++ [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1051, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1081 attached [pid 1076] <... write resumed>) = 1048576 [pid 1075] <... write resumed>) = 1048576 [pid 1063] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1076] munmap(0x7f70edbbd000, 1048576) = 0 [pid 375] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1076] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1076] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... openat resumed>) = 3 [pid 1075] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1063] <... open resumed>) = 4 [pid 375] fstat(3, [pid 1075] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1081] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1081] memfd_create("syzkaller", 0 [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1081] <... memfd_create resumed>) = 3 [pid 375] getdents64(3, [pid 1063] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1081] <... mmap resumed>) = 0x7f70edbbd000 [pid 1049] <... futex resumed>) = 0 [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1063] <... write resumed>) = 9 [pid 1078] <... mount resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1078] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1078] chdir("./file0" [pid 1076] <... ioctl resumed>) = 0 [pid 1078] <... chdir resumed>) = 0 [pid 1078] ioctl(4, LOOP_CLR_FD [pid 1076] close(3 [pid 1078] <... ioctl resumed>) = 0 [pid 1078] close(4 [pid 1076] <... close resumed>) = 0 [pid 1078] <... close resumed>) = 0 [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./19/binderfs", [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] mkdir("./file0", 0777 [pid 1075] <... openat resumed>) = 4 [pid 1063] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] open("./bus", O_RDWR [pid 375] unlink("./19/binderfs" [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1076] <... mkdir resumed>) = 0 [pid 1075] ioctl(4, LOOP_SET_FD, 3 [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... open resumed>) = 5 [pid 1049] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1076] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1071] <... futex resumed>) = 0 [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1063] <... futex resumed>) = 0 [pid 1049] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... unlink resumed>) = 0 [pid 1078] <... open resumed>) = 4 [pid 1063] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1063] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1049] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... mmap resumed>) = 0x20000000 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1071] <... futex resumed>) = 0 [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1078] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1063] <... futex resumed>) = 1 [pid 1049] <... futex resumed>) = 0 [pid 1078] <... write resumed>) = 9 [pid 1063] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1049] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1063] write(4, 0x20000f80, 9 [pid 1049] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1063] <... write resumed>) = 9 [pid 1049] <... futex resumed>) = 0 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1071] <... futex resumed>) = 0 [pid 1063] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1078] open("./bus", O_RDWR [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1063] <... futex resumed>) = 0 [pid 1049] <... mmap resumed>) = 0x7f70edc9c000 [pid 1078] <... open resumed>) = 5 [pid 1063] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1049] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] <... mprotect resumed>) = 0 [pid 1078] <... futex resumed>) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1049] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1071] <... futex resumed>) = 0 [pid 1049] <... clone resumed>, parent_tid=[1086], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1086 [pid 1078] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1071] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1049] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... mmap resumed>) = 0x20000000 [pid 1049] <... futex resumed>) = 0 [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1049] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1078] <... futex resumed>) = 1 [pid 1071] <... futex resumed>) = 0 [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] <... ioctl resumed>) = 0 [pid 1071] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] close(3 [pid 1071] <... futex resumed>) = 0 [pid 1078] write(4, 0x20000f80, 9 [pid 1075] <... close resumed>) = 0 [pid 1071] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1078] <... write resumed>) = 9 [pid 1075] mkdir("./file0", 0777 [pid 1071] <... futex resumed>) = 0 [pid 1078] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... mkdir resumed>) = 0 [pid 1071] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1078] <... futex resumed>) = 0 [pid 1075] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1071] <... mmap resumed>) = 0x7f70edc9c000 [pid 1078] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1071] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1071] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1087], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1087 [pid 1071] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1071] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1086 attached [ 27.350386][ T1074] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1086] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1087 attached [pid 1081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1087] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1086] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1081] <... write resumed>) = 1048576 [pid 1063] <... futex resumed>) = ? [pid 1049] <... futex resumed>) = ? [pid 1063] +++ killed by SIGBUS +++ [pid 1086] +++ killed by SIGBUS +++ [pid 1049] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1049, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1081] munmap(0x7f70edbbd000, 1048576 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./18/binderfs") = 0 [pid 372] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] <... munmap resumed>) = 0 [pid 1081] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1087] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1078] <... futex resumed>) = ? [pid 1071] <... futex resumed>) = ? [pid 1078] +++ killed by SIGBUS +++ [pid 1087] +++ killed by SIGBUS +++ [pid 1071] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1071, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] <... umount2 resumed>) = 0 [pid 377] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./19/binderfs") = 0 [pid 377] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] <... openat resumed>) = 4 [pid 375] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./19/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./19") = 0 [pid 375] mkdir("./20", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1075] <... mount resumed>) = 0 [pid 1075] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1075] chdir("./file0") = 0 [pid 1075] ioctl(4, LOOP_CLR_FD [pid 1076] <... mount resumed>) = 0 [pid 1076] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1076] chdir("./file0") = 0 [pid 1076] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 1081] <... ioctl resumed>) = 0 [pid 372] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] close(3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1081] <... close resumed>) = 0 [pid 372] lstat("./18/file0", [pid 1081] mkdir("./file0", 0777 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1081] <... mkdir resumed>) = 0 [pid 372] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./18/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./18") = 0 [pid 372] mkdir("./19", 0777) = 0 [ 27.404890][ T1086] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.408620][ T1087] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1076] <... ioctl resumed>) = 0 [pid 1075] <... ioctl resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 1076] close(4 [pid 1075] close(4 [pid 375] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 1076] <... close resumed>) = 0 [pid 1075] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1076] <... futex resumed>) = 1 [pid 1072] <... futex resumed>) = 0 [pid 372] close(3 [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] <... futex resumed>) = 1 [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] <... futex resumed>) = 0 [pid 377] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1072] <... futex resumed>) = 0 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1076] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1075] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./19/file0", ./strace-static-x86_64: Process 1093 attached [pid 1076] <... open resumed>) = 4 [pid 1075] <... open resumed>) = 4 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1093 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1094 [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = 1 [pid 1072] <... futex resumed>) = 0 [pid 1070] <... futex resumed>) = 0 [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1072] <... futex resumed>) = 0 [pid 1070] <... futex resumed>) = 0 [pid 1076] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1075] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1076] <... write resumed>) = 9 [pid 1075] <... write resumed>) = 9 [pid 377] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 1093] set_robust_list(0x5555569495e0, 24 [pid 1075] <... futex resumed>) = 1 [pid 1070] <... futex resumed>) = 0 [pid 1075] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1076] <... futex resumed>) = 1 [pid 1075] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1072] <... futex resumed>) = 0 [pid 1070] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] open("./bus", O_RDWR [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] <... open resumed>) = 5 [pid 1072] <... futex resumed>) = 0 [pid 1076] open("./bus", O_RDWR [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 1076] <... open resumed>) = 5 [pid 1075] <... futex resumed>) = 1 [pid 1070] <... futex resumed>) = 0 [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1093] <... set_robust_list resumed>) = 0 [pid 1076] <... futex resumed>) = 1 [pid 1075] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1072] <... futex resumed>) = 0 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1093] chdir("./20" [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] <... mmap resumed>) = 0x20000000 [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] <... futex resumed>) = 0 [pid 1093] <... chdir resumed>) = 0 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1072] <... futex resumed>) = 0 [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 1093] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1076] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1075] <... futex resumed>) = 0 [pid 1072] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1070] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1093] <... prctl resumed>) = 0 [pid 1076] <... mmap resumed>) = 0x20000000 [pid 1075] write(4, 0x20000f80, 9 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 1093] setpgid(0, 0 [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1075] <... write resumed>) = 9 [pid 1070] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 1076] <... futex resumed>) = 1 [pid 1075] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1072] <... futex resumed>) = 0 [pid 1070] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./19/file0" [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1075] <... futex resumed>) = 0 [pid 1072] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1070] <... futex resumed>) = 0 [pid 1093] <... setpgid resumed>) = 0 [pid 1076] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... rmdir resumed>) = 0 [pid 1093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1093] write(3, "1000", 4) = 4 [pid 1093] close(3) = 0 [pid 1093] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1093] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1093] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1095], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1095 [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1094 attached [pid 1094] set_robust_list(0x5555569495e0, 24) = 0 [pid 1094] chdir("./19") = 0 [pid 1094] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1094] setpgid(0, 0) = 0 [pid 1094] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1094] write(3, "1000", 4) = 4 [pid 1094] close(3) = 0 [pid 1094] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1094] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1094] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1096], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1096 [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1096 attached [pid 1096] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1096] memfd_create("syzkaller", 0) = 3 [pid 1096] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1072] <... futex resumed>) = 0 [pid 1070] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1076] write(4, 0x20000f80, 9 [pid 1072] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 1076] <... write resumed>) = 9 [pid 1072] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1076] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1072] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] close(3 [pid 1076] <... futex resumed>) = 0 [pid 1072] <... mmap resumed>) = 0x7f70edc9c000 [pid 1076] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1072] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... close resumed>) = 0 [pid 1072] <... mprotect resumed>) = 0 [pid 377] rmdir("./19" [pid 1072] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... rmdir resumed>) = 0 [pid 1072] <... clone resumed>, parent_tid=[1098], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1098 [pid 377] mkdir("./20", 0777 [pid 1072] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 1072] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1072] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 1096] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 377] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1100 ./strace-static-x86_64: Process 1098 attached [pid 1098] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1100 attached ./strace-static-x86_64: Process 1095 attached [pid 1096] <... write resumed>) = 1048576 [pid 1075] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1100] set_robust_list(0x5555569495e0, 24 [pid 1096] munmap(0x7f70edbbd000, 1048576 [pid 1095] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1100] <... set_robust_list resumed>) = 0 [pid 1096] <... munmap resumed>) = 0 [pid 1095] <... set_robust_list resumed>) = 0 [pid 1100] chdir("./20" [pid 1096] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1095] memfd_create("syzkaller", 0 [pid 1100] <... chdir resumed>) = 0 [pid 1096] <... openat resumed>) = 4 [pid 1095] <... memfd_create resumed>) = 3 [pid 1100] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1096] ioctl(4, LOOP_SET_FD, 3 [pid 1095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1100] <... prctl resumed>) = 0 [pid 1095] <... mmap resumed>) = 0x7f70edbbd000 [pid 1095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1100] setpgid(0, 0) = 0 [pid 1100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1100] write(3, "1000", 4) = 4 [pid 1100] close(3) = 0 [pid 1100] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1100] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1100] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1102], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1102 [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1098] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1076] <... futex resumed>) = ? [pid 1072] <... futex resumed>) = ? [pid 1076] +++ killed by SIGBUS +++ [pid 1081] <... mount resumed>) = 0 [pid 1081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1070] <... futex resumed>) = ? [pid 1081] <... openat resumed>) = 3 [pid 1081] chdir("./file0") = 0 [pid 1081] ioctl(4, LOOP_CLR_FD [pid 1098] +++ killed by SIGBUS +++ [pid 1072] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1072, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./19/binderfs" [pid 1075] +++ killed by SIGBUS +++ [pid 1070] +++ killed by SIGBUS +++ [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1102 attached [pid 1095] <... write resumed>) = 1048576 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1070, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1102] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1096] <... ioctl resumed>) = 0 [pid 1095] munmap(0x7f70edbbd000, 1048576 [pid 1081] <... ioctl resumed>) = 0 [pid 376] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1096] close(3 [pid 1081] close(4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1096] <... close resumed>) = 0 [pid 1095] <... munmap resumed>) = 0 [pid 1081] <... close resumed>) = 0 [pid 376] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1096] mkdir("./file0", 0777 [pid 1095] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 1096] <... mkdir resumed>) = 0 [pid 1095] <... openat resumed>) = 4 [pid 1081] <... futex resumed>) = 1 [pid 1073] <... futex resumed>) = 0 [pid 376] fstat(3, [pid 1096] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1081] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] ioctl(4, LOOP_SET_FD, 3 [pid 1081] <... open resumed>) = 4 [pid 1073] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 1081] <... futex resumed>) = 0 [pid 1073] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1081] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1073] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1081] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./20/binderfs", [pid 1081] <... write resumed>) = 9 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./20/binderfs" [pid 1081] <... futex resumed>) = 1 [pid 1073] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 1081] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1073] <... futex resumed>) = 0 [pid 1081] open("./bus", O_RDWR [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1081] <... open resumed>) = 5 [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1073] <... futex resumed>) = 0 [pid 1081] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1073] <... futex resumed>) = 0 [pid 1081] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1073] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1081] <... mmap resumed>) = 0x20000000 [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1073] <... futex resumed>) = 0 [pid 1081] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1081] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1073] <... futex resumed>) = 0 [pid 1081] write(4, 0x20000f80, 9 [pid 1073] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1081] <... write resumed>) = 9 [pid 1073] <... futex resumed>) = 0 [pid 1081] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1073] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1081] <... futex resumed>) = 0 [pid 1073] <... mmap resumed>) = 0x7f70edc9c000 [pid 1081] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1073] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1073] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1103 attached , parent_tid=[1103], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1103 [pid 1073] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1073] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... set_robust_list resumed>) = 0 [pid 1103] set_robust_list(0x7f70edcbc9e0, 24 [pid 1102] memfd_create("syzkaller", 0 [pid 1103] <... set_robust_list resumed>) = 0 [pid 1102] <... memfd_create resumed>) = 3 [pid 1102] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 27.531548][ T1075] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.554585][ T1098] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1102] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1102] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1102] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1103] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1081] <... futex resumed>) = ? [pid 1073] <... futex resumed>) = ? [pid 1081] +++ killed by SIGBUS +++ [pid 1103] +++ killed by SIGBUS +++ [pid 1073] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1073, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./18/binderfs") = 0 [pid 373] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1095] <... ioctl resumed>) = 0 [pid 1095] close(3) = 0 [pid 1095] mkdir("./file0", 0777) = 0 [pid 1095] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1096] <... mount resumed>) = 0 [pid 1096] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1096] chdir("./file0") = 0 [ 27.589683][ T1103] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1096] ioctl(4, LOOP_CLR_FD) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 1096] close(4 [pid 373] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1096] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./18/file0", [pid 1096] <... futex resumed>) = 1 [pid 1094] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1096] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1096] <... open resumed>) = 4 [pid 1095] <... mount resumed>) = 0 [pid 1094] <... futex resumed>) = 0 [pid 376] lstat("./20/file0", [pid 374] lstat("./19/file0", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] chdir("./file0" [pid 1094] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1096] <... futex resumed>) = 0 [pid 1095] <... chdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 4 [pid 1095] ioctl(4, LOOP_CLR_FD [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 376] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] fstat(4, [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1094] <... futex resumed>) = 0 [pid 1096] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1094] <... futex resumed>) = 0 [pid 1096] open("./bus", O_RDWR [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... open resumed>) = 5 [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1094] <... futex resumed>) = 0 [pid 1096] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1094] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] getdents64(4, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1096] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1094] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1096] <... mmap resumed>) = 0x20000000 [pid 376] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1094] <... futex resumed>) = 0 [pid 1096] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1094] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 4 [pid 373] getdents64(4, [pid 1096] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1094] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] fstat(4, [pid 1096] write(4, 0x20000f80, 9 [pid 1094] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 373] close(4 [pid 1096] <... write resumed>) = 9 [pid 1094] <... futex resumed>) = 0 [pid 1096] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1094] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 1096] <... futex resumed>) = 0 [pid 1094] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 373] rmdir("./18/file0" [pid 1096] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1094] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1094] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... rmdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1094] <... clone resumed>, parent_tid=[1109], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1109 [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 373] getdents64(3, [pid 1094] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1094] <... futex resumed>) = 0 [pid 376] close(4 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1094] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 374] close(4 [pid 373] close(3 [pid 376] rmdir("./20/file0" [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 ./strace-static-x86_64: Process 1109 attached [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./19/file0" [pid 376] getdents64(3, [pid 373] rmdir("./18" [pid 1109] set_robust_list(0x7f70edcbc9e0, 24 [pid 374] <... rmdir resumed>) = 0 [pid 1109] <... set_robust_list resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] mkdir("./19", 0777 [pid 376] close(3 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... close resumed>) = 0 [pid 374] close(3 [pid 373] <... mkdir resumed>) = 0 [pid 376] rmdir("./20" [pid 374] <... close resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./19" [pid 376] mkdir("./21", 0777 [pid 374] <... rmdir resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 374] mkdir("./20", 0777 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1109] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1096] <... futex resumed>) = ? [pid 1094] <... futex resumed>) = ? [pid 1096] +++ killed by SIGBUS +++ [pid 1109] +++ killed by SIGBUS +++ [pid 1094] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1094, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./19/binderfs") = 0 [pid 372] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 1102] <... openat resumed>) = 4 [pid 1095] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 1102] ioctl(4, LOOP_SET_FD, 3 [pid 1095] close(4 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] close(3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1102] <... ioctl resumed>) = 0 [pid 1095] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] lstat("./19/file0", [pid 1102] close(3 [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 374] close(3 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1102] <... close resumed>) = 0 [pid 1095] <... futex resumed>) = 1 [pid 1093] <... futex resumed>) = 0 [pid 372] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1102] mkdir("./file0", 0777 [pid 1095] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1093] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1095] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... mkdir resumed>) = 0 [pid 1095] <... open resumed>) = 4 [pid 372] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1102] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1093] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 1095] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] fstat(4, [pid 1093] <... futex resumed>) = 0 [pid 1095] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1095] <... write resumed>) = 9 [pid 372] getdents64(4, [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1093] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1095] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1093] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1095] open("./bus", O_RDWR [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] close(4 [pid 1095] <... open resumed>) = 5 [pid 372] <... close resumed>) = 0 [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./19/file0" [pid 1095] <... futex resumed>) = 1 [pid 1093] <... futex resumed>) = 0 [pid 1095] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 1095] <... mmap resumed>) = 0x20000000 [pid 1093] <... futex resumed>) = 0 [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 1093] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1095] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1093] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1095] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1093] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 1095] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1093] <... futex resumed>) = 0 [pid 1095] write(4, 0x20000f80, 9 [pid 1093] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 1093] <... futex resumed>) = 0 [pid 1093] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1095] <... write resumed>) = 9 [pid 1093] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 372] rmdir("./19" [pid 1095] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1093] <... mprotect resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 1095] <... futex resumed>) = 0 [pid 1093] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1095] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] mkdir("./20", 0777./strace-static-x86_64: Process 1111 attached [pid 1111] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1111] futex(0x7f70f60b67b8, FUTEX_WAIT_PRIVATE, 0, NULL [ 27.676366][ T1109] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1093] <... clone resumed>, parent_tid=[1111], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1111 [pid 372] <... mkdir resumed>) = 0 [pid 1093] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1111] <... futex resumed>) = 0 [pid 1093] <... futex resumed>) = 1 [pid 1093] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1111] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1095] <... futex resumed>) = ? [pid 1093] <... futex resumed>) = ? [pid 1095] +++ killed by SIGBUS +++ [pid 1111] +++ killed by SIGBUS +++ [pid 1093] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1093, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./20/binderfs") = 0 [pid 375] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 1112 attached [pid 1112] set_robust_list(0x5555569495e0, 24) = 0 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1112 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1113 ./strace-static-x86_64: Process 1114 attached [pid 1114] set_robust_list(0x5555569495e0, 24 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1114 ./strace-static-x86_64: Process 1113 attached [pid 1112] chdir("./21") = 0 [pid 1112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1112] setpgid(0, 0) = 0 [pid 1112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1114] <... set_robust_list resumed>) = 0 [pid 1113] set_robust_list(0x5555569495e0, 24 [pid 1112] <... openat resumed>) = 3 [pid 1112] write(3, "1000", 4) = 4 [pid 1112] close(3) = 0 [pid 1112] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1112] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1112] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1115], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1115 [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1114] chdir("./19" [pid 1112] <... futex resumed>) = 0 [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1115 attached [pid 1115] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1114] <... chdir resumed>) = 0 [pid 1115] <... set_robust_list resumed>) = 0 [pid 1115] memfd_create("syzkaller", 0 [pid 1114] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1113] <... set_robust_list resumed>) = 0 [pid 1115] <... memfd_create resumed>) = 3 [pid 1115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1114] <... prctl resumed>) = 0 [pid 1113] chdir("./20" [pid 1114] setpgid(0, 0 [pid 1113] <... chdir resumed>) = 0 [pid 1114] <... setpgid resumed>) = 0 [pid 1113] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1114] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1114] write(3, "1000", 4 [pid 1113] <... prctl resumed>) = 0 [pid 1114] <... write resumed>) = 4 [pid 1113] setpgid(0, 0 [pid 1114] close(3) = 0 [pid 1113] <... setpgid resumed>) = 0 [pid 1113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1114] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1113] <... openat resumed>) = 3 [pid 1113] write(3, "1000", 4 [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] <... write resumed>) = 4 [pid 1114] <... futex resumed>) = 0 [pid 1114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1113] close(3 [pid 1114] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1113] <... close resumed>) = 0 [pid 1114] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1113] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1114] <... mprotect resumed>) = 0 [pid 1114] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1114] <... clone resumed>, parent_tid=[1117], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1117 [pid 1113] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1117 attached [pid 1113] <... mprotect resumed>) = 0 [pid 1114] <... futex resumed>) = 0 [pid 1117] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1113] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1117] <... set_robust_list resumed>) = 0 [pid 1113] <... clone resumed>, parent_tid=[1118], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1118 [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1118 attached [pid 1117] memfd_create("syzkaller", 0) = 3 [pid 1118] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1118] <... set_robust_list resumed>) = 0 [pid 1115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1117] <... mmap resumed>) = 0x7f70edbbd000 [ 27.723818][ T1111] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1102] <... mount resumed>) = 0 [pid 1102] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1115] <... write resumed>) = 1048576 [pid 1115] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1115] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1102] chdir("./file0") = 0 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1120 ./strace-static-x86_64: Process 1120 attached [pid 1120] set_robust_list(0x5555569495e0, 24 [pid 1115] <... openat resumed>) = 4 [pid 1102] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = 0 [pid 1115] ioctl(4, LOOP_SET_FD, 3 [pid 375] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 1118] memfd_create("syzkaller", 0 [pid 1120] <... set_robust_list resumed>) = 0 [pid 1120] chdir("./20") = 0 [pid 1118] <... memfd_create resumed>) = 3 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1120] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] getdents64(4, [pid 1120] <... prctl resumed>) = 0 [pid 1120] setpgid(0, 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./20/file0" [pid 1120] <... setpgid resumed>) = 0 [pid 1118] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1120] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1118] <... mmap resumed>) = 0x7f70edbbd000 [pid 375] <... rmdir resumed>) = 0 [pid 1120] <... openat resumed>) = 3 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1120] write(3, "1000", 4 [pid 375] close(3 [pid 1120] <... write resumed>) = 4 [pid 375] <... close resumed>) = 0 [pid 1120] close(3 [pid 375] rmdir("./20") = 0 [pid 1120] <... close resumed>) = 0 [pid 1120] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] mkdir("./21", 0777 [pid 1117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1115] <... ioctl resumed>) = 0 [pid 1115] close(3 [pid 1102] <... ioctl resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 1115] <... close resumed>) = 0 [pid 1102] close(4 [pid 375] ioctl(3, LOOP_CLR_FD [pid 1115] mkdir("./file0", 0777 [pid 1102] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1115] <... mkdir resumed>) = 0 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 1115] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1102] <... futex resumed>) = 1 [pid 1100] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1102] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1122 [pid 1102] <... open resumed>) = 4 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1102] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... write resumed>) = 9 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1102] open("./bus", O_RDWR [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... open resumed>) = 5 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1102] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1100] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1102] <... mmap resumed>) = 0x20000000 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1100] <... futex resumed>) = 0 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1100] <... futex resumed>) = 0 [pid 1102] write(4, 0x20000f80, 9 [pid 1100] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1102] <... write resumed>) = 9 [pid 1100] <... futex resumed>) = 0 [pid 1102] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1100] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1102] <... futex resumed>) = 0 [pid 1100] <... mmap resumed>) = 0x7f70edc9c000 [pid 1102] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1100] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1100] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1100] <... clone resumed>, parent_tid=[1123], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1123 [pid 1120] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1100] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1100] <... futex resumed>) = 0 [pid 1120] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1100] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] <... mprotect resumed>) = 0 [pid 1120] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1124], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1124 [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1123 attached [pid 1123] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1124 attached ./strace-static-x86_64: Process 1122 attached [pid 1118] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1117] <... write resumed>) = 1048576 [pid 1124] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1122] set_robust_list(0x5555569495e0, 24 [pid 1123] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1102] <... futex resumed>) = ? [pid 1100] <... futex resumed>) = ? [pid 1102] +++ killed by SIGBUS +++ [pid 1123] +++ killed by SIGBUS +++ [pid 1100] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1100, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 1117] munmap(0x7f70edbbd000, 1048576) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 1118] <... write resumed>) = 1048576 [pid 1124] <... set_robust_list resumed>) = 0 [pid 1122] <... set_robust_list resumed>) = 0 [pid 1117] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1117] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1124] memfd_create("syzkaller", 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1122] chdir("./21" [pid 377] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1124] <... memfd_create resumed>) = 3 [pid 1122] <... chdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 1124] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1122] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1118] munmap(0x7f70edbbd000, 1048576 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1124] <... mmap resumed>) = 0x7f70edbbd000 [pid 1122] <... prctl resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./20/binderfs", [pid 1122] setpgid(0, 0 [pid 1118] <... munmap resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./20/binderfs" [pid 1115] <... mount resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 1115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1122] <... setpgid resumed>) = 0 [pid 1118] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1115] <... openat resumed>) = 3 [pid 1115] chdir("./file0") = 0 [pid 1115] ioctl(4, LOOP_CLR_FD [pid 1122] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1118] <... openat resumed>) = 4 [pid 1117] <... ioctl resumed>) = 0 [pid 1117] close(3) = 0 [pid 1117] mkdir("./file0", 0777 [pid 1124] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1122] <... openat resumed>) = 3 [pid 1118] ioctl(4, LOOP_SET_FD, 3 [pid 1117] <... mkdir resumed>) = 0 [pid 1122] write(3, "1000", 4 [pid 1117] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1122] <... write resumed>) = 4 [pid 1122] close(3) = 0 [pid 1122] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1124] <... write resumed>) = 1048576 [pid 1122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1124] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1124] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1122] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1122] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1122] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1128], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1128 [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1128 attached [pid 1128] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1128] memfd_create("syzkaller", 0) = 3 [pid 1128] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1128] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1128] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1128] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1124] <... openat resumed>) = 4 [pid 1118] <... ioctl resumed>) = 0 [pid 1115] <... ioctl resumed>) = 0 [pid 1124] ioctl(4, LOOP_SET_FD, 3 [pid 1115] close(4 [pid 1124] <... ioctl resumed>) = 0 [pid 1118] close(3 [pid 1124] close(3) = 0 [pid 1124] mkdir("./file0", 0777) = 0 [pid 1118] <... close resumed>) = 0 [pid 1124] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [ 27.824022][ T1123] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1118] mkdir("./file0", 0777 [pid 1128] <... openat resumed>) = 4 [pid 1118] <... mkdir resumed>) = 0 [pid 1115] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 1128] ioctl(4, LOOP_SET_FD, 3 [pid 1118] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1115] <... futex resumed>) = 1 [pid 1112] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./20/file0", [pid 1115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1112] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1115] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1115] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1115] <... futex resumed>) = 1 [pid 1112] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 1115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1112] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1115] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 1115] <... write resumed>) = 9 [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 1115] <... futex resumed>) = 1 [pid 1112] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 1115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1112] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 1115] open("./bus", O_RDWR [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./20/file0" [pid 1115] <... open resumed>) = 5 [pid 377] <... rmdir resumed>) = 0 [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 1115] <... futex resumed>) = 1 [pid 1112] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 1115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1112] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 1115] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1112] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./20" [pid 1115] <... mmap resumed>) = 0x20000000 [pid 377] <... rmdir resumed>) = 0 [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./21", 0777 [pid 1115] <... futex resumed>) = 1 [pid 1112] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1115] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1112] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 1115] write(4, 0x20000f80, 9 [pid 1112] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 1112] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1112] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] close(3 [pid 1112] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] <... close resumed>) = 0 [pid 1112] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1115] <... write resumed>) = 9 [pid 1112] <... mprotect resumed>) = 0 [pid 1115] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1134 [pid 1115] <... futex resumed>) = 0 [pid 1115] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1112] <... clone resumed>, parent_tid=[1135], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1135 [pid 1112] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1112] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... ioctl resumed>) = 0 [pid 1128] close(3) = 0 [pid 1128] mkdir("./file0", 0777) = 0 [pid 1128] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 1134 attached [pid 1134] set_robust_list(0x5555569495e0, 24) = 0 [pid 1134] chdir("./21") = 0 [pid 1134] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1134] setpgid(0, 0) = 0 [pid 1134] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1117] <... mount resumed>) = 0 [pid 1117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 1135 attached [pid 1117] chdir("./file0" [pid 1135] set_robust_list(0x7f70edcbc9e0, 24 [pid 1134] <... openat resumed>) = 3 [pid 1117] <... chdir resumed>) = 0 [pid 1117] ioctl(4, LOOP_CLR_FD) = 0 [pid 1135] <... set_robust_list resumed>) = 0 [pid 1118] <... mount resumed>) = 0 [pid 1117] close(4 [pid 1134] write(3, "1000", 4 [pid 1118] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1134] <... write resumed>) = 4 [pid 1118] <... openat resumed>) = 3 [pid 1117] <... close resumed>) = 0 [pid 1118] chdir("./file0" [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] <... chdir resumed>) = 0 [pid 1117] <... futex resumed>) = 1 [pid 1114] <... futex resumed>) = 0 [pid 1118] ioctl(4, LOOP_CLR_FD [pid 1117] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] <... ioctl resumed>) = 0 [pid 1117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1114] <... futex resumed>) = 0 [pid 1118] close(4 [pid 1117] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1118] <... close resumed>) = 0 [pid 1134] close(3 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] <... close resumed>) = 0 [pid 1118] <... futex resumed>) = 1 [pid 1113] <... futex resumed>) = 0 [pid 1134] symlink("/dev/binderfs", "./binderfs" [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] <... symlink resumed>) = 0 [pid 1118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1113] <... futex resumed>) = 0 [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1134] <... futex resumed>) = 0 [pid 1118] <... open resumed>) = 4 [pid 1134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1118] <... futex resumed>) = 1 [pid 1113] <... futex resumed>) = 0 [pid 1134] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] <... mprotect resumed>) = 0 [pid 1118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1113] <... futex resumed>) = 0 [pid 1134] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1118] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1118] <... write resumed>) = 9 [pid 1134] <... clone resumed>, parent_tid=[1138], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1138 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] <... futex resumed>) = 1 [pid 1113] <... futex resumed>) = 0 [pid 1134] <... futex resumed>) = 0 [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1138 attached [pid 1135] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1117] <... open resumed>) = 4 [pid 1113] <... futex resumed>) = 0 [pid 1138] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1118] open("./bus", O_RDWR [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1115] <... futex resumed>) = ? [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1112] <... futex resumed>) = ? [pid 1138] <... set_robust_list resumed>) = 0 [pid 1118] <... open resumed>) = 5 [pid 1117] <... futex resumed>) = 1 [pid 1115] +++ killed by SIGBUS +++ [pid 1114] <... futex resumed>) = 0 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] <... futex resumed>) = 1 [pid 1117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1114] <... futex resumed>) = 0 [pid 1113] <... futex resumed>) = 0 [pid 1135] +++ killed by SIGBUS +++ [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1117] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1112] +++ killed by SIGBUS +++ [pid 1138] memfd_create("syzkaller", 0 [pid 1118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1117] <... write resumed>) = 9 [pid 1113] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1112, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1118] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 1118] <... mmap resumed>) = 0x20000000 [pid 1117] <... futex resumed>) = 1 [pid 1114] <... futex resumed>) = 0 [pid 376] <... restart_syscall resumed>) = 0 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... memfd_create resumed>) = 3 [pid 1128] <... mount resumed>) = 0 [pid 1118] <... futex resumed>) = 1 [pid 1117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1114] <... futex resumed>) = 0 [pid 1113] <... futex resumed>) = 0 [pid 1128] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1128] <... openat resumed>) = 3 [pid 1128] chdir("./file0") = 0 [pid 1128] ioctl(4, LOOP_CLR_FD) = 0 [pid 1128] close(4 [pid 1138] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1128] <... close resumed>) = 0 [pid 1118] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1117] open("./bus", O_RDWR [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1113] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1138] <... mmap resumed>) = 0x7f70edbbd000 [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... mount resumed>) = 0 [pid 1118] write(4, 0x20000f80, 9 [pid 1117] <... open resumed>) = 5 [pid 1113] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1128] <... futex resumed>) = 1 [pid 1124] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1122] <... futex resumed>) = 0 [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1122] <... futex resumed>) = 0 [pid 1128] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... open resumed>) = 4 [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... openat resumed>) = 3 [pid 1113] <... futex resumed>) = 0 [pid 1117] <... futex resumed>) = 1 [pid 1114] <... futex resumed>) = 0 [pid 1128] <... futex resumed>) = 1 [pid 1124] chdir("./file0" [pid 1122] <... futex resumed>) = 0 [pid 1118] <... write resumed>) = 9 [pid 1117] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1113] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... openat resumed>) = 3 [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1122] <... futex resumed>) = 0 [pid 1128] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... write resumed>) = 9 [pid 1118] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] fstat(3, [pid 1124] <... chdir resumed>) = 0 [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1122] <... futex resumed>) = 0 [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1122] <... futex resumed>) = 0 [pid 1128] open("./bus", O_RDWR [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... open resumed>) = 5 [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1122] <... futex resumed>) = 0 [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1122] <... futex resumed>) = 0 [pid 1128] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1122] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1117] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1118] <... futex resumed>) = 0 [pid 1114] <... futex resumed>) = 0 [pid 1124] ioctl(4, LOOP_CLR_FD [pid 1113] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1128] <... mmap resumed>) = 0x20000000 [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] <... mmap resumed>) = 0x20000000 [pid 1114] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] <... futex resumed>) = 1 [pid 1124] <... ioctl resumed>) = 0 [pid 1122] <... futex resumed>) = 0 [pid 1118] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] <... mprotect resumed>) = 0 [pid 1114] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] getdents64(3, [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] close(4 [pid 1122] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1114] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1138] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1128] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... close resumed>) = 0 [pid 1122] <... futex resumed>) = 0 [pid 1117] <... futex resumed>) = 0 [pid 1114] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 ./strace-static-x86_64: Process 1143 attached [pid 1128] write(4, 0x20000f80, 9 [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1122] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] write(4, 0x20000f80, 9 [pid 1114] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1113] <... clone resumed>, parent_tid=[1143], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1143 [pid 376] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1143] set_robust_list(0x7f70edcbc9e0, 24 [pid 1128] <... write resumed>) = 9 [pid 1124] <... futex resumed>) = 1 [pid 1122] <... futex resumed>) = 0 [pid 1120] <... futex resumed>) = 0 [pid 1114] <... futex resumed>) = 0 [pid 1117] <... write resumed>) = 9 [pid 1113] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1143] <... set_robust_list resumed>) = 0 [pid 1128] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1122] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1117] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1114] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1113] <... futex resumed>) = 0 [pid 1138] <... write resumed>) = 1048576 [pid 1128] <... futex resumed>) = 0 [pid 1124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1117] <... futex resumed>) = 0 [pid 1114] <... mmap resumed>) = 0x7f70edc9c000 [pid 1113] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./21/binderfs", [pid 1138] munmap(0x7f70edbbd000, 1048576 [pid 1124] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1117] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1114] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1138] <... munmap resumed>) = 0 [pid 1114] <... mprotect resumed>) = 0 [pid 376] unlink("./21/binderfs" [pid 1138] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1114] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... unlink resumed>) = 0 [pid 1138] <... openat resumed>) = 4 [pid 376] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1138] ioctl(4, LOOP_SET_FD, 3 [pid 1114] <... clone resumed>, parent_tid=[1144], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1144 [pid 1114] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1114] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1122] <... mmap resumed>) = 0x7f70edc9c000 [pid 1122] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1122] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1146], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1146 [pid 1122] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1122] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1120] <... futex resumed>) = 0 [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1128] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1124] <... open resumed>) = 4 [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [ 27.906423][ T1135] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1124] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1120] <... futex resumed>) = 0 [pid 1124] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1124] <... write resumed>) = 9 [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1120] <... futex resumed>) = 0 [pid 1124] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1124] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1120] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1146 attached [pid 1124] open("./bus", O_RDWR [pid 1146] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1144 attached [pid 1143] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1138] <... ioctl resumed>) = 0 [pid 1124] <... open resumed>) = 5 [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1144] set_robust_list(0x7f70edcbc9e0, 24 [pid 1138] close(3 [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1118] <... futex resumed>) = ? [pid 1113] <... futex resumed>) = ? [pid 1144] <... set_robust_list resumed>) = 0 [pid 1138] <... close resumed>) = 0 [pid 1124] <... futex resumed>) = 0 [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1118] +++ killed by SIGBUS +++ [pid 1146] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1128] <... futex resumed>) = ? [pid 1122] <... futex resumed>) = ? [pid 1128] +++ killed by SIGBUS +++ [pid 1146] +++ killed by SIGBUS +++ [pid 1122] +++ killed by SIGBUS +++ [pid 1143] +++ killed by SIGBUS +++ [pid 1113] +++ killed by SIGBUS +++ [pid 1138] mkdir("./file0", 0777) = 0 [pid 1138] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1144] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1117] <... futex resumed>) = ? [pid 1114] <... futex resumed>) = ? [pid 1117] +++ killed by SIGBUS +++ [pid 1144] +++ killed by SIGBUS +++ [pid 1114] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1114, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1113, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./20/binderfs") = 0 [pid 374] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... restart_syscall resumed>) = 0 [pid 1124] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1120] <... futex resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1122, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1124] <... mmap resumed>) = 0x20000000 [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1120] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1124] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1124] write(4, 0x20000f80, 9 [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(3, [pid 1124] <... write resumed>) = 9 [pid 1120] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1124] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1120] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1124] <... futex resumed>) = 0 [pid 1120] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1120] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./21/binderfs") = 0 [pid 375] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./19/binderfs") = 0 [ 27.945195][ T1143] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.960422][ T1146] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 27.970454][ T1144] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1124] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1120] <... futex resumed>) = ? [pid 1138] <... mount resumed>) = 0 [pid 1138] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1138] chdir("./file0") = 0 [pid 1138] ioctl(4, LOOP_CLR_FD [pid 1124] +++ killed by SIGBUS +++ [pid 1120] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1120, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./20/binderfs") = 0 [pid 372] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./21/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./21") = 0 [pid 376] mkdir("./22", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1138] <... ioctl resumed>) = 0 [ 27.996993][ T1124] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1138] close(4 [pid 374] <... umount2 resumed>) = 0 [pid 1138] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./20/file0" [pid 373] <... umount2 resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./20" [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./21", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 1138] <... futex resumed>) = 1 [pid 1134] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... umount2 resumed>) = 0 [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 1134] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1149 [pid 1138] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1138] <... open resumed>) = 4 [pid 376] close(3 [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1138] <... futex resumed>) = 1 [pid 1134] <... futex resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] lstat("./21/file0", [pid 1138] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./19/file0", [pid 372] lstat("./20/file0", [pid 1138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1134] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1138] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1150 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1138] <... write resumed>) = 9 [pid 375] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1138] <... futex resumed>) = 1 [pid 1134] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1138] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1134] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 1138] open("./bus", O_RDWR [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] fstat(4, [pid 373] fstat(4, [pid 372] <... openat resumed>) = 4 [pid 1138] <... open resumed>) = 5 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1138] <... futex resumed>) = 1 [pid 1134] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, [pid 1138] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 1138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1134] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1138] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1134] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(4 [pid 373] close(4 [pid 372] getdents64(4, [pid 1138] <... mmap resumed>) = 0x20000000 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./21/file0" [pid 373] rmdir("./19/file0" [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1138] <... futex resumed>) = 1 [pid 1134] <... futex resumed>) = 0 [pid 1138] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1134] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1134] <... futex resumed>) = 0 [pid 1138] write(4, 0x20000f80, 9 [pid 1134] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 1134] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1149 attached [pid 1138] <... write resumed>) = 9 [pid 1134] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] getdents64(3, [pid 372] close(4 [pid 1138] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1134] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 1138] <... futex resumed>) = 0 [pid 1134] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] close(3 [pid 372] <... close resumed>) = 0 [pid 1138] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1134] <... mprotect resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 1134] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] rmdir("./21" [pid 372] rmdir("./20/file0" [pid 1149] set_robust_list(0x5555569495e0, 24 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1149] <... set_robust_list resumed>) = 0 [pid 1134] <... clone resumed>, parent_tid=[1151], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1151 [pid 375] mkdir("./22", 0777 [pid 373] close(3 [pid 372] <... rmdir resumed>) = 0 [pid 1149] chdir("./21" [pid 1134] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] <... chdir resumed>) = 0 [pid 1134] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] getdents64(3, [pid 1149] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1134] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] rmdir("./19" [pid 375] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1149] <... prctl resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] <... rmdir resumed>) = 0 [pid 372] close(3 [pid 1149] setpgid(0, 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] mkdir("./20", 0777 [pid 372] <... close resumed>) = 0 [pid 1149] <... setpgid resumed>) = 0 [pid 375] close(3 [pid 1149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... close resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 372] rmdir("./20" [pid 1149] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1149] write(3, "1000", 4 [pid 372] <... rmdir resumed>) = 0 [pid 1149] <... write resumed>) = 4 [pid 373] <... openat resumed>) = 3 [pid 372] mkdir("./21", 0777 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1152 [pid 373] ioctl(3, LOOP_CLR_FD [pid 1149] close(3) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... mkdir resumed>) = 0 [pid 1149] symlink("/dev/binderfs", "./binderfs" [pid 373] close(3 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 1150 attached [pid 1149] <... symlink resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1150] set_robust_list(0x5555569495e0, 24 [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... openat resumed>) = 3 ./strace-static-x86_64: Process 1151 attached [pid 1150] <... set_robust_list resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 1151] set_robust_list(0x7f70edcbc9e0, 24 [pid 1150] chdir("./22" [pid 1149] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1153 [pid 1149] <... mprotect resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1149] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] close(3./strace-static-x86_64: Process 1152 attached [pid 1149] <... clone resumed>, parent_tid=[1154], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1154 [pid 372] <... close resumed>) = 0 [pid 1152] set_robust_list(0x5555569495e0, 24 [pid 1150] <... chdir resumed>) = 0 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1152] <... set_robust_list resumed>) = 0 [pid 1151] <... set_robust_list resumed>) = 0 [pid 1150] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1149] <... futex resumed>) = 0 [pid 1152] chdir("./22" [pid 1150] <... prctl resumed>) = 0 [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1152] <... chdir resumed>) = 0 [pid 1152] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1152] setpgid(0, 0) = 0 [pid 1152] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1152] write(3, "1000", 4) = 4 [pid 1152] close(3) = 0 [pid 1152] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1152] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1152] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1156], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1156 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1154 attached [pid 1154] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1154] memfd_create("syzkaller", 0) = 3 [pid 1154] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1156 attached [pid 1156] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1156] memfd_create("syzkaller", 0) = 3 [pid 1156] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1150] setpgid(0, 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1155 [pid 1150] <... setpgid resumed>) = 0 [pid 1150] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1150] write(3, "1000", 4) = 4 [pid 1150] close(3./strace-static-x86_64: Process 1153 attached ) = 0 [pid 1150] symlink("/dev/binderfs", "./binderfs" [pid 1153] set_robust_list(0x5555569495e0, 24 [pid 1150] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 1155 attached [pid 1153] <... set_robust_list resumed>) = 0 [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] chdir("./20" [pid 1150] <... futex resumed>) = 0 [pid 1155] set_robust_list(0x5555569495e0, 24 [pid 1153] <... chdir resumed>) = 0 [pid 1150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1155] <... set_robust_list resumed>) = 0 [pid 1153] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1150] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1155] chdir("./21" [pid 1153] <... prctl resumed>) = 0 [pid 1150] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1155] <... chdir resumed>) = 0 [pid 1153] setpgid(0, 0 [pid 1150] <... mprotect resumed>) = 0 [pid 1155] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1153] <... setpgid resumed>) = 0 [pid 1155] <... prctl resumed>) = 0 [pid 1153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1150] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1155] setpgid(0, 0 [pid 1153] <... openat resumed>) = 3 [pid 1150] <... clone resumed>, parent_tid=[1157], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1157 [pid 1155] <... setpgid resumed>) = 0 [pid 1153] write(3, "1000", 4 [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] <... write resumed>) = 4 [pid 1150] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1154] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1153] close(3 [pid 1155] <... openat resumed>) = 3 [pid 1153] <... close resumed>) = 0 [pid 1151] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1155] write(3, "1000", 4 [pid 1153] symlink("/dev/binderfs", "./binderfs" [pid 1138] <... futex resumed>) = ? [pid 1134] <... futex resumed>) = ? [pid 1155] <... write resumed>) = 4 [pid 1153] <... symlink resumed>) = 0 [pid 1155] close(3 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1138] +++ killed by SIGBUS +++ [pid 1155] <... close resumed>) = 0 [pid 1153] <... futex resumed>) = 0 [pid 1155] symlink("/dev/binderfs", "./binderfs" [pid 1153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1155] <... symlink resumed>) = 0 [pid 1153] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1151] +++ killed by SIGBUS +++ [pid 1134] +++ killed by SIGBUS +++ [pid 1155] <... futex resumed>) = 0 [pid 1153] <... mprotect resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1134, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- ./strace-static-x86_64: Process 1157 attached [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1153] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1158 attached [pid 1157] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1155] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1158] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1157] <... set_robust_list resumed>) = 0 [pid 1155] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1153] <... clone resumed>, parent_tid=[1158], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1158 [pid 377] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1155] <... mprotect resumed>) = 0 [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1158] <... set_robust_list resumed>) = 0 [pid 1157] memfd_create("syzkaller", 0 [pid 1156] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1155] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1153] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1158] memfd_create("syzkaller", 0 [pid 1157] <... memfd_create resumed>) = 3 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 1155] <... clone resumed>, parent_tid=[1159], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1159 [pid 377] fstat(3, [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1158] <... memfd_create resumed>) = 3 [pid 1157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1156] <... write resumed>) = 1048576 [pid 1155] <... futex resumed>) = 0 [pid 1154] <... write resumed>) = 1048576 [pid 377] getdents64(3, [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1154] munmap(0x7f70edbbd000, 1048576 [pid 377] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1158] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1157] <... mmap resumed>) = 0x7f70edbbd000 [pid 1154] <... munmap resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1154] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 377] lstat("./21/binderfs", [pid 1154] <... openat resumed>) = 4 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1154] ioctl(4, LOOP_SET_FD, 3 [pid 377] unlink("./21/binderfs" [pid 1158] <... mmap resumed>) = 0x7f70edbbd000 [pid 377] <... unlink resumed>) = 0 [pid 377] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1159 attached [pid 1159] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1159] memfd_create("syzkaller", 0) = 3 [pid 1159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1156] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1156] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1154] <... ioctl resumed>) = 0 [pid 1154] close(3) = 0 [pid 1154] mkdir("./file0", 0777) = 0 [pid 1154] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1158] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1159] <... write resumed>) = 1048576 [pid 1159] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1159] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1158] <... write resumed>) = 1048576 [pid 1157] <... write resumed>) = 1048576 [pid 1157] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1157] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1158] munmap(0x7f70edbbd000, 1048576) = 0 [ 28.197385][ T1151] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1158] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1156] <... openat resumed>) = 4 [pid 1156] ioctl(4, LOOP_SET_FD, 3 [pid 1159] <... openat resumed>) = 4 [pid 1158] <... openat resumed>) = 4 [pid 1157] <... openat resumed>) = 4 [pid 1156] <... ioctl resumed>) = 0 [pid 1156] close(3) = 0 [pid 1156] mkdir("./file0", 0777) = 0 [pid 1156] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1159] ioctl(4, LOOP_SET_FD, 3 [pid 1157] ioctl(4, LOOP_SET_FD, 3 [pid 1158] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 1159] <... ioctl resumed>) = 0 [pid 377] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./21/file0", [pid 1159] close(3 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1159] <... close resumed>) = 0 [pid 377] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1159] mkdir("./file0", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1159] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1159] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... openat resumed>) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 1159] <... mount resumed>) = 0 [pid 377] close(4 [pid 1159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... close resumed>) = 0 [pid 1159] <... openat resumed>) = 3 [pid 377] rmdir("./21/file0" [pid 1159] chdir("./file0" [pid 377] <... rmdir resumed>) = 0 [pid 1159] <... chdir resumed>) = 0 [pid 377] getdents64(3, [pid 1159] ioctl(4, LOOP_CLR_FD [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 1157] <... ioctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./21" [pid 1157] close(3) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 1157] mkdir("./file0", 0777 [pid 377] mkdir("./22", 0777 [pid 1157] <... mkdir resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1157] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1159] <... ioctl resumed>) = 0 [pid 1158] <... ioctl resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 1159] close(4 [pid 1158] close(3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 1159] <... close resumed>) = 0 [pid 1158] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1158] mkdir("./file0", 0777 [pid 377] close(3 [pid 1158] <... mkdir resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 1158] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1167 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1159] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1159] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1159] <... open resumed>) = 4 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1159] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... mount resumed>) = 0 [pid 1155] <... futex resumed>) = 0 [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1167 attached [pid 1159] <... write resumed>) = 9 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1167] set_robust_list(0x5555569495e0, 24) = 0 [pid 1167] chdir("./22") = 0 [pid 1167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1167] setpgid(0, 0) = 0 [pid 1167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1167] write(3, "1000", 4) = 4 [pid 1167] close(3) = 0 [pid 1167] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1167] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1159] <... futex resumed>) = 1 [pid 1155] <... futex resumed>) = 0 [pid 1158] <... mount resumed>) = 0 [pid 1157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1156] <... mount resumed>) = 0 [pid 1154] <... mount resumed>) = 0 [pid 1159] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1158] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1157] <... openat resumed>) = 3 [pid 1156] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1158] <... openat resumed>) = 3 [pid 1156] <... openat resumed>) = 3 [pid 1154] <... openat resumed>) = 3 [pid 1158] chdir("./file0" [pid 1156] chdir("./file0" [pid 1154] chdir("./file0" [pid 1158] <... chdir resumed>) = 0 [pid 1156] <... chdir resumed>) = 0 [pid 1154] <... chdir resumed>) = 0 [pid 1158] ioctl(4, LOOP_CLR_FD [pid 1156] ioctl(4, LOOP_CLR_FD [pid 1154] ioctl(4, LOOP_CLR_FD [pid 1158] <... ioctl resumed>) = 0 [pid 1156] <... ioctl resumed>) = 0 [pid 1154] <... ioctl resumed>) = 0 [pid 1158] close(4 [pid 1156] close(4 [pid 1154] close(4 [pid 1167] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1158] <... close resumed>) = 0 [pid 1157] chdir("./file0" [pid 1156] <... close resumed>) = 0 [pid 1155] <... futex resumed>) = 0 [pid 1154] <... close resumed>) = 0 [pid 1159] open("./bus", O_RDWR [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... chdir resumed>) = 0 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... open resumed>) = 5 [pid 1158] <... futex resumed>) = 1 [pid 1157] ioctl(4, LOOP_CLR_FD [pid 1156] <... futex resumed>) = 1 [pid 1154] <... futex resumed>) = 1 [pid 1153] <... futex resumed>) = 0 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1167] <... clone resumed>, parent_tid=[1176], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1176 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1157] <... ioctl resumed>) = 0 [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1176 attached [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = 1 [pid 1158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1157] close(4 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... futex resumed>) = 0 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] <... futex resumed>) = 0 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1167] <... futex resumed>) = 0 [pid 1159] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1158] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1157] <... close resumed>) = 0 [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1159] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1157] <... futex resumed>) = 1 [pid 1155] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1150] <... futex resumed>) = 0 [pid 1159] <... mmap resumed>) = 0x20000000 [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1150] <... futex resumed>) = 0 [pid 1159] <... futex resumed>) = 1 [pid 1157] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1155] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1159] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1157] <... open resumed>) = 4 [pid 1155] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... futex resumed>) = 0 [pid 1159] write(4, 0x20000f80, 9 [pid 1157] <... futex resumed>) = 1 [pid 1155] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] <... futex resumed>) = 0 [pid 1159] <... write resumed>) = 9 [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1155] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1159] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1156] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1155] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1154] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1150] <... futex resumed>) = 0 [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1159] <... futex resumed>) = 0 [pid 1157] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1155] <... mmap resumed>) = 0x7f70edc9c000 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1159] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1157] <... write resumed>) = 9 [pid 1156] <... open resumed>) = 4 [pid 1155] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1158] <... open resumed>) = 4 [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] <... mprotect resumed>) = 0 [pid 1154] <... open resumed>) = 4 [pid 1157] <... futex resumed>) = 1 [pid 1155] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1150] <... futex resumed>) = 0 [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1155] <... clone resumed>, parent_tid=[1177], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1177 [pid 1150] <... futex resumed>) = 0 [pid 1157] open("./bus", O_RDWR [pid 1155] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... open resumed>) = 5 [pid 1155] <... futex resumed>) = 0 [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1155] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... futex resumed>) = 1 [pid 1150] <... futex resumed>) = 0 [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] <... futex resumed>) = 1 [pid 1156] <... futex resumed>) = 1 [pid 1152] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = 1 [pid 1157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] <... futex resumed>) = 0 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1157] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1157] <... mmap resumed>) = 0x20000000 [pid 1156] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1154] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1158] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1157] <... futex resumed>) = 1 [pid 1150] <... futex resumed>) = 0 [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1150] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1154] <... write resumed>) = 9 [pid 1150] <... futex resumed>) = 0 [pid 1156] <... write resumed>) = 9 [pid 1158] <... write resumed>) = 9 [pid 1157] write(4, 0x20000f80, 9 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1157] <... write resumed>) = 9 [pid 1156] <... futex resumed>) = 1 [pid 1154] <... futex resumed>) = 1 [pid 1152] <... futex resumed>) = 0 [pid 1150] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = 1 [pid 1157] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1157] <... futex resumed>) = 0 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1150] <... mmap resumed>) = 0x7f70edc9c000 [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1157] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] open("./bus", O_RDWR [pid 1154] open("./bus", O_RDWR [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1150] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1158] open("./bus", O_RDWR [pid 1156] <... open resumed>) = 5 [pid 1154] <... open resumed>) = 5 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1150] <... mprotect resumed>) = 0 [pid 1158] <... open resumed>) = 5 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1150] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... futex resumed>) = 1 [pid 1154] <... futex resumed>) = 1 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1178 attached ./strace-static-x86_64: Process 1177 attached [pid 1176] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1158] <... futex resumed>) = 1 [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1176] <... set_robust_list resumed>) = 0 [pid 1154] <... mmap resumed>) = 0x20000000 [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1150] <... clone resumed>, parent_tid=[1178], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1178 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1158] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1156] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1149] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1158] <... mmap resumed>) = 0x20000000 [pid 1153] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1176] memfd_create("syzkaller", 0 [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1156] <... mmap resumed>) = 0x20000000 [pid 1154] <... futex resumed>) = 0 [pid 1150] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1158] <... futex resumed>) = 1 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] <... futex resumed>) = 0 [pid 1149] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1156] <... futex resumed>) = 1 [pid 1154] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1158] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1154] write(4, 0x20000f80, 9 [pid 1153] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1158] write(4, 0x20000f80, 9 [pid 1156] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1153] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... futex resumed>) = 0 [pid 1152] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1149] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1153] <... futex resumed>) = 0 [pid 1156] write(4, 0x20000f80, 9 [pid 1154] <... write resumed>) = 9 [pid 1153] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1152] <... futex resumed>) = 0 [pid 1149] <... mmap resumed>) = 0x7f70edc9c000 [pid 1152] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1153] <... mmap resumed>) = 0x7f70edc9c000 [pid 1149] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1154] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1153] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1152] <... mmap resumed>) = 0x7f70edc9c000 [pid 1149] <... mprotect resumed>) = 0 [pid 1156] <... write resumed>) = 9 [pid 1158] <... write resumed>) = 9 [pid 1156] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1154] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] <... mprotect resumed>) = 0 [pid 1152] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1149] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1176] <... memfd_create resumed>) = 3 [pid 1150] <... futex resumed>) = 0 [pid 1177] set_robust_list(0x7f70edcbc9e0, 24 [pid 1176] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1150] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1179 attached [pid 1177] <... set_robust_list resumed>) = 0 [pid 1176] <... mmap resumed>) = 0x7f70edbbd000 [pid 1153] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1152] <... mprotect resumed>) = 0 [pid 1156] <... futex resumed>) = 0 [pid 1158] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1176] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1178] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1180 attached [pid 1179] set_robust_list(0x7f70edcbc9e0, 24 [pid 1177] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1176] <... write resumed>) = 1048576 [pid 1158] <... futex resumed>) = 0 [pid 1156] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1152] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1149] <... clone resumed>, parent_tid=[1179], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1179 [pid 1180] set_robust_list(0x7f70edcbc9e0, 24 [pid 1179] <... set_robust_list resumed>) = 0 [pid 1158] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] <... clone resumed>, parent_tid=[1180], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1180 [pid 1149] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1181 attached [pid 1180] <... set_robust_list resumed>) = 0 [pid 1178] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1176] munmap(0x7f70edbbd000, 1048576 [pid 1159] <... futex resumed>) = ? [pid 1155] <... futex resumed>) = ? [pid 1176] <... munmap resumed>) = 0 [pid 1159] +++ killed by SIGBUS +++ [pid 1157] <... futex resumed>) = ? [pid 1150] <... futex resumed>) = ? [pid 1177] +++ killed by SIGBUS +++ [pid 1176] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1157] +++ killed by SIGBUS +++ [pid 1155] +++ killed by SIGBUS +++ [pid 1178] +++ killed by SIGBUS +++ [pid 1176] <... openat resumed>) = 4 [pid 1150] +++ killed by SIGBUS +++ [pid 1176] ioctl(4, LOOP_SET_FD, 3 [pid 1181] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1181] futex(0x7f70f60b67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1153] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1153] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1152] <... clone resumed>, parent_tid=[1181], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1181 [pid 1152] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1152] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1181] <... futex resumed>) = 0 [ 28.315043][ T1177] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.323077][ T1178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.339265][ T1179] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1149] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1150, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1176] <... ioctl resumed>) = 0 [pid 1176] close(3) = 0 [pid 1176] mkdir("./file0", 0777) = 0 [pid 1176] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1149] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1155, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1181] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1152] <... futex resumed>) = ? [pid 1179] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1180] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1158] <... futex resumed>) = ? [pid 1153] <... futex resumed>) = ? [pid 1158] +++ killed by SIGBUS +++ [pid 1154] <... futex resumed>) = ? [pid 1156] <... futex resumed>) = ? [pid 372] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1181] +++ killed by SIGBUS +++ [pid 1180] +++ killed by SIGBUS +++ [pid 1156] +++ killed by SIGBUS +++ [pid 1153] +++ killed by SIGBUS +++ [pid 1152] +++ killed by SIGBUS +++ [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1149] <... futex resumed>) = ? [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1152, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1153, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1154] +++ killed by SIGBUS +++ [pid 1179] +++ killed by SIGBUS +++ [pid 1149] +++ killed by SIGBUS +++ [pid 376] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, [pid 376] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1149, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 373] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] getdents64(3, [pid 376] fstat(3, [pid 373] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(3, [pid 372] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] getdents64(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] <... restart_syscall resumed>) = 0 [pid 373] getdents64(3, [pid 372] lstat("./21/binderfs", [pid 376] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] unlink("./21/binderfs" [pid 376] lstat("./22/binderfs", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... unlink resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./20/binderfs", [pid 372] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] unlink("./22/binderfs" [pid 375] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] <... unlink resumed>) = 0 [pid 375] fstat(3, [pid 374] <... openat resumed>) = 3 [pid 373] unlink("./20/binderfs" [pid 376] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(3, [pid 373] <... unlink resumed>) = 0 [pid 375] getdents64(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] getdents64(3, [pid 375] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] lstat("./22/binderfs", [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] lstat("./21/binderfs", [pid 375] unlink("./22/binderfs" [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] <... unlink resumed>) = 0 [pid 374] unlink("./21/binderfs" [pid 375] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 1176] <... mount resumed>) = 0 [pid 1176] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 374] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1176] <... openat resumed>) = 3 [pid 1176] chdir("./file0") = 0 [pid 1176] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./21/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./21") = 0 [pid 372] mkdir("./22", 0777) = 0 [ 28.351231][ T1181] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.359908][ T1180] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1176] <... ioctl resumed>) = 0 [pid 1176] close(4) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] ioctl(3, LOOP_CLR_FD [pid 1176] <... futex resumed>) = 1 [pid 1167] <... futex resumed>) = 0 [pid 376] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1167] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] close(3 [pid 1176] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./20/file0", [pid 376] lstat("./22/file0", [pid 372] <... close resumed>) = 0 [pid 375] lstat("./22/file0", [pid 1176] <... open resumed>) = 4 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1176] <... futex resumed>) = 1 [pid 1167] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] lstat("./21/file0", [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1185 ./strace-static-x86_64: Process 1185 attached [pid 1176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1167] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1185] set_robust_list(0x5555569495e0, 24 [pid 1176] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1176] <... write resumed>) = 9 [pid 376] <... openat resumed>) = 4 [pid 375] fstat(4, [pid 374] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 4 [pid 1185] <... set_robust_list resumed>) = 0 [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... openat resumed>) = 4 [pid 373] fstat(4, [pid 1176] <... futex resumed>) = 1 [pid 1167] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 374] fstat(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 1176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1167] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 374] getdents64(4, [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1176] open("./bus", O_RDWR [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1176] <... open resumed>) = 5 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4 [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 1185] chdir("./22" [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 375] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1185] <... chdir resumed>) = 0 [pid 1176] <... futex resumed>) = 1 [pid 1167] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 375] rmdir("./22/file0" [pid 374] close(4 [pid 373] close(4 [pid 1185] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./22/file0" [pid 375] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 1176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1167] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 373] <... close resumed>) = 0 [pid 1185] <... prctl resumed>) = 0 [pid 1176] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1167] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... rmdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] rmdir("./21/file0" [pid 373] rmdir("./20/file0" [pid 1185] setpgid(0, 0 [pid 1176] <... mmap resumed>) = 0x20000000 [pid 376] getdents64(3, [pid 375] close(3 [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1176] <... futex resumed>) = 1 [pid 1167] <... futex resumed>) = 0 [pid 375] rmdir("./22" [pid 1185] <... setpgid resumed>) = 0 [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 373] <... rmdir resumed>) = 0 [pid 1185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1176] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1167] <... futex resumed>) = 0 [pid 376] close(3 [pid 375] mkdir("./23", 0777 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] getdents64(3, [pid 1185] <... openat resumed>) = 3 [pid 1176] write(4, 0x20000f80, 9 [pid 1167] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 374] close(3 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1185] write(3, "1000", 4 [pid 1176] <... write resumed>) = 9 [pid 1167] <... futex resumed>) = 0 [pid 376] rmdir("./22" [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... close resumed>) = 0 [pid 373] close(3 [pid 1176] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1167] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 374] rmdir("./21" [pid 1185] <... write resumed>) = 4 [pid 1176] <... futex resumed>) = 0 [pid 1167] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] mkdir("./23", 0777 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] <... close resumed>) = 0 [pid 1176] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1167] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... rmdir resumed>) = 0 [pid 1167] <... mprotect resumed>) = 0 [pid 375] close(3 [pid 1167] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... mkdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] rmdir("./20" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1167] <... clone resumed>, parent_tid=[1186], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1186 [pid 1167] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1187 [pid 1167] <... futex resumed>) = 0 [pid 1167] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1187 attached [pid 1187] set_robust_list(0x5555569495e0, 24) = 0 [pid 1187] chdir("./23") = 0 [pid 1187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1187] setpgid(0, 0) = 0 [pid 1187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1187] write(3, "1000", 4) = 4 [pid 1187] close(3) = 0 [pid 1187] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1187] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1187] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1188], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1188 [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1186 attached [pid 1186] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1188 attached [pid 1185] close(3 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] mkdir("./22", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 1185] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] <... mkdir resumed>) = 0 [pid 373] mkdir("./21", 0777 [pid 1185] symlink("/dev/binderfs", "./binderfs" [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] <... mkdir resumed>) = 0 [pid 1185] <... symlink resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] <... openat resumed>) = 3 [pid 1185] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1186] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] ioctl(3, LOOP_CLR_FD [pid 1188] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] close(3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1188] <... set_robust_list resumed>) = 0 [pid 1185] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1176] <... futex resumed>) = ? [pid 1167] <... futex resumed>) = ? [pid 373] close(3 [pid 1185] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1189 [pid 374] <... close resumed>) = 0 [pid 1185] <... mprotect resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1185] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1188] memfd_create("syzkaller", 0 [pid 1185] <... clone resumed>, parent_tid=[1191], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1191 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1190 [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1192 [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1176] +++ killed by SIGBUS +++ [pid 1188] <... memfd_create resumed>) = 3 [pid 1188] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1186] +++ killed by SIGBUS +++ [pid 1167] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1167, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 1190 attached ./strace-static-x86_64: Process 1191 attached ./strace-static-x86_64: Process 1189 attached [pid 377] lstat("./22/binderfs", ./strace-static-x86_64: Process 1192 attached [pid 1191] set_robust_list(0x7f70f5fdd9e0, 24 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1192] set_robust_list(0x5555569495e0, 24 [pid 1191] <... set_robust_list resumed>) = 0 [pid 1190] set_robust_list(0x5555569495e0, 24 [pid 1189] set_robust_list(0x5555569495e0, 24 [pid 377] unlink("./22/binderfs" [pid 1192] <... set_robust_list resumed>) = 0 [pid 1191] memfd_create("syzkaller", 0 [pid 1190] <... set_robust_list resumed>) = 0 [pid 1189] <... set_robust_list resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 1191] <... memfd_create resumed>) = 3 [pid 1190] chdir("./22" [pid 377] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1192] chdir("./21" [pid 1191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1190] <... chdir resumed>) = 0 [pid 1189] chdir("./23" [pid 1192] <... chdir resumed>) = 0 [pid 1191] <... mmap resumed>) = 0x7f70edbbd000 [pid 1190] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1189] <... chdir resumed>) = 0 [pid 1192] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1188] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1192] <... prctl resumed>) = 0 [pid 1191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1190] <... prctl resumed>) = 0 [pid 1189] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1188] munmap(0x7f70edbbd000, 1048576 [pid 1190] setpgid(0, 0) = 0 [pid 1190] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1190] write(3, "1000", 4) = 4 [pid 1189] <... prctl resumed>) = 0 [pid 1190] close(3) = 0 [pid 1189] setpgid(0, 0 [pid 1190] symlink("/dev/binderfs", "./binderfs" [pid 1192] setpgid(0, 0 [pid 1190] <... symlink resumed>) = 0 [pid 1189] <... setpgid resumed>) = 0 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1189] <... openat resumed>) = 3 [pid 1190] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1189] write(3, "1000", 4 [pid 1192] <... setpgid resumed>) = 0 [pid 1190] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1189] <... write resumed>) = 4 [pid 1190] <... mprotect resumed>) = 0 [pid 1189] close(3 [pid 1192] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1190] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1189] <... close resumed>) = 0 [pid 1190] <... clone resumed>, parent_tid=[1193], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1193 [pid 1189] symlink("/dev/binderfs", "./binderfs" [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1192] <... openat resumed>) = 3 [pid 1190] <... futex resumed>) = 0 [pid 1189] <... symlink resumed>) = 0 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1189] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1192] write(3, "1000", 4) = 4 [pid 1189] <... clone resumed>, parent_tid=[1194], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1194 [pid 1192] close(3 [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1192] <... close resumed>) = 0 [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1194 attached [pid 1194] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1192] symlink("/dev/binderfs", "./binderfs" [pid 1194] memfd_create("syzkaller", 0) = 3 [pid 1194] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1192] <... symlink resumed>) = 0 [pid 1194] <... mmap resumed>) = 0x7f70edbbd000 [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1192] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1192] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1195], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1195 [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1188] <... munmap resumed>) = 0 [pid 1188] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1191] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1195 attached ./strace-static-x86_64: Process 1193 attached [pid 1191] munmap(0x7f70edbbd000, 1048576 [pid 1195] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1193] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1191] <... munmap resumed>) = 0 [pid 1193] <... set_robust_list resumed>) = 0 [pid 1195] <... set_robust_list resumed>) = 0 [pid 1191] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1193] memfd_create("syzkaller", 0) = 3 [pid 1193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1195] memfd_create("syzkaller", 0 [pid 1193] <... mmap resumed>) = 0x7f70edbbd000 [pid 1194] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1195] <... memfd_create resumed>) = 3 [pid 1195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1194] <... write resumed>) = 1048576 [pid 1194] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1194] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [ 28.629208][ T1186] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1195] <... write resumed>) = 1048576 [pid 1195] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1195] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1193] <... write resumed>) = 1048576 [pid 1193] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1193] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1193] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1191] <... openat resumed>) = 4 [pid 1188] <... openat resumed>) = 4 [pid 1195] <... openat resumed>) = 4 [pid 1194] <... openat resumed>) = 4 [pid 1191] ioctl(4, LOOP_SET_FD, 3 [pid 1188] ioctl(4, LOOP_SET_FD, 3 [pid 1194] ioctl(4, LOOP_SET_FD, 3 [pid 1195] ioctl(4, LOOP_SET_FD, 3 [pid 377] lstat("./22/file0", [pid 1193] <... ioctl resumed>) = 0 [pid 1191] <... ioctl resumed>) = 0 [pid 1193] close(3 [pid 1191] close(3 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1194] <... ioctl resumed>) = 0 [pid 1193] <... close resumed>) = 0 [pid 1191] <... close resumed>) = 0 [pid 377] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1194] close(3) = 0 [pid 1193] mkdir("./file0", 0777 [pid 1191] mkdir("./file0", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1194] mkdir("./file0", 0777 [pid 1188] <... ioctl resumed>) = 0 [pid 1194] <... mkdir resumed>) = 0 [pid 1193] <... mkdir resumed>) = 0 [pid 1188] close(3 [pid 1194] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1188] <... close resumed>) = 0 [pid 1191] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1188] mkdir("./file0", 0777 [pid 377] <... openat resumed>) = 4 [pid 1193] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1191] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1188] <... mkdir resumed>) = 0 [pid 377] fstat(4, [pid 1195] <... ioctl resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 1195] close(3 [pid 1188] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1195] <... close resumed>) = 0 [pid 377] close(4) = 0 [pid 1195] mkdir("./file0", 0777 [pid 377] rmdir("./22/file0") = 0 [pid 1195] <... mkdir resumed>) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1195] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] close(3) = 0 [pid 377] rmdir("./22") = 0 [pid 377] mkdir("./23", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1203 ./strace-static-x86_64: Process 1203 attached [pid 1203] set_robust_list(0x5555569495e0, 24) = 0 [pid 1203] chdir("./23") = 0 [pid 1203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1203] setpgid(0, 0 [pid 1193] <... mount resumed>) = 0 [pid 1203] <... setpgid resumed>) = 0 [pid 1203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1191] <... mount resumed>) = 0 [pid 1203] <... openat resumed>) = 3 [pid 1193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1203] write(3, "1000", 4) = 4 [pid 1203] close(3) = 0 [pid 1203] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1191] <... openat resumed>) = 3 [pid 1193] <... openat resumed>) = 3 [pid 1191] chdir("./file0" [pid 1193] chdir("./file0" [pid 1203] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1191] <... chdir resumed>) = 0 [pid 1193] <... chdir resumed>) = 0 [pid 1193] ioctl(4, LOOP_CLR_FD [pid 1191] ioctl(4, LOOP_CLR_FD [pid 1193] <... ioctl resumed>) = 0 [pid 1193] close(4 [pid 1191] <... ioctl resumed>) = 0 [pid 1193] <... close resumed>) = 0 [pid 1203] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1203] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1208], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1208 [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] close(4./strace-static-x86_64: Process 1208 attached [pid 1208] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1208] memfd_create("syzkaller", 0) = 3 [pid 1208] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1191] <... close resumed>) = 0 [pid 1193] <... futex resumed>) = 1 [pid 1190] <... futex resumed>) = 0 [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1185] <... futex resumed>) = 0 [pid 1193] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1191] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1191] <... open resumed>) = 4 [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... open resumed>) = 4 [pid 1191] <... futex resumed>) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 1 [pid 1191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] <... futex resumed>) = 0 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1191] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] <... futex resumed>) = 0 [pid 1193] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1191] <... write resumed>) = 9 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... write resumed>) = 9 [pid 1191] <... futex resumed>) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 1 [pid 1191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] <... futex resumed>) = 0 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1191] open("./bus", O_RDWR [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1191] <... open resumed>) = 5 [pid 1190] <... futex resumed>) = 0 [pid 1193] open("./bus", O_RDWR [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... open resumed>) = 5 [pid 1191] <... futex resumed>) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] <... futex resumed>) = 1 [pid 1191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] <... futex resumed>) = 0 [pid 1185] <... futex resumed>) = 0 [pid 1193] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1191] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1191] <... mmap resumed>) = 0x20000000 [pid 1190] <... futex resumed>) = 0 [pid 1193] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1190] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1193] <... mmap resumed>) = 0x20000000 [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] <... futex resumed>) = 1 [pid 1185] <... futex resumed>) = 0 [pid 1193] <... futex resumed>) = 1 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1190] <... futex resumed>) = 0 [pid 1185] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1191] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1190] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1193] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1191] write(4, 0x20000f80, 9 [pid 1190] <... futex resumed>) = 0 [pid 1185] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1193] write(4, 0x20000f80, 9 [pid 1190] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... futex resumed>) = 0 [pid 1190] <... futex resumed>) = 0 [pid 1190] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1185] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1190] <... mmap resumed>) = 0x7f70edc9c000 [pid 1185] <... mmap resumed>) = 0x7f70edc9c000 [pid 1190] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1185] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1190] <... mprotect resumed>) = 0 [pid 1185] <... mprotect resumed>) = 0 [pid 1190] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1185] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1190] <... clone resumed>, parent_tid=[1213], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1213 [pid 1190] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] <... clone resumed>, parent_tid=[1214], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1214 [pid 1190] <... futex resumed>) = 0 [pid 1185] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1191] <... write resumed>) = 9 [pid 1190] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1185] <... futex resumed>) = 0 [pid 1191] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1185] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1191] <... futex resumed>) = 0 [pid 1191] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1193] <... write resumed>) = 9 [pid 1193] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1193] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1194] <... mount resumed>) = 0 [pid 1194] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1194] chdir("./file0") = 0 [pid 1194] ioctl(4, LOOP_CLR_FD) = 0 [pid 1194] close(4) = 0 [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1194] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] <... open resumed>) = 4 [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1194] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] <... write resumed>) = 9 [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1194] open("./bus", O_RDWR [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1194] <... open resumed>) = 5 [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1208] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1214 attached ./strace-static-x86_64: Process 1213 attached [pid 1195] <... mount resumed>) = 0 [pid 1194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1188] <... mount resumed>) = 0 [pid 1214] set_robust_list(0x7f70edcbc9e0, 24 [pid 1213] set_robust_list(0x7f70edcbc9e0, 24 [pid 1195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1194] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1189] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1214] <... set_robust_list resumed>) = 0 [pid 1213] <... set_robust_list resumed>) = 0 [pid 1195] <... openat resumed>) = 3 [pid 1194] <... mmap resumed>) = 0x20000000 [pid 1195] chdir("./file0" [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] <... openat resumed>) = 3 [pid 1195] <... chdir resumed>) = 0 [pid 1194] <... futex resumed>) = 1 [pid 1189] <... futex resumed>) = 0 [pid 1195] ioctl(4, LOOP_CLR_FD [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... ioctl resumed>) = 0 [pid 1194] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1189] <... futex resumed>) = 0 [pid 1195] close(4 [pid 1194] write(4, 0x20000f80, 9 [pid 1189] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... close resumed>) = 0 [pid 1194] <... write resumed>) = 9 [pid 1189] <... futex resumed>) = 0 [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1194] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1189] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1195] <... futex resumed>) = 1 [pid 1194] <... futex resumed>) = 0 [pid 1189] <... mmap resumed>) = 0x7f70edc9c000 [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1194] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1189] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1189] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1215], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1215 [pid 1189] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1189] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... write resumed>) = 1048576 [pid 1208] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1208] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 1208] ioctl(4, LOOP_SET_FD, 3 [pid 1192] <... futex resumed>) = 0 [pid 1188] chdir("./file0" [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] <... chdir resumed>) = 0 [pid 1195] <... futex resumed>) = 0 [pid 1192] <... futex resumed>) = 1 [pid 1188] ioctl(4, LOOP_CLR_FD [pid 1195] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1215 attached [pid 1215] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1214] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1213] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1208] <... ioctl resumed>) = 0 [pid 1208] close(3) = 0 [pid 1208] mkdir("./file0", 0777) = 0 [pid 1208] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1215] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1194] <... futex resumed>) = ? [pid 1189] <... futex resumed>) = ? [pid 1190] <... futex resumed>) = ? [pid 1185] <... futex resumed>) = ? [pid 1188] <... ioctl resumed>) = 0 [pid 1188] close(4) = 0 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1187] <... futex resumed>) = 0 [pid 1193] <... futex resumed>) = ? [pid 1191] <... futex resumed>) = ? [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... open resumed>) = 4 [pid 1193] +++ killed by SIGBUS +++ [pid 1191] +++ killed by SIGBUS +++ [pid 1188] <... futex resumed>) = 0 [pid 1187] <... futex resumed>) = 1 [pid 1214] +++ killed by SIGBUS +++ [pid 1213] +++ killed by SIGBUS +++ [pid 1190] +++ killed by SIGBUS +++ [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1185] +++ killed by SIGBUS +++ [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1195] <... futex resumed>) = 1 [pid 1192] <... futex resumed>) = 0 [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1188] <... open resumed>) = 4 [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1192] <... futex resumed>) = 0 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1190, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1185, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1195] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] <... futex resumed>) = 1 [pid 1195] <... write resumed>) = 9 [pid 1187] <... futex resumed>) = 0 [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1195] <... futex resumed>) = 1 [pid 1192] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1187] <... futex resumed>) = 0 [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1192] <... futex resumed>) = 0 [pid 1195] open("./bus", O_RDWR [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... restart_syscall resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 374] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1195] <... open resumed>) = 5 [pid 1188] <... write resumed>) = 9 [pid 374] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(3, [pid 372] fstat(3, [pid 1195] <... futex resumed>) = 1 [pid 1192] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = 1 [pid 1187] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1192] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1187] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1195] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1192] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1188] open("./bus", O_RDWR [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1195] <... mmap resumed>) = 0x20000000 [pid 1188] <... open resumed>) = 5 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] lstat("./22/binderfs", [pid 372] lstat("./22/binderfs", [pid 1195] <... futex resumed>) = 1 [pid 1192] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = 1 [pid 1187] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1192] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] unlink("./22/binderfs" [pid 372] unlink("./22/binderfs" [pid 1195] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1192] <... futex resumed>) = 0 [pid 1188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1187] <... futex resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 1195] write(4, 0x20000f80, 9 [pid 1194] +++ killed by SIGBUS +++ [pid 1192] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1187] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1215] +++ killed by SIGBUS +++ [pid 1195] <... write resumed>) = 9 [pid 1192] <... futex resumed>) = 0 [pid 1189] +++ killed by SIGBUS +++ [pid 1188] <... mmap resumed>) = 0x20000000 [pid 1195] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1192] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1195] <... futex resumed>) = 0 [pid 1192] <... mmap resumed>) = 0x7f70edc9c000 [pid 1188] <... futex resumed>) = 1 [pid 1187] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1189, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 1195] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1192] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1187] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1192] <... mprotect resumed>) = 0 [pid 1188] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1187] <... futex resumed>) = 0 [pid 1192] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1188] write(4, 0x20000f80, 9 [pid 1187] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1188] <... write resumed>) = 9 [pid 1192] <... clone resumed>, parent_tid=[1219], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1219 [pid 1188] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1187] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1192] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1188] <... futex resumed>) = 0 [pid 1187] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1192] <... futex resumed>) = 0 [pid 1188] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1187] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1192] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1187] <... mprotect resumed>) = 0 [pid 1187] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1208] <... mount resumed>) = 0 [pid 1187] <... clone resumed>, parent_tid=[1220], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1220 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1208] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1187] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1208] <... openat resumed>) = 3 [pid 1187] <... futex resumed>) = 0 [pid 1208] chdir("./file0" [pid 1187] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 3 ./strace-static-x86_64: Process 1220 attached ./strace-static-x86_64: Process 1219 attached [pid 1208] <... chdir resumed>) = 0 [pid 376] fstat(3, [pid 1220] set_robust_list(0x7f70edcbc9e0, 24 [pid 1219] set_robust_list(0x7f70edcbc9e0, 24 [pid 1208] ioctl(4, LOOP_CLR_FD [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1220] <... set_robust_list resumed>) = 0 [pid 1219] <... set_robust_list resumed>) = 0 [ 28.746370][ T1214] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.752413][ T1213] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.763388][ T1215] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./23/binderfs") = 0 [pid 376] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1219] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1192] <... futex resumed>) = ? [pid 1195] <... futex resumed>) = ? [pid 1195] +++ killed by SIGBUS +++ [pid 1219] +++ killed by SIGBUS +++ [pid 1192] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1192, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./21/binderfs") = 0 [pid 373] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1220] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1187] <... futex resumed>) = ? [pid 1188] <... futex resumed>) = ? [pid 1188] +++ killed by SIGBUS +++ [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./22/file0" [pid 1220] +++ killed by SIGBUS +++ [pid 1187] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1187, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] <... rmdir resumed>) = 0 [pid 375] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./23/binderfs") = 0 [pid 375] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./22") = 0 [pid 374] mkdir("./23", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1208] <... ioctl resumed>) = 0 [pid 1208] close(4) = 0 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1203] <... futex resumed>) = 0 [pid 1208] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... open resumed>) = 4 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1203] <... futex resumed>) = 0 [pid 1208] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... write resumed>) = 9 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1203] <... futex resumed>) = 0 [pid 1208] open("./bus", O_RDWR [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... open resumed>) = 5 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1203] <... futex resumed>) = 0 [pid 1208] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1203] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1208] <... mmap resumed>) = 0x20000000 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1203] <... futex resumed>) = 0 [pid 1208] write(4, 0x20000f80, 9 [pid 1203] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1208] <... write resumed>) = 9 [pid 1203] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1203] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1208] <... futex resumed>) = 0 [pid 1208] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1203] <... mmap resumed>) = 0x7f70edc9c000 [pid 1203] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1203] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1221], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1221 [pid 1203] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1203] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1221 attached [pid 1221] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 28.815835][ T1219] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.816520][ T1220] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1221] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1208] <... futex resumed>) = ? [pid 1203] <... futex resumed>) = ? [pid 1208] +++ killed by SIGBUS +++ [pid 1221] +++ killed by SIGBUS +++ [pid 1203] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1203, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./23/binderfs") = 0 [ 28.871996][ T1221] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./22/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./22") = 0 [pid 372] mkdir("./23", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1222 ./strace-static-x86_64: Process 1222 attached [pid 1222] set_robust_list(0x5555569495e0, 24) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 1222] chdir("./23") = 0 [pid 1222] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1222] setpgid(0, 0) = 0 [pid 1222] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1222] write(3, "1000", 4) = 4 [pid 1222] close(3) = 0 [pid 1222] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1222] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1222] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1223], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1223 [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1223 attached [pid 1223] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 1223] memfd_create("syzkaller", 0) = 3 [pid 1223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = 0 [pid 1223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] close(3) = 0 [pid 1223] <... write resumed>) = 1048576 [pid 1223] munmap(0x7f70edbbd000, 1048576) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1223] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1224 [pid 377] <... umount2 resumed>) = 0 [pid 376] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./23/file0", [pid 375] lstat("./23/file0", [pid 373] lstat("./21/file0", [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... openat resumed>) = 4 [pid 375] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] fstat(4, [pid 373] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... openat resumed>) = 4 ./strace-static-x86_64: Process 1224 attached [pid 376] getdents64(4, [pid 375] fstat(4, [pid 373] <... openat resumed>) = 4 [pid 1223] <... openat resumed>) = 4 [pid 1224] set_robust_list(0x5555569495e0, 24 [pid 1223] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 376] getdents64(4, [pid 375] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1224] <... set_robust_list resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./23/file0", [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1224] chdir("./23" [pid 373] getdents64(4, [pid 376] close(4 [pid 375] getdents64(4, [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1224] <... chdir resumed>) = 0 [pid 377] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] rmdir("./23/file0" [pid 375] close(4 [pid 373] getdents64(4, [pid 1224] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] close(4 [pid 1224] <... prctl resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] <... rmdir resumed>) = 0 [pid 375] rmdir("./23/file0" [pid 373] <... close resumed>) = 0 [pid 377] fstat(4, [pid 375] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 373] rmdir("./21/file0" [pid 1224] setpgid(0, 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] getdents64(3, [pid 376] close(3 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... close resumed>) = 0 [pid 375] close(3 [pid 373] <... rmdir resumed>) = 0 [pid 376] rmdir("./23" [pid 375] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 1224] <... setpgid resumed>) = 0 [pid 377] getdents64(4, [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... rmdir resumed>) = 0 [pid 375] rmdir("./23" [pid 373] close(3 [pid 1224] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] getdents64(4, [pid 376] mkdir("./24", 0777 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1224] <... openat resumed>) = 3 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] rmdir("./21" [pid 376] <... mkdir resumed>) = 0 [pid 1224] write(3, "1000", 4 [pid 377] close(4 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 375] mkdir("./24", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 1224] <... write resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 373] mkdir("./22", 0777 [pid 1224] close(3 [pid 377] rmdir("./23/file0" [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] <... mkdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] getdents64(3, [pid 1224] <... close resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1224] symlink("/dev/binderfs", "./binderfs" [pid 377] close(3) = 0 [pid 377] rmdir("./23" [pid 1224] <... symlink resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 377] mkdir("./24", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1224] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1224] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1225 attached , parent_tid=[1225], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1225 [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1225] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1225] memfd_create("syzkaller", 0) = 3 [pid 1225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 377] <... openat resumed>) = 3 [pid 376] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] ioctl(3, LOOP_CLR_FD [pid 1223] <... ioctl resumed>) = 0 [pid 1223] close(3 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 1223] <... close resumed>) = 0 [pid 377] close(3 [pid 376] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 1223] mkdir("./file0", 0777 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1223] <... mkdir resumed>) = 0 [pid 1223] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3 [pid 373] close(3 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1227 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1228 ./strace-static-x86_64: Process 1228 attached [pid 1228] set_robust_list(0x5555569495e0, 24) = 0 [pid 1228] chdir("./24") = 0 [pid 1228] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1228] setpgid(0, 0) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1229 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1230 [pid 1228] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1228] write(3, "1000", 4) = 4 [pid 1228] close(3) = 0 [pid 1228] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1228] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1228] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1231], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1231 [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1229 attached [pid 1229] set_robust_list(0x5555569495e0, 24) = 0 [pid 1229] chdir("./24") = 0 [pid 1229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1229] setpgid(0, 0) = 0 [pid 1229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1229] write(3, "1000", 4) = 4 [pid 1229] close(3) = 0 [pid 1229] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1229] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1229] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1232], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1232 [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1232 attached [pid 1232] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1232] memfd_create("syzkaller", 0) = 3 [pid 1232] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1227 attached ./strace-static-x86_64: Process 1230 attached [pid 1227] set_robust_list(0x5555569495e0, 24 [pid 1230] set_robust_list(0x5555569495e0, 24 [pid 1227] <... set_robust_list resumed>) = 0 [pid 1232] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1230] <... set_robust_list resumed>) = 0 [pid 1230] chdir("./22") = 0 [pid 1230] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1227] chdir("./24" [pid 1230] <... prctl resumed>) = 0 [pid 1230] setpgid(0, 0 [pid 1227] <... chdir resumed>) = 0 [pid 1230] <... setpgid resumed>) = 0 [pid 1227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1227] setpgid(0, 0 [pid 1223] <... mount resumed>) = 0 [pid 1223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1223] chdir("./file0") = 0 [pid 1223] ioctl(4, LOOP_CLR_FD) = 0 [pid 1223] close(4) = 0 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1222] <... futex resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1222] <... futex resumed>) = 0 [pid 1223] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1223] <... open resumed>) = 4 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1222] <... futex resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1222] <... futex resumed>) = 0 [pid 1223] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1223] <... write resumed>) = 9 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1222] <... futex resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1222] <... futex resumed>) = 0 [pid 1223] open("./bus", O_RDWR [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1223] <... open resumed>) = 5 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1222] <... futex resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1222] <... futex resumed>) = 0 [pid 1223] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1222] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1223] <... mmap resumed>) = 0x20000000 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1222] <... futex resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1223] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1222] <... futex resumed>) = 0 [pid 1223] write(4, 0x20000f80, 9 [pid 1222] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1222] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1223] <... write resumed>) = 9 [pid 1222] <... mmap resumed>) = 0x7f70edc9c000 [pid 1223] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1222] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1223] <... futex resumed>) = 0 [pid 1222] <... mprotect resumed>) = 0 [pid 1223] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1222] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1235], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1235 [pid 1222] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1222] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1227] <... setpgid resumed>) = 0 [pid 1232] <... write resumed>) = 1048576 [pid 1232] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1232] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1232] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1235 attached [pid 1235] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1231 attached [pid 1230] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1225] <... write resumed>) = 1048576 [pid 1230] <... openat resumed>) = 3 [pid 1227] <... openat resumed>) = 3 [pid 1230] write(3, "1000", 4) = 4 [pid 1227] write(3, "1000", 4 [pid 1230] close(3 [pid 1227] <... write resumed>) = 4 [pid 1230] <... close resumed>) = 0 [pid 1227] close(3) = 0 [pid 1230] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1227] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] <... futex resumed>) = 0 [pid 1227] <... futex resumed>) = 0 [pid 1230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1230] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1227] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1230] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1227] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1230] <... mprotect resumed>) = 0 [pid 1227] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1230] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1237], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1237 [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1227] <... clone resumed>, parent_tid=[1238], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1238 [pid 1230] <... futex resumed>) = 0 [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1227] <... futex resumed>) = 0 [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1231] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1231] memfd_create("syzkaller", 0) = 3 [pid 1231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1225] munmap(0x7f70edbbd000, 1048576./strace-static-x86_64: Process 1238 attached ./strace-static-x86_64: Process 1237 attached [pid 1235] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1232] <... ioctl resumed>) = 0 [pid 1231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1225] <... munmap resumed>) = 0 [pid 1238] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1237] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1232] close(3 [pid 1231] <... write resumed>) = 1048576 [pid 1225] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1223] <... futex resumed>) = ? [pid 1222] <... futex resumed>) = ? [pid 1238] <... set_robust_list resumed>) = 0 [pid 1237] <... set_robust_list resumed>) = 0 [pid 1232] <... close resumed>) = 0 [pid 1225] <... openat resumed>) = 4 [pid 1238] memfd_create("syzkaller", 0 [pid 1237] memfd_create("syzkaller", 0 [pid 1232] mkdir("./file0", 0777 [pid 1225] ioctl(4, LOOP_SET_FD, 3 [pid 1223] +++ killed by SIGBUS +++ [pid 1238] <... memfd_create resumed>) = 3 [pid 1237] <... memfd_create resumed>) = 3 [pid 1232] <... mkdir resumed>) = 0 [pid 1238] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1232] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1238] <... mmap resumed>) = 0x7f70edbbd000 [pid 1237] <... mmap resumed>) = 0x7f70edbbd000 [pid 1238] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1235] +++ killed by SIGBUS +++ [pid 1231] munmap(0x7f70edbbd000, 1048576 [pid 1222] +++ killed by SIGBUS +++ [pid 1231] <... munmap resumed>) = 0 [pid 1231] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1231] ioctl(4, LOOP_SET_FD, 3 [pid 1225] <... ioctl resumed>) = 0 [pid 1225] close(3) = 0 [pid 1225] mkdir("./file0", 0777) = 0 [pid 1237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1225] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1222, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1231] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1231] close(3) = 0 [pid 372] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1231] mkdir("./file0", 0777) = 0 [pid 372] <... openat resumed>) = 3 [pid 1231] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1238] <... write resumed>) = 1048576 [pid 372] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1238] munmap(0x7f70edbbd000, 1048576 [pid 1232] <... mount resumed>) = 0 [pid 372] lstat("./23/binderfs", [pid 1238] <... munmap resumed>) = 0 [pid 1232] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1225] <... mount resumed>) = 0 [pid 1238] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1232] <... openat resumed>) = 3 [pid 1225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1232] chdir("./file0" [pid 372] unlink("./23/binderfs" [pid 1238] <... openat resumed>) = 4 [pid 1232] <... chdir resumed>) = 0 [pid 1225] <... openat resumed>) = 3 [pid 1238] ioctl(4, LOOP_SET_FD, 3 [pid 1232] ioctl(4, LOOP_CLR_FD [pid 1225] chdir("./file0" [pid 372] <... unlink resumed>) = 0 [pid 1237] <... write resumed>) = 1048576 [pid 1225] <... chdir resumed>) = 0 [pid 1238] <... ioctl resumed>) = 0 [pid 1232] <... ioctl resumed>) = 0 [pid 1225] ioctl(4, LOOP_CLR_FD [pid 372] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1232] close(4 [pid 1225] <... ioctl resumed>) = 0 [pid 1232] <... close resumed>) = 0 [pid 1238] close(3 [pid 1225] close(4 [pid 1238] <... close resumed>) = 0 [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... close resumed>) = 0 [pid 1238] mkdir("./file0", 0777 [pid 1237] munmap(0x7f70edbbd000, 1048576 [pid 1232] <... futex resumed>) = 1 [pid 1231] <... mount resumed>) = 0 [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] <... mkdir resumed>) = 0 [pid 1237] <... munmap resumed>) = 0 [pid 1232] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... futex resumed>) = 1 [pid 1224] <... futex resumed>) = 0 [ 29.133693][ T1235] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1238] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1237] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1231] <... openat resumed>) = 3 [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1224] <... futex resumed>) = 0 [pid 1231] chdir("./file0" [pid 1225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1225] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... open resumed>) = 4 [pid 1231] <... chdir resumed>) = 0 [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] ioctl(4, LOOP_CLR_FD [pid 1225] <... open resumed>) = 4 [pid 1232] <... futex resumed>) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... futex resumed>) = 1 [pid 1224] <... futex resumed>) = 0 [pid 1232] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1224] <... futex resumed>) = 0 [pid 1225] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] <... write resumed>) = 9 [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... write resumed>) = 9 [pid 1232] <... futex resumed>) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... futex resumed>) = 1 [pid 1224] <... futex resumed>) = 0 [pid 1232] open("./bus", O_RDWR [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... open resumed>) = 5 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1224] <... futex resumed>) = 0 [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1232] <... futex resumed>) = 0 [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] open("./bus", O_RDWR [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1232] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1229] <... futex resumed>) = 0 [pid 1225] <... open resumed>) = 5 [pid 1232] <... mmap resumed>) = 0x20000000 [pid 1229] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1224] <... futex resumed>) = 0 [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = 1 [pid 1229] <... futex resumed>) = 0 [pid 1232] write(4, 0x20000f80, 9 [pid 1229] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... mmap resumed>) = 0x20000000 [pid 1224] <... futex resumed>) = 0 [pid 1229] <... futex resumed>) = 0 [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1224] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1229] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] <... futex resumed>) = 0 [pid 1232] <... write resumed>) = 9 [pid 1229] <... futex resumed>) = 0 [pid 1224] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1232] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1225] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1224] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1232] <... futex resumed>) = 0 [pid 1229] <... mmap resumed>) = 0x7f70edc9c000 [pid 1225] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1224] <... futex resumed>) = 0 [pid 1232] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1229] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1225] write(4, 0x20000f80, 9 [pid 1224] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1229] <... mprotect resumed>) = 0 [pid 1224] <... futex resumed>) = 0 [pid 1229] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1225] <... write resumed>) = 9 [pid 1224] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1225] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1224] <... mmap resumed>) = 0x7f70edc9c000 [pid 1229] <... clone resumed>, parent_tid=[1248], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1248 [pid 1225] <... futex resumed>) = 0 [pid 1229] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1225] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1224] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1229] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1248 attached [pid 1224] <... mprotect resumed>) = 0 [pid 1229] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1224] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1248] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1249 attached [pid 1224] <... clone resumed>, parent_tid=[1249], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1249 [pid 1224] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1249] set_robust_list(0x7f70edcbc9e0, 24 [pid 1248] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1224] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1249] <... set_robust_list resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1249] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1237] <... openat resumed>) = 4 [pid 1237] ioctl(4, LOOP_SET_FD, 3 [pid 1232] <... futex resumed>) = ? [pid 1229] <... futex resumed>) = ? [pid 1225] <... futex resumed>) = ? [pid 1224] <... futex resumed>) = -1 (errno 18446744073709551555) [pid 1232] +++ killed by SIGBUS +++ [pid 1225] +++ killed by SIGBUS +++ [pid 372] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1249] +++ killed by SIGBUS +++ [pid 1224] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1224, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1248] +++ killed by SIGBUS +++ [pid 1229] +++ killed by SIGBUS +++ [pid 374] <... openat resumed>) = 3 [pid 374] fstat(3, [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1229, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 374] getdents64(3, [pid 372] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1237] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1231] <... ioctl resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 1231] close(4 [pid 1237] close(3 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] getdents64(4, [pid 1231] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./23/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./23") = 0 [pid 372] mkdir("./24", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1237] <... close resumed>) = 0 [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1237] mkdir("./file0", 0777 [pid 1231] <... futex resumed>) = 1 [pid 1228] <... futex resumed>) = 0 [pid 375] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1237] <... mkdir resumed>) = 0 [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./23/binderfs", [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1251 [pid 1237] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1228] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1231] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... openat resumed>) = 3 [pid 374] unlink("./23/binderfs" [pid 1231] <... open resumed>) = 4 [pid 375] fstat(3, [pid 374] <... unlink resumed>) = 0 [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1231] <... futex resumed>) = 1 [pid 1228] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1228] <... futex resumed>) = 0 [pid 375] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1231] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1231] <... write resumed>) = 9 [pid 375] lstat("./24/binderfs", [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1231] <... futex resumed>) = 1 [pid 1228] <... futex resumed>) = 0 [pid 375] unlink("./24/binderfs" [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1228] <... futex resumed>) = 0 [pid 375] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1251 attached [pid 1231] open("./bus", O_RDWR [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1251] set_robust_list(0x5555569495e0, 24 [pid 1231] <... open resumed>) = 5 [pid 1251] <... set_robust_list resumed>) = 0 [pid 1238] <... mount resumed>) = 0 [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1231] <... futex resumed>) = 1 [pid 1228] <... futex resumed>) = 0 [pid 1238] <... openat resumed>) = 3 [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1238] chdir("./file0" [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1228] <... futex resumed>) = 0 [pid 1238] <... chdir resumed>) = 0 [pid 1231] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1228] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] ioctl(4, LOOP_CLR_FD [pid 1231] <... mmap resumed>) = 0x20000000 [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1228] <... futex resumed>) = 0 [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1228] <... futex resumed>) = 0 [pid 1231] write(4, 0x20000f80, 9 [pid 1228] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1231] <... write resumed>) = 9 [pid 1228] <... futex resumed>) = 0 [pid 1231] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1228] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1231] <... futex resumed>) = 0 [pid 1228] <... mmap resumed>) = 0x7f70edc9c000 [pid 1231] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1228] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1228] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1255], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1255 [pid 1228] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1228] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1255 attached [pid 1255] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1251] chdir("./24") = 0 [ 29.201711][ T1248] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.218351][ T1249] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1251] setpgid(0, 0) = 0 [pid 1251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1251] write(3, "1000", 4) = 4 [pid 1251] close(3) = 0 [pid 1251] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1251] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1251] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1257], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1257 [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1257 attached [pid 1257] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1257] memfd_create("syzkaller", 0) = 3 [pid 1257] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1257] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1237] <... mount resumed>) = 0 [pid 1237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1255] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1237] <... openat resumed>) = 3 [pid 1237] chdir("./file0" [pid 1231] <... futex resumed>) = ? [pid 1228] <... futex resumed>) = ? [pid 1237] <... chdir resumed>) = 0 [pid 1237] ioctl(4, LOOP_CLR_FD [pid 1231] +++ killed by SIGBUS +++ [pid 1255] +++ killed by SIGBUS +++ [pid 1228] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1228, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 1257] <... write resumed>) = 1048576 [pid 1257] munmap(0x7f70edbbd000, 1048576 [pid 376] <... restart_syscall resumed>) = 0 [pid 1257] <... munmap resumed>) = 0 [pid 1257] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 376] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./24/binderfs") = 0 [pid 376] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./23/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./23") = 0 [pid 374] mkdir("./24", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1238] <... ioctl resumed>) = 0 [pid 1237] <... ioctl resumed>) = 0 [pid 1237] close(4) = 0 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1237] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1237] <... open resumed>) = 4 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1237] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1237] <... write resumed>) = 9 [pid 1257] <... openat resumed>) = 4 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] ioctl(4, LOOP_SET_FD, 3 [pid 1237] <... futex resumed>) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1237] open("./bus", O_RDWR [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1237] <... open resumed>) = 5 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1237] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1230] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1238] close(4 [pid 1237] <... mmap resumed>) = 0x20000000 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1230] <... futex resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1230] <... futex resumed>) = 0 [pid 1237] write(4, 0x20000f80, 9 [pid 1230] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1237] <... write resumed>) = 9 [pid 1230] <... futex resumed>) = 0 [pid 1257] <... ioctl resumed>) = 0 [pid 1237] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1230] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1257] close(3 [pid 1237] <... futex resumed>) = 0 [pid 1230] <... mmap resumed>) = 0x7f70edc9c000 [pid 1257] <... close resumed>) = 0 [pid 1237] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1230] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1257] mkdir("./file0", 0777 [pid 1230] <... mprotect resumed>) = 0 [pid 1257] <... mkdir resumed>) = 0 [pid 1230] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1259 attached [pid 1257] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1259] set_robust_list(0x7f70edcbc9e0, 24 [pid 1230] <... clone resumed>, parent_tid=[1259], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1259 [pid 1230] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1230] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1259] <... set_robust_list resumed>) = 0 [ 29.260553][ T1255] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1259] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1237] <... futex resumed>) = ? [pid 1230] <... futex resumed>) = ? [pid 1237] +++ killed by SIGBUS +++ [pid 1259] +++ killed by SIGBUS +++ [pid 1230] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1230, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./22/binderfs") = 0 [ 29.305382][ T1259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1238] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1257] <... mount resumed>) = 0 [pid 375] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1257] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1238] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1257] <... openat resumed>) = 3 [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./24/file0", [pid 375] lstat("./24/file0", [pid 1257] chdir("./file0" [pid 1238] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1227] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1257] <... chdir resumed>) = 0 [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1238] <... open resumed>) = 4 [pid 373] lstat("./22/file0", [pid 1257] ioctl(4, LOOP_CLR_FD [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1238] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1238] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 375] <... openat resumed>) = 4 [pid 373] umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 375] fstat(4, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1238] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1238] <... write resumed>) = 9 [pid 376] getdents64(4, [pid 375] getdents64(4, [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... openat resumed>) = 4 [pid 1238] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 375] getdents64(4, [pid 373] fstat(4, [pid 1238] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 376] close(4 [pid 375] close(4 [pid 373] getdents64(4, [pid 1238] open("./bus", O_RDWR [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1238] <... open resumed>) = 5 [pid 376] rmdir("./24/file0" [pid 375] rmdir("./24/file0" [pid 373] getdents64(4, [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1238] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 375] getdents64(3, [pid 373] close(4 [pid 1238] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 1238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 376] close(3 [pid 375] close(3 [pid 373] rmdir("./22/file0" [pid 1238] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1227] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 1238] <... mmap resumed>) = 0x20000000 [pid 376] rmdir("./24" [pid 375] rmdir("./24" [pid 373] <... rmdir resumed>) = 0 [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 1238] <... futex resumed>) = 1 [pid 1227] <... futex resumed>) = 0 [pid 376] mkdir("./25", 0777 [pid 375] mkdir("./25", 0777 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1238] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... mkdir resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 373] close(3 [pid 1238] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1227] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] <... close resumed>) = 0 [pid 1238] write(4, 0x20000f80, 9 [pid 1227] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./22" [pid 1238] <... write resumed>) = 9 [pid 1227] <... futex resumed>) = 0 [pid 1238] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1227] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1238] <... futex resumed>) = 0 [pid 1227] <... mmap resumed>) = 0x7f70edc9c000 [pid 1238] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1227] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 373] <... rmdir resumed>) = 0 [pid 1227] <... mprotect resumed>) = 0 [pid 1227] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] mkdir("./23", 0777./strace-static-x86_64: Process 1262 attached [pid 1227] <... clone resumed>, parent_tid=[1262], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1262 [pid 1227] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1227] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1262] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1262] <... set_robust_list resumed>) = 0 [pid 1262] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1238] <... futex resumed>) = ? [pid 1227] <... futex resumed>) = ? [pid 1238] +++ killed by SIGBUS +++ [pid 1262] +++ killed by SIGBUS +++ [pid 1227] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1227, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./24/binderfs") = 0 [pid 377] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1257] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... openat resumed>) = 3 [pid 1257] close(4 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] close(3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 1257] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 375] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] close(3 [pid 1257] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [ 29.385196][ T1262] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./24/file0", [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1257] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1265 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1263 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1264 [pid 1257] <... open resumed>) = 4 [pid 377] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1266 [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1257] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 1257] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1257] <... write resumed>) = 9 [pid 377] getdents64(4, [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1257] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 377] close(4 [pid 1257] open("./bus", O_RDWR [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 1257] <... open resumed>) = 5 [pid 377] rmdir("./24/file0" [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1264 attached [pid 1264] set_robust_list(0x5555569495e0, 24 [pid 1257] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1251] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 1257] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1251] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1257] <... mmap resumed>) = 0x20000000 [pid 377] close(3 [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 1257] <... futex resumed>) = 1 [pid 1251] <... futex resumed>) = 0 [pid 377] rmdir("./24" [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1257] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1264] <... set_robust_list resumed>) = 0 [pid 1257] write(4, 0x20000f80, 9 [pid 1251] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 1251] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./25", 0777 [pid 1264] chdir("./23" [pid 1257] <... write resumed>) = 9 [pid 1251] <... futex resumed>) = 0 [pid 1264] <... chdir resumed>) = 0 [pid 1257] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1251] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... mkdir resumed>) = 0 [pid 1264] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1257] <... futex resumed>) = 0 [pid 1251] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1264] <... prctl resumed>) = 0 [pid 1257] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1251] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... openat resumed>) = 3 [pid 1264] setpgid(0, 0 [pid 1251] <... mprotect resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 1264] <... setpgid resumed>) = 0 [pid 1251] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1264] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] close(3 [pid 1251] <... clone resumed>, parent_tid=[1267], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1267 [pid 1264] <... openat resumed>) = 3 [pid 377] <... close resumed>) = 0 [pid 1264] write(3, "1000", 4 [pid 1251] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1264] <... write resumed>) = 4 [pid 1251] <... futex resumed>) = 0 [pid 1264] close(3 [pid 1251] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1266 attached ./strace-static-x86_64: Process 1263 attached [pid 1264] <... close resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1268 [pid 1264] symlink("/dev/binderfs", "./binderfs" [pid 1263] set_robust_list(0x5555569495e0, 24) = 0 [pid 1266] set_robust_list(0x5555569495e0, 24 [pid 1264] <... symlink resumed>) = 0 [pid 1263] chdir("./24" [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1266] <... set_robust_list resumed>) = 0 [pid 1264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1263] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 1265 attached [pid 1266] chdir("./25" [pid 1264] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1266] <... chdir resumed>) = 0 [pid 1265] set_robust_list(0x5555569495e0, 24 [pid 1264] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1263] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1266] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1265] <... set_robust_list resumed>) = 0 [pid 1264] <... mprotect resumed>) = 0 [pid 1263] <... prctl resumed>) = 0 [pid 1266] <... prctl resumed>) = 0 [pid 1263] setpgid(0, 0 [pid 1266] setpgid(0, 0./strace-static-x86_64: Process 1267 attached [pid 1265] chdir("./25" [pid 1264] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1263] <... setpgid resumed>) = 0 [pid 1267] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1264] <... clone resumed>, parent_tid=[1269], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1269 ./strace-static-x86_64: Process 1269 attached ./strace-static-x86_64: Process 1268 attached [pid 1266] <... setpgid resumed>) = 0 [pid 1265] <... chdir resumed>) = 0 [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1263] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1269] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1268] set_robust_list(0x5555569495e0, 24 [pid 1267] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1266] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1265] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1264] <... futex resumed>) = 0 [pid 1263] <... openat resumed>) = 3 [pid 1269] <... set_robust_list resumed>) = 0 [pid 1268] <... set_robust_list resumed>) = 0 [pid 1266] <... openat resumed>) = 3 [pid 1265] <... prctl resumed>) = 0 [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1263] write(3, "1000", 4 [pid 1269] memfd_create("syzkaller", 0 [pid 1265] setpgid(0, 0 [pid 1257] <... futex resumed>) = ? [pid 1251] <... futex resumed>) = ? [pid 1268] chdir("./25" [pid 1269] <... memfd_create resumed>) = 3 [pid 1268] <... chdir resumed>) = 0 [pid 1266] write(3, "1000", 4 [pid 1265] <... setpgid resumed>) = 0 [pid 1263] <... write resumed>) = 4 [pid 1257] +++ killed by SIGBUS +++ [pid 1269] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1268] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1266] <... write resumed>) = 4 [pid 1265] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1263] close(3 [pid 1269] <... mmap resumed>) = 0x7f70edbbd000 [pid 1268] <... prctl resumed>) = 0 [pid 1266] close(3 [pid 1265] <... openat resumed>) = 3 [pid 1263] <... close resumed>) = 0 [pid 1263] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1263] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1263] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1270], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1270 [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1267] +++ killed by SIGBUS +++ [pid 1251] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1251, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1268] setpgid(0, 0) = 0 [pid 1268] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] <... restart_syscall resumed>) = 0 [pid 1268] write(3, "1000", 4) = 4 [pid 1269] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1268] close(3 [pid 1266] <... close resumed>) = 0 [pid 1265] write(3, "1000", 4 [pid 372] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1268] <... close resumed>) = 0 [pid 1266] symlink("/dev/binderfs", "./binderfs" [pid 1265] <... write resumed>) = 4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1268] symlink("/dev/binderfs", "./binderfs" [pid 1266] <... symlink resumed>) = 0 [pid 372] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1268] <... symlink resumed>) = 0 [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1265] close(3 [pid 372] <... openat resumed>) = 3 [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] <... futex resumed>) = 0 [pid 1265] <... close resumed>) = 0 [pid 372] fstat(3, [pid 1268] <... futex resumed>) = 0 [pid 1266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1265] symlink("/dev/binderfs", "./binderfs" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1266] <... mmap resumed>) = 0x7f70f5fbd000 [pid 372] getdents64(3, [pid 1268] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1266] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1265] <... symlink resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1268] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1266] <... mprotect resumed>) = 0 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1268] <... mprotect resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1268] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1266] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1265] <... futex resumed>) = 0 [pid 372] lstat("./24/binderfs", [pid 1265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1268] <... clone resumed>, parent_tid=[1271], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1271 [pid 1266] <... clone resumed>, parent_tid=[1272], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1272 [pid 1265] <... mmap resumed>) = 0x7f70f5fbd000 [pid 372] unlink("./24/binderfs"./strace-static-x86_64: Process 1272 attached ./strace-static-x86_64: Process 1271 attached ./strace-static-x86_64: Process 1270 attached [pid 1269] <... write resumed>) = 1048576 [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... unlink resumed>) = 0 [pid 1268] <... futex resumed>) = 0 [pid 372] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1272] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1271] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1270] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1269] munmap(0x7f70edbbd000, 1048576 [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1265] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1272] <... set_robust_list resumed>) = 0 [pid 1271] <... set_robust_list resumed>) = 0 [pid 1270] <... set_robust_list resumed>) = 0 [pid 1269] <... munmap resumed>) = 0 [pid 1266] <... futex resumed>) = 0 [pid 1265] <... mprotect resumed>) = 0 [pid 1272] memfd_create("syzkaller", 0 [pid 1271] memfd_create("syzkaller", 0 [pid 1270] memfd_create("syzkaller", 0 [pid 1269] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1265] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1272] <... memfd_create resumed>) = 3 [pid 1271] <... memfd_create resumed>) = 3 [pid 1270] <... memfd_create resumed>) = 3 [pid 1269] <... openat resumed>) = 4 ./strace-static-x86_64: Process 1273 attached [pid 1272] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1271] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1270] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1269] ioctl(4, LOOP_SET_FD, 3 [pid 1265] <... clone resumed>, parent_tid=[1273], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1273 [pid 1273] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1272] <... mmap resumed>) = 0x7f70edbbd000 [pid 1271] <... mmap resumed>) = 0x7f70edbbd000 [pid 1270] <... mmap resumed>) = 0x7f70edbbd000 [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... set_robust_list resumed>) = 0 [pid 1265] <... futex resumed>) = 0 [pid 1273] memfd_create("syzkaller", 0 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1273] <... memfd_create resumed>) = 3 [pid 1273] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1273] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1270] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1273] <... write resumed>) = 1048576 [pid 1273] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1273] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1272] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1271] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1272] <... write resumed>) = 1048576 [pid 1272] munmap(0x7f70edbbd000, 1048576 [pid 1270] <... write resumed>) = 1048576 [pid 1270] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1272] <... munmap resumed>) = 0 [pid 1272] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1270] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1273] <... openat resumed>) = 4 [pid 1271] <... write resumed>) = 1048576 [pid 1269] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1273] ioctl(4, LOOP_SET_FD, 3 [pid 1271] munmap(0x7f70edbbd000, 1048576 [pid 1269] close(3) = 0 [pid 1269] mkdir("./file0", 0777 [pid 372] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1271] <... munmap resumed>) = 0 [pid 1269] <... mkdir resumed>) = 0 [pid 1271] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1269] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1273] <... ioctl resumed>) = 0 [pid 1273] close(3 [pid 1272] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 1273] <... close resumed>) = 0 [pid 1273] mkdir("./file0", 0777) = 0 [pid 372] fstat(4, [ 29.461121][ T1267] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1273] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./24/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./24") = 0 [pid 372] mkdir("./25", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1276 [pid 1272] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 1276 attached [pid 1270] <... openat resumed>) = 4 [pid 1270] ioctl(4, LOOP_SET_FD, 3 [pid 1276] set_robust_list(0x5555569495e0, 24 [pid 1272] <... ioctl resumed>) = 0 [pid 1272] close(3 [pid 1271] <... openat resumed>) = 4 [pid 1272] <... close resumed>) = 0 [pid 1272] mkdir("./file0", 0777) = 0 [pid 1272] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1276] <... set_robust_list resumed>) = 0 [pid 1271] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1270] <... ioctl resumed>) = 0 [pid 1269] <... mount resumed>) = 0 [pid 1271] close(3 [pid 1270] close(3 [pid 1269] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1271] <... close resumed>) = 0 [pid 1270] <... close resumed>) = 0 [pid 1269] <... openat resumed>) = 3 [pid 1271] mkdir("./file0", 0777 [pid 1270] mkdir("./file0", 0777 [pid 1269] chdir("./file0" [pid 1276] chdir("./25" [pid 1272] <... mount resumed>) = 0 [pid 1271] <... mkdir resumed>) = 0 [pid 1270] <... mkdir resumed>) = 0 [pid 1269] <... chdir resumed>) = 0 [pid 1276] <... chdir resumed>) = 0 [pid 1272] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1271] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1270] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1269] ioctl(4, LOOP_CLR_FD [pid 1276] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1272] <... openat resumed>) = 3 [pid 1269] <... ioctl resumed>) = 0 [pid 1276] <... prctl resumed>) = 0 [pid 1272] chdir("./file0" [pid 1269] close(4 [pid 1276] setpgid(0, 0 [pid 1272] <... chdir resumed>) = 0 [pid 1269] <... close resumed>) = 0 [pid 1276] <... setpgid resumed>) = 0 [pid 1272] ioctl(4, LOOP_CLR_FD [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1272] <... ioctl resumed>) = 0 [pid 1269] <... futex resumed>) = 1 [pid 1264] <... futex resumed>) = 0 [pid 1276] <... openat resumed>) = 3 [pid 1272] close(4 [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... close resumed>) = 0 [pid 1276] write(3, "1000", 4) = 4 [pid 1276] close(3) = 0 [pid 1276] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1276] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1276] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1288], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1288 [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1264] <... futex resumed>) = 0 [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = 1 [pid 1269] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1266] <... futex resumed>) = 0 [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1276] <... futex resumed>) = 0 [pid 1272] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1269] <... open resumed>) = 4 [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] <... futex resumed>) = 0 [pid 1273] <... mount resumed>) = 0 [pid 1272] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1269] <... futex resumed>) = 1 [pid 1264] <... futex resumed>) = 0 [pid 1273] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1272] <... open resumed>) = 4 [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... openat resumed>) = 3 [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1273] chdir("./file0" [pid 1272] <... futex resumed>) = 0 [pid 1269] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] <... futex resumed>) = 0 [pid 1273] <... chdir resumed>) = 0 [pid 1272] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9./strace-static-x86_64: Process 1288 attached [pid 1288] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1266] <... futex resumed>) = 0 [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] ioctl(4, LOOP_CLR_FD [pid 1272] <... write resumed>) = 9 [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... ioctl resumed>) = 0 [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] <... write resumed>) = 9 [pid 1273] close(4 [pid 1272] <... futex resumed>) = 1 [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] <... futex resumed>) = 0 [pid 1273] <... close resumed>) = 0 [pid 1272] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1269] <... futex resumed>) = 1 [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] <... futex resumed>) = 0 [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1266] <... futex resumed>) = 0 [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... futex resumed>) = 1 [pid 1272] open("./bus", O_RDWR [pid 1269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1265] <... futex resumed>) = 0 [pid 1264] <... futex resumed>) = 0 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1272] <... open resumed>) = 5 [pid 1269] open("./bus", O_RDWR [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] <... open resumed>) = 5 [pid 1265] <... futex resumed>) = 0 [pid 1273] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1272] <... futex resumed>) = 1 [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] <... futex resumed>) = 0 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1272] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1269] <... futex resumed>) = 1 [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] <... futex resumed>) = 0 [pid 1272] <... mmap resumed>) = 0x20000000 [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1266] <... futex resumed>) = 0 [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1266] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] <... futex resumed>) = 0 [pid 1272] <... futex resumed>) = 0 [pid 1272] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1269] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1266] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1264] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... open resumed>) = 4 [pid 1269] <... mmap resumed>) = 0x20000000 [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... futex resumed>) = 1 [pid 1269] <... futex resumed>) = 1 [pid 1266] <... futex resumed>) = 1 [pid 1265] <... futex resumed>) = 0 [pid 1264] <... futex resumed>) = 0 [pid 1272] <... futex resumed>) = 0 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1272] write(4, 0x20000f80, 9 [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1266] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1272] <... write resumed>) = 9 [pid 1269] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1266] <... futex resumed>) = 0 [pid 1265] <... futex resumed>) = 0 [pid 1273] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1272] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1269] write(4, 0x20000f80, 9 [pid 1266] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] <... futex resumed>) = 0 [pid 1273] <... write resumed>) = 9 [pid 1272] <... futex resumed>) = 0 [pid 1266] <... mmap resumed>) = 0x7f70edc9c000 [pid 1264] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1272] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1264] <... futex resumed>) = 0 [pid 1273] <... futex resumed>) = 1 [pid 1269] <... write resumed>) = 9 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1266] <... mprotect resumed>) = 0 [pid 1265] <... futex resumed>) = 0 [pid 1264] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1269] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] <... mmap resumed>) = 0x7f70edc9c000 [pid 1269] <... futex resumed>) = 0 [pid 1273] <... futex resumed>) = 0 [pid 1269] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1265] <... futex resumed>) = 1 [pid 1264] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1288] memfd_create("syzkaller", 0 [pid 1273] open("./bus", O_RDWR [pid 1266] <... clone resumed>, parent_tid=[1289], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1289 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1288] <... memfd_create resumed>) = 3 [pid 1288] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1266] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] <... mprotect resumed>) = 0 ./strace-static-x86_64: Process 1289 attached [pid 1273] <... open resumed>) = 5 [pid 1266] <... futex resumed>) = 0 [pid 1264] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1266] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1273] <... futex resumed>) = 1 [pid 1265] <... futex resumed>) = 0 [pid 1264] <... clone resumed>, parent_tid=[1292], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1292 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1264] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1265] <... futex resumed>) = 0 [pid 1264] <... futex resumed>) = 0 [pid 1288] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1273] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1289] set_robust_list(0x7f70edcbc9e0, 24 [pid 1265] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1264] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1289] <... set_robust_list resumed>) = 0 [pid 1273] <... mmap resumed>) = 0x20000000 [pid 1271] <... mount resumed>) = 0 [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1273] <... futex resumed>) = 1 [pid 1271] <... openat resumed>) = 3 [pid 1265] <... futex resumed>) = 0 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1271] chdir("./file0" [pid 1265] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1271] <... chdir resumed>) = 0 [pid 1265] <... futex resumed>) = 0 [pid 1273] write(4, 0x20000f80, 9 [pid 1271] ioctl(4, LOOP_CLR_FD [pid 1265] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1273] <... write resumed>) = 9 [pid 1271] <... ioctl resumed>) = 0 [pid 1265] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1292 attached [pid 1273] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] close(4 [pid 1265] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1292] set_robust_list(0x7f70edcbc9e0, 24 [pid 1273] <... futex resumed>) = 0 [pid 1271] <... close resumed>) = 0 [pid 1265] <... mmap resumed>) = 0x7f70edc9c000 [pid 1292] <... set_robust_list resumed>) = 0 [pid 1273] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1265] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1289] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1288] <... write resumed>) = 1048576 [pid 1288] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1288] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1288] ioctl(4, LOOP_SET_FD, 3 [pid 1270] <... mount resumed>) = 0 [pid 1270] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1270] chdir("./file0") = 0 [pid 1270] ioctl(4, LOOP_CLR_FD [pid 1271] <... futex resumed>) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] <... futex resumed>) = 0 [pid 1271] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] <... open resumed>) = 4 [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] <... futex resumed>) = 0 [pid 1271] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] <... write resumed>) = 9 [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] <... futex resumed>) = 0 [pid 1271] open("./bus", O_RDWR [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] <... open resumed>) = 5 [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] <... futex resumed>) = 0 [pid 1271] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1268] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1271] <... mmap resumed>) = 0x20000000 [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1268] <... futex resumed>) = 0 [pid 1271] write(4, 0x20000f80, 9 [pid 1268] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1271] <... write resumed>) = 9 [pid 1268] <... futex resumed>) = 0 [pid 1271] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1268] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1271] <... futex resumed>) = 0 [pid 1268] <... mmap resumed>) = 0x7f70edc9c000 [pid 1271] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1268] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1268] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1294], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1294 [pid 1268] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1268] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1265] <... mprotect resumed>) = 0 [pid 1265] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1295], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1295 [pid 1265] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1265] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1266] <... futex resumed>) = ? [pid 1272] <... futex resumed>) = ? [pid 1272] +++ killed by SIGBUS +++ [pid 1289] +++ killed by SIGBUS +++ [pid 1266] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1266, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1295 attached ./strace-static-x86_64: Process 1294 attached [pid 1292] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1288] <... ioctl resumed>) = 0 [pid 1270] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1295] set_robust_list(0x7f70edcbc9e0, 24 [pid 1294] set_robust_list(0x7f70edcbc9e0, 24 [pid 1288] close(3 [pid 1270] close(4 [pid 375] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1288] <... close resumed>) = 0 [pid 1270] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 1288] mkdir("./file0", 0777 [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(3, [pid 1288] <... mkdir resumed>) = 0 [pid 1270] <... futex resumed>) = 1 [pid 1263] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1288] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 1295] <... set_robust_list resumed>) = 0 [pid 1294] <... set_robust_list resumed>) = 0 [pid 1270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1263] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1270] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1270] <... open resumed>) = 4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./25/binderfs", [pid 1270] <... futex resumed>) = 1 [pid 1263] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] unlink("./25/binderfs" [pid 1270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1263] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 1270] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1270] <... write resumed>) = 9 [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1263] <... futex resumed>) = 0 [pid 1270] open("./bus", O_RDWR [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1270] <... open resumed>) = 5 [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1263] <... futex resumed>) = 0 [pid 1270] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1263] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1270] <... mmap resumed>) = 0x20000000 [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1263] <... futex resumed>) = 0 [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1270] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1263] <... futex resumed>) = 0 [pid 1270] write(4, 0x20000f80, 9 [pid 1263] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1270] <... write resumed>) = 9 [pid 1263] <... futex resumed>) = 0 [pid 1270] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1263] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1270] <... futex resumed>) = 0 [pid 1263] <... mmap resumed>) = 0x7f70edc9c000 [pid 1270] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1263] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1263] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1296], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1296 [pid 1263] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 29.575953][ T1289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.585009][ T1292] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1263] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1296 attached [pid 1294] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1269] <... futex resumed>) = ? [pid 1264] <... futex resumed>) = ? [pid 1296] set_robust_list(0x7f70edcbc9e0, 24 [pid 1269] +++ killed by SIGBUS +++ [pid 1296] <... set_robust_list resumed>) = 0 [pid 1292] +++ killed by SIGBUS +++ [pid 1264] +++ killed by SIGBUS +++ [pid 1295] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1271] <... futex resumed>) = ? [pid 1268] <... futex resumed>) = ? [pid 1265] <... futex resumed>) = ? [pid 1271] +++ killed by SIGBUS +++ [pid 1294] +++ killed by SIGBUS +++ [pid 1268] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1268, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1273] <... futex resumed>) = ? [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1264, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 1295] +++ killed by SIGBUS +++ [pid 1296] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1270] <... futex resumed>) = ? [pid 1263] <... futex resumed>) = ? [pid 1270] +++ killed by SIGBUS +++ [pid 377] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1273] +++ killed by SIGBUS +++ [pid 1265] +++ killed by SIGBUS +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1265, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1288] <... mount resumed>) = 0 [pid 373] umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1288] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1288] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1288] chdir("./file0" [pid 373] <... openat resumed>) = 3 [pid 1288] <... chdir resumed>) = 0 [pid 373] fstat(3, [pid 1288] ioctl(4, LOOP_CLR_FD [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 1296] +++ killed by SIGBUS +++ [pid 1263] +++ killed by SIGBUS +++ [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1263, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] unlink("./23/binderfs" [pid 374] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] <... unlink resumed>) = 0 [pid 377] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 374] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./25/binderfs", [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] lstat("./24/binderfs", [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] getdents64(3, [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./25/binderfs" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] unlink("./24/binderfs" [pid 377] <... unlink resumed>) = 0 [pid 376] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 377] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./25/binderfs") = 0 [pid 376] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1288] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 1288] close(4 [pid 375] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./25/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./25") = 0 [pid 375] mkdir("./26", 0777) = 0 [ 29.614636][ T1294] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.622445][ T1295] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.633151][ T1296] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./24/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./24") = 0 [pid 374] mkdir("./25", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1288] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1276] <... futex resumed>) = 0 [pid 377] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1288] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1276] <... futex resumed>) = 0 [pid 377] lstat("./25/file0", [pid 376] lstat("./25/file0", [pid 375] close(3 [pid 374] close(3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1288] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1288] <... open resumed>) = 4 ./strace-static-x86_64: Process 1299 attached [pid 1299] set_robust_list(0x5555569495e0, 24) = 0 [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1299 [pid 377] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1299] chdir("./26" [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1300 [pid 1288] <... futex resumed>) = 1 [pid 1276] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1288] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./23/file0", [pid 1288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1276] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1288] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 4 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 1288] <... write resumed>) = 9 [pid 377] fstat(4, [pid 373] umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 1299] <... chdir resumed>) = 0 [pid 1299] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1299] setpgid(0, 0) = 0 [pid 1299] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1288] <... futex resumed>) = 1 [pid 1276] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1288] open("./bus", O_RDWR [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1288] <... open resumed>) = 5 [pid 1276] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 373] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1288] <... futex resumed>) = 0 [pid 1276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1299] <... openat resumed>) = 3 [pid 1288] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... openat resumed>) = 4 [pid 1288] <... mmap resumed>) = 0x20000000 [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... futex resumed>) = 0 [pid 376] getdents64(4, [pid 377] getdents64(4, [pid 373] fstat(4, [pid 1299] write(3, "1000", 4 [pid 1288] <... futex resumed>) = 0 [pid 1276] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1288] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1299] <... write resumed>) = 4 [pid 1276] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1288] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] getdents64(4, [pid 1288] write(4, 0x20000f80, 9 [pid 1276] <... futex resumed>) = 0 [pid 377] close(4 [pid 376] close(4 [pid 1299] close(3) = 0 [pid 1276] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1299] symlink("/dev/binderfs", "./binderfs" [pid 1276] <... futex resumed>) = 0 [pid 1288] <... write resumed>) = 9 [pid 1276] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1288] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1288] <... futex resumed>) = 0 [pid 373] getdents64(4, [pid 1276] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1299] <... symlink resumed>) = 0 [pid 1288] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1276] <... mprotect resumed>) = 0 [pid 377] rmdir("./25/file0" [pid 376] rmdir("./25/file0" [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1276] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1299] <... futex resumed>) = 0 [pid 1299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 377] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 1300 attached [pid 1299] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1300] set_robust_list(0x5555569495e0, 24 [pid 1299] <... mprotect resumed>) = 0 [pid 1300] <... set_robust_list resumed>) = 0 [pid 1299] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1276] <... clone resumed>, parent_tid=[1301], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1301 [pid 376] <... rmdir resumed>) = 0 [pid 373] close(4 [pid 377] getdents64(3, [pid 1276] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 1276] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1276] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 373] rmdir("./23/file0" [pid 1300] chdir("./25") = 0 [pid 1299] <... clone resumed>, parent_tid=[1302], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1302 [pid 1300] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] <... prctl resumed>) = 0 [pid 1299] <... futex resumed>) = 0 [pid 1300] setpgid(0, 0 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1300] <... setpgid resumed>) = 0 [pid 1300] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1300] write(3, "1000", 4) = 4 [pid 1300] close(3) = 0 [pid 1300] symlink("/dev/binderfs", "./binderfs" [pid 373] <... rmdir resumed>) = 0 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 376] rmdir("./25" [pid 377] rmdir("./25" [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1300] <... symlink resumed>) = 0 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... rmdir resumed>) = 0 [pid 1300] <... futex resumed>) = 0 [pid 1300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 377] <... rmdir resumed>) = 0 [pid 376] mkdir("./26", 0777 [pid 373] close(3 [pid 1300] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1300] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1303], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1303 [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1302 attached [pid 1302] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 373] <... close resumed>) = 0 [pid 1302] memfd_create("syzkaller", 0) = 3 [pid 376] <... mkdir resumed>) = 0 [pid 377] mkdir("./26", 0777 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] rmdir("./23" [pid 1302] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 373] <... rmdir resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 373] mkdir("./24", 0777 [pid 376] <... openat resumed>) = 3 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] <... mkdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] ioctl(3, LOOP_CLR_FD [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 377] close(3 [pid 373] <... openat resumed>) = 3 [pid 376] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1304 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1305 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1306 ./strace-static-x86_64: Process 1304 attached [pid 1304] set_robust_list(0x5555569495e0, 24) = 0 [pid 1304] chdir("./26") = 0 [pid 1304] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1304] setpgid(0, 0) = 0 [pid 1304] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1304] write(3, "1000", 4) = 4 [pid 1304] close(3) = 0 [pid 1304] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1304] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1304] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1302] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1304] <... clone resumed>, parent_tid=[1307], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1307 [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1301 attached [pid 1301] set_robust_list(0x7f70edcbc9e0, 24./strace-static-x86_64: Process 1306 attached ./strace-static-x86_64: Process 1305 attached ) = 0 [pid 1306] set_robust_list(0x5555569495e0, 24 [pid 1302] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 1307 attached [pid 1307] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1307] memfd_create("syzkaller", 0) = 3 [pid 1307] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1302] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1302] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1302] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1302] close(3) = 0 [pid 1302] mkdir("./file0", 0777) = 0 [pid 1302] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1305] set_robust_list(0x5555569495e0, 24 [pid 1306] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1303 attached [pid 1305] <... set_robust_list resumed>) = 0 [pid 1306] chdir("./24" [pid 1303] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1305] chdir("./26" [pid 1303] <... set_robust_list resumed>) = 0 [pid 1306] <... chdir resumed>) = 0 [pid 1303] memfd_create("syzkaller", 0 [pid 1305] <... chdir resumed>) = 0 [pid 1306] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1303] <... memfd_create resumed>) = 3 [pid 1305] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1306] <... prctl resumed>) = 0 [pid 1306] setpgid(0, 0 [pid 1305] <... prctl resumed>) = 0 [pid 1303] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1305] setpgid(0, 0 [pid 1306] <... setpgid resumed>) = 0 [pid 1303] <... mmap resumed>) = 0x7f70edbbd000 [pid 1306] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1305] <... setpgid resumed>) = 0 [pid 1307] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1305] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1306] <... openat resumed>) = 3 [pid 1305] <... openat resumed>) = 3 [pid 1306] write(3, "1000", 4 [pid 1305] write(3, "1000", 4 [pid 1306] <... write resumed>) = 4 [pid 1306] close(3 [pid 1305] <... write resumed>) = 4 [pid 1306] <... close resumed>) = 0 [pid 1305] close(3 [pid 1306] symlink("/dev/binderfs", "./binderfs" [pid 1305] <... close resumed>) = 0 [pid 1306] <... symlink resumed>) = 0 [pid 1305] symlink("/dev/binderfs", "./binderfs" [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] <... symlink resumed>) = 0 [pid 1306] <... futex resumed>) = 0 [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1305] <... futex resumed>) = 0 [pid 1305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1306] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1305] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1306] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1305] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1306] <... mprotect resumed>) = 0 [pid 1305] <... mprotect resumed>) = 0 [pid 1306] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1305] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1309 attached [pid 1309] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1306] <... clone resumed>, parent_tid=[1309], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1309 [pid 1309] <... set_robust_list resumed>) = 0 [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1310 attached [pid 1310] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] <... clone resumed>, parent_tid=[1310], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1310 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 1 [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1305] <... futex resumed>) = 1 [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1303] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1276] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 1276] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0}) = -1 ETIMEDOUT (Connection timed out) [pid 1309] <... futex resumed>) = 0 [pid 1309] memfd_create("syzkaller", 0) = 3 [pid 1309] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1310] <... futex resumed>) = 0 [pid 1301] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1310] memfd_create("syzkaller", 0 [pid 1309] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1288] <... futex resumed>) = ? [pid 1310] <... memfd_create resumed>) = 3 [pid 1303] <... write resumed>) = 1048576 [pid 1288] +++ killed by SIGBUS +++ [pid 1310] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1301] +++ killed by SIGBUS +++ [pid 1276] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1276, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./25/binderfs") = 0 [pid 372] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1307] <... write resumed>) = 1048576 [pid 1307] munmap(0x7f70edbbd000, 1048576 [pid 1303] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1307] <... munmap resumed>) = 0 [pid 1307] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1303] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1310] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1309] <... write resumed>) = 1048576 [pid 1309] munmap(0x7f70edbbd000, 1048576 [pid 1302] <... mount resumed>) = 0 [ 29.883992][ T1301] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1302] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1302] chdir("./file0") = 0 [pid 1302] ioctl(4, LOOP_CLR_FD [pid 1309] <... munmap resumed>) = 0 [pid 1309] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1310] <... write resumed>) = 1048576 [pid 1310] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1310] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 1303] <... openat resumed>) = 4 [pid 1303] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1303] <... ioctl resumed>) = 0 [pid 372] lstat("./25/file0", [pid 1307] <... openat resumed>) = 4 [pid 1302] <... ioctl resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1307] ioctl(4, LOOP_SET_FD, 3 [pid 1303] close(3 [pid 1302] close(4 [pid 1303] <... close resumed>) = 0 [pid 372] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1303] mkdir("./file0", 0777 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1307] <... ioctl resumed>) = 0 [pid 372] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1303] <... mkdir resumed>) = 0 [pid 1307] close(3 [pid 372] <... openat resumed>) = 4 [pid 1307] <... close resumed>) = 0 [pid 1303] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] fstat(4, [pid 1310] <... openat resumed>) = 4 [pid 1309] <... openat resumed>) = 4 [pid 1307] mkdir("./file0", 0777 [pid 1302] <... close resumed>) = 0 [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1307] <... mkdir resumed>) = 0 [pid 1302] <... futex resumed>) = 1 [pid 1299] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1302] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1307] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1299] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1310] ioctl(4, LOOP_SET_FD, 3 [pid 1309] ioctl(4, LOOP_SET_FD, 3 [pid 1302] <... open resumed>) = 4 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1302] <... futex resumed>) = 1 [pid 1299] <... futex resumed>) = 0 [pid 372] close(4 [pid 1302] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... close resumed>) = 0 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./25/file0" [pid 1302] <... write resumed>) = 9 [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1299] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1302] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 1299] <... futex resumed>) = 0 [pid 1302] open("./bus", O_RDWR [pid 372] <... close resumed>) = 0 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] rmdir("./25" [pid 1302] <... open resumed>) = 5 [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 1302] <... futex resumed>) = 1 [pid 1299] <... futex resumed>) = 0 [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./26", 0777 [pid 1302] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1299] <... futex resumed>) = 0 [pid 1302] <... mmap resumed>) = 0x20000000 [pid 1299] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... mkdir resumed>) = 0 [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1299] <... futex resumed>) = 0 [pid 1302] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1299] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1302] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1299] <... futex resumed>) = 0 [pid 1302] write(4, 0x20000f80, 9 [pid 1299] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1299] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1302] <... write resumed>) = 9 [pid 1302] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1299] <... mmap resumed>) = 0x7f70edc9c000 [pid 1302] <... futex resumed>) = 0 [pid 1299] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1302] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1299] <... mprotect resumed>) = 0 [pid 1299] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1316 attached [pid 1316] set_robust_list(0x7f70edcbc9e0, 24 [pid 1299] <... clone resumed>, parent_tid=[1316], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1316 [pid 1299] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1316] <... set_robust_list resumed>) = 0 [pid 1299] <... futex resumed>) = 0 [pid 1299] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1309] <... ioctl resumed>) = 0 [pid 1309] close(3) = 0 [pid 1309] mkdir("./file0", 0777) = 0 [pid 1309] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1310] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1310] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 1310] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1310] mkdir("./file0", 0777 [pid 372] close(3 [pid 1310] <... mkdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1310] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 1318 attached [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1318 [pid 1318] set_robust_list(0x5555569495e0, 24) = 0 [pid 1318] chdir("./26") = 0 [pid 1318] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1318] setpgid(0, 0) = 0 [pid 1318] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1318] write(3, "1000", 4) = 4 [pid 1318] close(3) = 0 [pid 1318] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1318] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1318] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1319], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1319 [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1316] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1302] <... futex resumed>) = ? [pid 1299] <... futex resumed>) = ? [pid 1302] +++ killed by SIGBUS +++ [pid 1316] +++ killed by SIGBUS +++ [pid 1299] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1299, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 1319 attached ) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1319] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 375] unlink("./26/binderfs" [pid 1307] <... mount resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 1307] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1307] <... openat resumed>) = 3 [pid 1307] chdir("./file0") = 0 [pid 1309] <... mount resumed>) = 0 [pid 1307] ioctl(4, LOOP_CLR_FD [pid 1319] memfd_create("syzkaller", 0 [pid 1309] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1303] <... mount resumed>) = 0 [pid 1309] <... openat resumed>) = 3 [pid 1307] <... ioctl resumed>) = 0 [pid 1303] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1309] chdir("./file0" [pid 1307] close(4 [pid 1303] <... openat resumed>) = 3 [pid 1309] <... chdir resumed>) = 0 [pid 1307] <... close resumed>) = 0 [pid 1303] chdir("./file0" [pid 1309] ioctl(4, LOOP_CLR_FD [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1303] <... chdir resumed>) = 0 [pid 1307] <... futex resumed>) = 1 [pid 1304] <... futex resumed>) = 0 [pid 1303] ioctl(4, LOOP_CLR_FD [pid 1307] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1319] <... memfd_create resumed>) = 3 [pid 1307] <... futex resumed>) = 0 [pid 1304] <... futex resumed>) = 1 [pid 1310] <... mount resumed>) = 0 [pid 1310] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1319] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1310] <... openat resumed>) = 3 [pid 1307] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1319] <... mmap resumed>) = 0x7f70edbbd000 [pid 1310] chdir("./file0" [pid 1319] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1310] <... chdir resumed>) = 0 [pid 1307] <... open resumed>) = 4 [pid 1310] ioctl(4, LOOP_CLR_FD [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1304] <... futex resumed>) = 0 [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1307] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1304] <... futex resumed>) = 0 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... write resumed>) = 9 [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1304] <... futex resumed>) = 0 [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1307] open("./bus", O_RDWR [pid 1304] <... futex resumed>) = 0 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] <... open resumed>) = 5 [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1304] <... futex resumed>) = 0 [pid 1307] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1307] <... mmap resumed>) = 0x20000000 [pid 1304] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1304] <... futex resumed>) = 0 [pid 1307] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1304] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1307] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1304] <... futex resumed>) = 0 [pid 1307] write(4, 0x20000f80, 9 [pid 1304] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1304] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1307] <... write resumed>) = 9 [pid 1304] <... mmap resumed>) = 0x7f70edc9c000 [pid 1307] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1304] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1307] <... futex resumed>) = 0 [pid 1304] <... mprotect resumed>) = 0 [pid 1307] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1304] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1328], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1328 [pid 1304] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 ./strace-static-x86_64: Process 1328 attached [pid 1319] <... write resumed>) = 1048576 [pid 1304] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1328] set_robust_list(0x7f70edcbc9e0, 24 [pid 1319] munmap(0x7f70edbbd000, 1048576 [pid 1328] <... set_robust_list resumed>) = 0 [pid 1310] <... ioctl resumed>) = 0 [pid 1309] <... ioctl resumed>) = 0 [pid 1303] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [ 29.964371][ T1316] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1310] close(4 [pid 1309] close(4 [pid 1303] close(4 [pid 1319] <... munmap resumed>) = 0 [pid 1310] <... close resumed>) = 0 [pid 1309] <... close resumed>) = 0 [pid 1303] <... close resumed>) = 0 [pid 375] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = 1 [pid 1309] <... futex resumed>) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1303] <... futex resumed>) = 1 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1303] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1309] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] <... open resumed>) = 4 [pid 1309] <... open resumed>) = 4 [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = 1 [pid 1309] <... futex resumed>) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1309] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] <... write resumed>) = 9 [pid 1309] <... write resumed>) = 9 [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = 1 [pid 1309] <... futex resumed>) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] open("./bus", O_RDWR [pid 1309] open("./bus", O_RDWR [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] <... open resumed>) = 5 [pid 1309] <... open resumed>) = 5 [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = 1 [pid 1309] <... futex resumed>) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1309] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1306] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1310] <... mmap resumed>) = 0x20000000 [pid 1309] <... mmap resumed>) = 0x20000000 [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = 1 [pid 1309] <... futex resumed>) = 1 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1309] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1310] write(4, 0x20000f80, 9 [pid 1309] write(4, 0x20000f80, 9 [pid 1306] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1310] <... write resumed>) = 9 [pid 1309] <... write resumed>) = 9 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1300] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1310] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1309] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1305] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1310] <... futex resumed>) = 0 [pid 1309] <... futex resumed>) = 0 [pid 1306] <... mmap resumed>) = 0x7f70edc9c000 [pid 1305] <... mmap resumed>) = 0x7f70edc9c000 [pid 1310] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1309] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1306] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1305] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1306] <... mprotect resumed>) = 0 [pid 1305] <... mprotect resumed>) = 0 [pid 1306] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1305] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./26/file0", [pid 1306] <... clone resumed>, parent_tid=[1329], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1329 [pid 1305] <... clone resumed>, parent_tid=[1330], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1330 [pid 1306] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1305] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1306] <... futex resumed>) = 0 [pid 1305] <... futex resumed>) = 0 [pid 1306] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1305] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1328] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1319] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1307] <... futex resumed>) = ? [pid 1304] <... futex resumed>) = ? [pid 1303] <... futex resumed>) = 0 [pid 1300] <... futex resumed>) = 1 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1303] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1319] <... openat resumed>) = 4 [pid 1319] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1303] <... open resumed>) = 4 [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 1329 attached [pid 1329] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1330 attached [pid 1307] +++ killed by SIGBUS +++ [pid 1303] <... futex resumed>) = 1 [pid 1300] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 1303] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 1303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1300] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1303] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./26/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./26") = 0 [pid 375] mkdir("./27", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1319] <... ioctl resumed>) = 0 [pid 1303] <... write resumed>) = 9 [pid 1319] close(3 [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 1319] <... close resumed>) = 0 [pid 1303] <... futex resumed>) = 1 [pid 1300] <... futex resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 1319] mkdir("./file0", 0777 [pid 1303] open("./bus", O_RDWR [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1319] <... mkdir resumed>) = 0 [pid 1303] <... open resumed>) = 5 [pid 1300] <... futex resumed>) = 0 [pid 375] close(3 [pid 1328] +++ killed by SIGBUS +++ [pid 1319] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1304] +++ killed by SIGBUS +++ [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 1303] <... futex resumed>) = 0 [pid 1300] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1303] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1300] <... futex resumed>) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1304, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1303] <... mmap resumed>) = 0x20000000 [pid 1300] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1330] set_robust_list(0x7f70edcbc9e0, 24 [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1330] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1332 attached [pid 1329] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1303] <... futex resumed>) = 1 [pid 1300] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1332 [pid 1332] set_robust_list(0x5555569495e0, 24 [pid 1303] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1300] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 3 [pid 1332] <... set_robust_list resumed>) = 0 [pid 1303] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1300] <... futex resumed>) = 0 [pid 376] fstat(3, [pid 1332] chdir("./27" [pid 1303] write(4, 0x20000f80, 9 [pid 1300] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1332] <... chdir resumed>) = 0 [pid 1303] <... write resumed>) = 9 [pid 1300] <... futex resumed>) = 0 [pid 376] getdents64(3, [pid 1332] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1303] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1300] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1332] <... prctl resumed>) = 0 [pid 1303] <... futex resumed>) = 0 [pid 1300] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1332] setpgid(0, 0 [pid 1303] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1300] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1332] <... setpgid resumed>) = 0 [pid 1300] <... mprotect resumed>) = 0 [pid 376] lstat("./26/binderfs", [pid 1332] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1300] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1332] <... openat resumed>) = 3 [pid 376] unlink("./26/binderfs" [pid 1332] write(3, "1000", 4 [pid 1300] <... clone resumed>, parent_tid=[1333], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1333 [pid 376] <... unlink resumed>) = 0 [pid 1332] <... write resumed>) = 4 [pid 1300] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1332] close(3 [pid 1300] <... futex resumed>) = 0 [pid 1332] <... close resumed>) = 0 [pid 1300] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1332] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1332] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1332] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1334], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1334 [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1309] <... futex resumed>) = ? [ 30.022748][ T1328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.043170][ T1329] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1306] <... futex resumed>) = ? [pid 1309] +++ killed by SIGBUS +++ [pid 1329] +++ killed by SIGBUS +++ [pid 1306] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1306, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 1334 attached ./strace-static-x86_64: Process 1333 attached [pid 1330] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 373] getdents64(3, [pid 1334] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1333] set_robust_list(0x7f70edcbc9e0, 24 [pid 1310] <... futex resumed>) = ? [pid 1305] <... futex resumed>) = ? [pid 1334] <... set_robust_list resumed>) = 0 [pid 1333] <... set_robust_list resumed>) = 0 [pid 1310] +++ killed by SIGBUS +++ [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./24/binderfs" [pid 1330] +++ killed by SIGBUS +++ [pid 1305] +++ killed by SIGBUS +++ [pid 373] <... unlink resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1305, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./26/binderfs") = 0 [pid 377] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1334] memfd_create("syzkaller", 0) = 3 [pid 1334] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1334] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1334] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1334] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1333] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1303] <... futex resumed>) = ? [pid 1300] <... futex resumed>) = ? [pid 1303] +++ killed by SIGBUS +++ [pid 1333] +++ killed by SIGBUS +++ [pid 1300] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1300, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./25/binderfs") = 0 [pid 374] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1334] <... openat resumed>) = 4 [pid 1334] ioctl(4, LOOP_SET_FD, 3 [pid 376] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./26/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./26") = 0 [pid 376] mkdir("./27", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1334] <... ioctl resumed>) = 0 [pid 1319] <... mount resumed>) = 0 [pid 1334] close(3 [pid 1319] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1319] chdir("./file0") = 0 [pid 1319] ioctl(4, LOOP_CLR_FD [pid 1334] <... close resumed>) = 0 [pid 1334] mkdir("./file0", 0777) = 0 [ 30.059914][ T1330] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.079734][ T1333] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1334] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 1319] <... ioctl resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 1319] close(4 [pid 377] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 1319] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./26/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./26") = 0 [pid 377] mkdir("./27", 0777 [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 1319] <... futex resumed>) = 1 [pid 1318] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1339 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./24/file0" [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 1319] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1318] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] close(3) = 0 [pid 373] rmdir("./24" [pid 1319] <... open resumed>) = 4 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1340 [pid 374] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... rmdir resumed>) = 0 [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./25", 0777 [pid 1319] <... futex resumed>) = 1 [pid 1318] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... mkdir resumed>) = 0 [pid 1319] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1318] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 1319] <... write resumed>) = 9 [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] lstat("./25/file0", [pid 373] ioctl(3, LOOP_CLR_FD [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1341 ./strace-static-x86_64: Process 1340 attached [pid 1340] set_robust_list(0x5555569495e0, 24) = 0 [pid 1319] <... futex resumed>) = 1 [pid 1318] <... futex resumed>) = 0 [pid 1340] chdir("./27" [pid 1319] open("./bus", O_RDWR [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1318] <... futex resumed>) = 0 [pid 1319] <... open resumed>) = 5 [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] <... chdir resumed>) = 0 [pid 1340] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1340] setpgid(0, 0) = 0 [pid 1340] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1340] write(3, "1000", 4 [pid 1319] <... futex resumed>) = 1 [pid 1318] <... futex resumed>) = 0 [pid 1340] <... write resumed>) = 4 [pid 1319] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1340] close(3 [pid 1318] <... futex resumed>) = 0 [pid 1319] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1340] <... close resumed>) = 0 [pid 1319] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1318] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1340] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1319] <... mmap resumed>) = 0x20000000 [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 4 [pid 1319] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 1319] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1318] <... futex resumed>) = 0 [pid 374] fstat(4, [pid 1340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1318] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1319] <... futex resumed>) = 0 [pid 1318] <... futex resumed>) = 1 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1340] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1319] write(4, 0x20000f80, 9 [pid 1318] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] <... mprotect resumed>) = 0 [pid 1340] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1319] <... write resumed>) = 9 [pid 1318] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 1319] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1318] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1340] <... clone resumed>, parent_tid=[1342], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1342 [pid 1319] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1319] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1318] <... mmap resumed>) = 0x7f70edc9c000 [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1318] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] getdents64(4, [pid 1340] <... futex resumed>) = 0 [pid 1318] <... mprotect resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1318] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] close(4) = 0 [pid 1318] <... clone resumed>, parent_tid=[1343], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1343 [pid 374] rmdir("./25/file0" [pid 1318] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1343 attached ) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1318] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1343] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1342 attached ./strace-static-x86_64: Process 1341 attached ./strace-static-x86_64: Process 1339 attached [pid 1343] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 374] getdents64(3, [pid 1342] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1341] set_robust_list(0x5555569495e0, 24 [pid 1339] set_robust_list(0x5555569495e0, 24 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1342] <... set_robust_list resumed>) = 0 [pid 1341] <... set_robust_list resumed>) = 0 [pid 1339] <... set_robust_list resumed>) = 0 [pid 1334] <... mount resumed>) = 0 [pid 1319] <... futex resumed>) = ? [pid 1318] <... futex resumed>) = ? [pid 1334] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1342] memfd_create("syzkaller", 0 [pid 1339] chdir("./27" [pid 1334] <... openat resumed>) = 3 [pid 374] close(3 [pid 1341] chdir("./25" [pid 1334] chdir("./file0") = 0 [pid 1334] ioctl(4, LOOP_CLR_FD) = 0 [pid 1334] close(4) = 0 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1334] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1343] +++ killed by SIGBUS +++ [pid 1342] <... memfd_create resumed>) = 3 [pid 1342] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1341] <... chdir resumed>) = 0 [pid 1339] <... chdir resumed>) = 0 [pid 1332] <... futex resumed>) = 0 [pid 1319] +++ killed by SIGBUS +++ [pid 1318] +++ killed by SIGBUS +++ [pid 374] <... close resumed>) = 0 [pid 1342] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1341] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1339] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./25" [pid 1341] setpgid(0, 0 [pid 1339] <... prctl resumed>) = 0 [pid 1334] <... futex resumed>) = 0 [pid 1332] <... futex resumed>) = 1 [pid 374] <... rmdir resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1318, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1342] <... write resumed>) = 1048576 [pid 1341] <... setpgid resumed>) = 0 [pid 1339] setpgid(0, 0 [pid 1334] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] mkdir("./26", 0777 [pid 372] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1342] munmap(0x7f70edbbd000, 1048576 [pid 1341] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1339] <... setpgid resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1342] <... munmap resumed>) = 0 [pid 1339] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... mkdir resumed>) = 0 [pid 1341] <... openat resumed>) = 3 [pid 372] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1342] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1341] write(3, "1000", 4 [pid 1339] <... openat resumed>) = 3 [pid 1334] <... open resumed>) = 4 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... openat resumed>) = 3 [pid 1342] <... openat resumed>) = 4 [pid 1341] <... write resumed>) = 4 [pid 1339] write(3, "1000", 4 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 372] fstat(3, [pid 1342] ioctl(4, LOOP_SET_FD, 3 [pid 1341] close(3 [pid 1339] <... write resumed>) = 4 [pid 1334] <... futex resumed>) = 1 [pid 1332] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1341] <... close resumed>) = 0 [pid 1339] close(3 [pid 1334] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] getdents64(3, [pid 1341] symlink("/dev/binderfs", "./binderfs" [pid 1339] <... close resumed>) = 0 [pid 1334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1332] <... futex resumed>) = 0 [pid 374] close(3 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1341] <... symlink resumed>) = 0 [pid 1339] symlink("/dev/binderfs", "./binderfs" [pid 1334] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./26/binderfs" [pid 1339] <... symlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1341] <... futex resumed>) = 0 [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1334] <... write resumed>) = 9 [pid 1341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1339] <... futex resumed>) = 0 [pid 1342] <... ioctl resumed>) = 0 [pid 1341] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... close resumed>) = 0 [pid 1342] close(3 [pid 1341] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1339] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1342] <... close resumed>) = 0 [pid 1341] <... mprotect resumed>) = 0 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1339] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1342] mkdir("./file0", 0777) = 0 [pid 1341] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1339] <... mprotect resumed>) = 0 [pid 1342] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1334] <... futex resumed>) = 1 [pid 1332] <... futex resumed>) = 0 [pid 1339] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1334] open("./bus", O_RDWR [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1346 [pid 1332] <... futex resumed>) = 0 [pid 1341] <... clone resumed>, parent_tid=[1347], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1347 [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1334] <... open resumed>) = 5 [pid 1341] <... futex resumed>) = 0 [pid 1339] <... clone resumed>, parent_tid=[1348], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1348 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1334] <... futex resumed>) = 1 [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1334] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1332] <... futex resumed>) = 0 [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1334] <... futex resumed>) = 0 [pid 1332] <... futex resumed>) = 1 [pid 1334] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1332] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1334] <... mmap resumed>) = 0x20000000 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1332] <... futex resumed>) = 0 [pid 1334] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1332] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1334] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1332] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1348 attached ./strace-static-x86_64: Process 1347 attached [pid 1334] write(4, 0x20000f80, 9 [pid 1332] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1346 attached [pid 1348] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1347] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1334] <... write resumed>) = 9 [pid 1332] <... futex resumed>) = 0 [pid 1346] set_robust_list(0x5555569495e0, 24 [pid 1334] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1332] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1334] <... futex resumed>) = 0 [pid 1332] <... mmap resumed>) = 0x7f70edc9c000 [pid 1334] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1332] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1348] <... set_robust_list resumed>) = 0 [pid 1332] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1347] <... set_robust_list resumed>) = 0 [pid 1348] memfd_create("syzkaller", 0 [pid 1347] memfd_create("syzkaller", 0 [pid 1332] <... clone resumed>, parent_tid=[1349], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1349 [pid 1348] <... memfd_create resumed>) = 3 [pid 1347] <... memfd_create resumed>) = 3 [pid 1332] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1347] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1332] <... futex resumed>) = 0 [pid 1347] <... mmap resumed>) = 0x7f70edbbd000 [pid 1332] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1348] <... mmap resumed>) = 0x7f70edbbd000 [pid 1346] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1349 attached [pid 1348] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1347] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1346] chdir("./26" [pid 1349] set_robust_list(0x7f70edcbc9e0, 24 [pid 1346] <... chdir resumed>) = 0 [pid 1349] <... set_robust_list resumed>) = 0 [ 30.208659][ T1343] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1346] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1342] <... mount resumed>) = 0 [pid 1348] <... write resumed>) = 1048576 [pid 1347] <... write resumed>) = 1048576 [pid 1342] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1348] munmap(0x7f70edbbd000, 1048576 [pid 1347] munmap(0x7f70edbbd000, 1048576 [pid 1342] <... openat resumed>) = 3 [pid 1348] <... munmap resumed>) = 0 [pid 1347] <... munmap resumed>) = 0 [pid 1342] chdir("./file0" [pid 1348] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1347] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1342] <... chdir resumed>) = 0 [pid 1342] ioctl(4, LOOP_CLR_FD [pid 1346] <... prctl resumed>) = 0 [pid 1346] setpgid(0, 0) = 0 [pid 1346] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1346] write(3, "1000", 4) = 4 [pid 1346] close(3) = 0 [pid 1346] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1346] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1346] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1352], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1352 [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1352 attached [pid 1352] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1352] memfd_create("syzkaller", 0) = 3 [pid 1352] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1349] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1334] <... futex resumed>) = 230 [pid 1332] <... futex resumed>) = ? [pid 1349] +++ killed by SIGBUS +++ [pid 1334] +++ killed by SIGBUS +++ [pid 1332] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1332, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1352] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./27/binderfs") = 0 [pid 375] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1348] <... openat resumed>) = 4 [pid 1347] <... openat resumed>) = 4 [pid 1342] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1348] ioctl(4, LOOP_SET_FD, 3 [pid 1347] ioctl(4, LOOP_SET_FD, 3 [pid 1342] close(4 [pid 372] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./26/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./26") = 0 [pid 372] mkdir("./27", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1352] <... write resumed>) = 1048576 [pid 1352] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1352] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1348] <... ioctl resumed>) = 0 [pid 1347] <... ioctl resumed>) = 0 [pid 1348] close(3 [pid 1347] close(3 [pid 1348] <... close resumed>) = 0 [pid 1347] <... close resumed>) = 0 [pid 1348] mkdir("./file0", 0777 [pid 1347] mkdir("./file0", 0777 [pid 1348] <... mkdir resumed>) = 0 [pid 1347] <... mkdir resumed>) = 0 [pid 1348] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1347] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1342] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1352] <... openat resumed>) = 4 [pid 1352] ioctl(4, LOOP_SET_FD, 3 [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 1342] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1342] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./27/file0", [pid 1342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1342] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1342] <... open resumed>) = 4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1342] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 1342] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 1342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1342] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 1342] <... write resumed>) = 9 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 1342] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1342] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 1342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 1342] open("./bus", O_RDWR [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./27/file0" [pid 1342] <... open resumed>) = 5 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 1342] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 372] <... close resumed>) = 0 [pid 1348] <... mount resumed>) = 0 [pid 1348] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1348] chdir("./file0") = 0 [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1342] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1340] <... futex resumed>) = 0 [pid 1348] ioctl(4, LOOP_CLR_FD [pid 1342] <... mmap resumed>) = 0x20000000 [pid 1340] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1348] <... ioctl resumed>) = 0 [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 1342] <... futex resumed>) = 1 [pid 1340] <... futex resumed>) = 0 [pid 1342] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1340] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1360 [pid 1342] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] <... futex resumed>) = 0 [pid 375] rmdir("./27" [pid 1342] write(4, 0x20000f80, 9 [pid 1340] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] close(4 [pid 1340] <... futex resumed>) = 0 [ 30.254035][ T1349] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] <... rmdir resumed>) = 0 [pid 1348] <... close resumed>) = 0 [pid 1342] <... write resumed>) = 9 [pid 1340] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] mkdir("./28", 0777 [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1342] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] <... mmap resumed>) = 0x7f70edc9c000 [pid 1348] <... futex resumed>) = 1 [pid 1342] <... futex resumed>) = 0 [pid 1340] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1339] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 1348] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1342] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1340] <... mprotect resumed>) = 0 [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1339] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 1348] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] ioctl(3, LOOP_CLR_FD [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1348] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1352] <... ioctl resumed>) = 0 [pid 1352] close(3) = 0 [pid 1339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1340] <... clone resumed>, parent_tid=[1361], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1361 [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1348] <... futex resumed>) = 0 [pid 1340] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1339] <... futex resumed>) = 1 [pid 375] close(3 [pid 1348] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1340] <... futex resumed>) = 0 [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 1348] <... write resumed>) = 9 [pid 1340] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1352] mkdir("./file0", 0777) = 0 [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1362 [pid 1348] <... futex resumed>) = 1 [pid 1339] <... futex resumed>) = 0 [pid 1348] open("./bus", O_RDWR [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... open resumed>) = 5 [pid 1339] <... futex resumed>) = 0 [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1352] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1348] <... futex resumed>) = 0 [pid 1339] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1348] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1339] <... futex resumed>) = 0 [pid 1348] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1339] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1348] <... mmap resumed>) = 0x20000000 [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1339] <... futex resumed>) = 0 [pid 1348] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1339] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1339] <... futex resumed>) = 0 [pid 1348] write(4, 0x20000f80, 9 [pid 1339] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... write resumed>) = 9 [pid 1339] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1362 attached [pid 1362] set_robust_list(0x5555569495e0, 24) = 0 [pid 1362] chdir("./28") = 0 [pid 1362] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1362] setpgid(0, 0 [pid 1339] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1348] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... setpgid resumed>) = 0 [pid 1362] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1347] <... mount resumed>) = 0 [pid 1339] <... mmap resumed>) = 0x7f70edc9c000 [pid 1348] <... futex resumed>) = 0 [pid 1347] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1362] <... openat resumed>) = 3 [pid 1339] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1362] write(3, "1000", 4 [pid 1348] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1347] <... openat resumed>) = 3 [pid 1339] <... mprotect resumed>) = 0 [pid 1362] <... write resumed>) = 4 [pid 1347] chdir("./file0" [pid 1339] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1362] close(3 [pid 1347] <... chdir resumed>) = 0 [pid 1362] <... close resumed>) = 0 [pid 1347] ioctl(4, LOOP_CLR_FD [pid 1339] <... clone resumed>, parent_tid=[1363], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1363 [pid 1347] <... ioctl resumed>) = 0 [pid 1347] close(4 [pid 1339] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] <... close resumed>) = 0 [pid 1339] <... futex resumed>) = 0 [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1339] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1347] <... futex resumed>) = 1 [pid 1341] <... futex resumed>) = 0 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1341] <... futex resumed>) = 0 [pid 1347] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1362] symlink("/dev/binderfs", "./binderfs" [pid 1347] <... open resumed>) = 4 [pid 1362] <... symlink resumed>) = 0 [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] <... futex resumed>) = 1 [pid 1341] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1361 attached ./strace-static-x86_64: Process 1360 attached [pid 1362] <... futex resumed>) = 0 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1363 attached [pid 1362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1361] set_robust_list(0x7f70edcbc9e0, 24 [pid 1360] set_robust_list(0x5555569495e0, 24 [pid 1347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1341] <... futex resumed>) = 0 [pid 1362] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1362] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1362] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1364], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1364 [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1347] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1347] <... write resumed>) = 9 [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1341] <... futex resumed>) = 0 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1341] <... futex resumed>) = 0 [pid 1361] <... set_robust_list resumed>) = 0 [pid 1360] <... set_robust_list resumed>) = 0 [pid 1347] open("./bus", O_RDWR [pid 1363] set_robust_list(0x7f70edcbc9e0, 24 [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1364 attached [pid 1360] chdir("./27") = 0 [pid 1360] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1360] setpgid(0, 0) = 0 [pid 1360] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1360] write(3, "1000", 4) = 4 [pid 1360] close(3) = 0 [pid 1360] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1360] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1360] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1367], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1367 [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1347] <... open resumed>) = 5 [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1363] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1367 attached [pid 1364] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1361] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1352] <... mount resumed>) = 0 [pid 1341] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1364] <... set_robust_list resumed>) = 0 [pid 1352] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... set_robust_list resumed>) = 0 [pid 1364] memfd_create("syzkaller", 0 [pid 1352] <... openat resumed>) = 3 [pid 1347] <... futex resumed>) = 0 [pid 1341] <... futex resumed>) = 1 [pid 1367] memfd_create("syzkaller", 0 [pid 1364] <... memfd_create resumed>) = 3 [pid 1352] chdir("./file0" [pid 1347] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1341] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... memfd_create resumed>) = 3 [pid 1364] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1352] <... chdir resumed>) = 0 [pid 1347] <... mmap resumed>) = 0x20000000 [pid 1367] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1364] <... mmap resumed>) = 0x7f70edbbd000 [pid 1352] ioctl(4, LOOP_CLR_FD [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... mmap resumed>) = 0x7f70edbbd000 [pid 1364] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1352] <... ioctl resumed>) = 0 [pid 1347] <... futex resumed>) = 1 [pid 1341] <... futex resumed>) = 0 [pid 1363] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1352] close(4 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1342] <... futex resumed>) = ? [pid 1341] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1340] <... futex resumed>) = ? [pid 1352] <... close resumed>) = 0 [pid 1364] <... write resumed>) = 1048576 [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1348] <... futex resumed>) = ? [pid 1347] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1341] <... futex resumed>) = 0 [pid 1339] <... futex resumed>) = ? [pid 1352] <... futex resumed>) = 1 [pid 1346] <... futex resumed>) = 0 [pid 1341] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] write(4, 0x20000f80, 9 [pid 1352] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] <... futex resumed>) = 0 [pid 1364] munmap(0x7f70edbbd000, 1048576 [pid 1346] <... futex resumed>) = 0 [pid 1341] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1341] <... mmap resumed>) = 0x7f70edc9c000 [pid 1352] <... open resumed>) = 4 [pid 1347] <... write resumed>) = 9 [pid 1341] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1347] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] <... futex resumed>) = 1 [pid 1347] <... futex resumed>) = 0 [pid 1346] <... futex resumed>) = 0 [pid 1341] <... mprotect resumed>) = 0 [pid 1347] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1352] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1341] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1364] <... munmap resumed>) = 0 [pid 1364] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1364] ioctl(4, LOOP_SET_FD, 3 [pid 1367] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1369 attached [pid 1352] <... write resumed>) = 9 [pid 1348] +++ killed by SIGBUS +++ [pid 1346] <... futex resumed>) = 0 [pid 1342] +++ killed by SIGBUS +++ [pid 1369] set_robust_list(0x7f70edcbc9e0, 24 [pid 1363] +++ killed by SIGBUS +++ [pid 1367] <... write resumed>) = 1048576 [pid 1361] +++ killed by SIGBUS +++ [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1341] <... clone resumed>, parent_tid=[1369], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1369 [pid 1340] +++ killed by SIGBUS +++ [pid 1339] +++ killed by SIGBUS +++ [pid 1369] <... set_robust_list resumed>) = 0 [pid 1352] <... futex resumed>) = 0 [pid 1346] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1341] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] munmap(0x7f70edbbd000, 1048576 [pid 1364] <... ioctl resumed>) = 0 [pid 1352] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] close(3) = 0 [pid 1364] mkdir("./file0", 0777) = 0 [pid 1364] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1367] <... munmap resumed>) = 0 [pid 1367] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1367] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1367] close(3) = 0 [pid 1367] mkdir("./file0", 0777) = 0 [ 30.339941][ T1361] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.347063][ T1363] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1367] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1369] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1341] <... futex resumed>) = ? [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1339, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 377] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, [pid 1347] <... futex resumed>) = ? [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1340, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] getdents64(3, [pid 1352] open("./bus", O_RDWR [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1352] <... open resumed>) = 5 [pid 1347] +++ killed by SIGBUS +++ [pid 377] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1369] +++ killed by SIGBUS +++ [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1341] +++ killed by SIGBUS +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./27/binderfs" [pid 1352] <... futex resumed>) = 1 [pid 377] <... unlink resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 1346] <... futex resumed>) = 0 [pid 377] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1367] <... mount resumed>) = 0 [pid 1367] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1367] chdir("./file0") = 0 [pid 1367] ioctl(4, LOOP_CLR_FD [pid 1352] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1341, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1352] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1346] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1352] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1346] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1352] <... mmap resumed>) = 0x20000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1364] <... mount resumed>) = 0 [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 1352] <... futex resumed>) = 1 [pid 1346] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] fstat(3, [pid 1352] write(4, 0x20000f80, 9 [pid 1346] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./27/binderfs", [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1367] <... ioctl resumed>) = 0 [pid 1364] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1352] <... write resumed>) = 9 [pid 1346] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] getdents64(3, [pid 1367] close(4 [pid 1352] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1346] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./27/binderfs" [pid 1364] <... openat resumed>) = 3 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1367] <... close resumed>) = 0 [pid 1364] chdir("./file0" [pid 1352] <... futex resumed>) = 0 [pid 1346] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 373] umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... chdir resumed>) = 0 [pid 1367] <... futex resumed>) = 1 [pid 1364] ioctl(4, LOOP_CLR_FD [pid 1360] <... futex resumed>) = 0 [pid 1367] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1364] <... ioctl resumed>) = 0 [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... open resumed>) = 4 [pid 1364] close(4 [pid 1360] <... futex resumed>) = 0 [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... close resumed>) = 0 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... futex resumed>) = 0 [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1364] <... futex resumed>) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... write resumed>) = 9 [pid 1364] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = 0 [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... open resumed>) = 4 [pid 1362] <... futex resumed>) = 0 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... futex resumed>) = 0 [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1360] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] <... futex resumed>) = 0 [pid 1362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1364] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = 0 [pid 1367] open("./bus", O_RDWR [pid 1364] <... write resumed>) = 9 [pid 1362] <... futex resumed>) = 0 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] <... open resumed>) = 5 [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... futex resumed>) = 0 [pid 1362] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1367] <... futex resumed>) = 1 [pid 1364] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = 0 [pid 1367] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1362] <... futex resumed>) = 0 [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1346] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1364] open("./bus", O_RDWR [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1360] <... futex resumed>) = 0 [pid 1352] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1346] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1367] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1364] <... open resumed>) = 5 [pid 1360] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1346] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1367] <... mmap resumed>) = 0x20000000 [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./25/binderfs", [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... futex resumed>) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1346] <... mprotect resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1367] <... futex resumed>) = 1 [pid 1364] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = 0 [pid 1367] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1362] <... futex resumed>) = 0 [pid 1360] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1346] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] unlink("./25/binderfs" [pid 1367] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1364] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1362] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1360] <... futex resumed>) = 0 [pid 1367] write(4, 0x20000f80, 9 [pid 1364] <... mmap resumed>) = 0x20000000 [pid 1360] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1346] <... clone resumed>, parent_tid=[1375], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1375 [pid 373] <... unlink resumed>) = 0 ./strace-static-x86_64: Process 1375 attached [pid 1367] <... write resumed>) = 9 [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... futex resumed>) = 0 [pid 1346] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1367] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1364] <... futex resumed>) = 1 [pid 1362] <... futex resumed>) = 0 [pid 1360] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1346] <... futex resumed>) = 0 [pid 1367] <... futex resumed>) = 0 [pid 1364] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... mmap resumed>) = 0x7f70edc9c000 [pid 1367] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1364] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1362] <... futex resumed>) = 0 [pid 1360] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1346] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1364] write(4, 0x20000f80, 9 [pid 1362] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1360] <... mprotect resumed>) = 0 [pid 1364] <... write resumed>) = 9 [pid 1362] <... futex resumed>) = 0 [pid 1360] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1364] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1364] <... futex resumed>) = 0 [pid 1362] <... mmap resumed>) = 0x7f70edc9c000 [pid 1360] <... clone resumed>, parent_tid=[1376], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1376 [pid 1364] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1362] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1360] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1362] <... mprotect resumed>) = 0 [pid 1360] <... futex resumed>) = 0 [pid 1362] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1360] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1362] <... clone resumed>, parent_tid=[1377], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1377 [pid 1362] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1362] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 30.380148][ T1369] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1375] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1377 attached ./strace-static-x86_64: Process 1376 attached [pid 1377] set_robust_list(0x7f70edcbc9e0, 24 [pid 1376] set_robust_list(0x7f70edcbc9e0, 24 [pid 1377] <... set_robust_list resumed>) = 0 [pid 1376] <... set_robust_list resumed>) = 0 [pid 1375] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1377] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1352] <... futex resumed>) = ? [pid 1346] <... futex resumed>) = ? [pid 1352] +++ killed by SIGBUS +++ [pid 1375] +++ killed by SIGBUS +++ [pid 1346] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1346, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 374] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./26/binderfs") = 0 [pid 374] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1364] <... futex resumed>) = ? [pid 1362] <... futex resumed>) = ? [pid 1364] +++ killed by SIGBUS +++ [pid 1377] +++ killed by SIGBUS +++ [pid 1362] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1362, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./28/binderfs") = 0 [pid 375] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1376] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1367] <... futex resumed>) = ? [pid 1360] <... futex resumed>) = ? [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1367] +++ killed by SIGBUS +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./27/file0" [pid 1376] +++ killed by SIGBUS +++ [pid 1360] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1360, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 377] <... rmdir resumed>) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./27" [pid 372] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... rmdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] mkdir("./28", 0777 [pid 372] <... openat resumed>) = 3 [pid 372] fstat(3, [pid 377] <... mkdir resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./27/binderfs") = 0 [ 30.420471][ T1375] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.428574][ T1377] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.435891][ T1376] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./27/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 377] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 375] lstat("./28/file0", [pid 377] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1378 [pid 375] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./28/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./28") = 0 [pid 375] mkdir("./29", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = 0 [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1379 ./strace-static-x86_64: Process 1379 attached [pid 1379] set_robust_list(0x5555569495e0, 24) = 0 [pid 1379] chdir("./29") = 0 [pid 1379] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1379] setpgid(0, 0) = 0 [pid 1379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1379] write(3, "1000", 4) = 4 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1379] close(3) = 0 [pid 1379] symlink("/dev/binderfs", "./binderfs") = 0 ./strace-static-x86_64: Process 1378 attached [pid 1378] set_robust_list(0x5555569495e0, 24 [pid 373] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 374] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./27/file0", [pid 376] rmdir("./27" [pid 374] lstat("./26/file0", [pid 373] lstat("./25/file0", [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1378] <... set_robust_list resumed>) = 0 [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1378] chdir("./28" [pid 1379] <... futex resumed>) = 0 [pid 1379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 372] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1379] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] <... rmdir resumed>) = 0 [pid 374] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] mkdir("./28", 0777 [pid 373] umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1378] <... chdir resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1379] <... mprotect resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 1379] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 372] fstat(4, [pid 374] fstat(4, [pid 373] fstat(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 372] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 373] close(4 [pid 372] close(4./strace-static-x86_64: Process 1380 attached [pid 1379] <... clone resumed>, parent_tid=[1380], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1380 [pid 1378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1380] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = 1 [pid 1378] <... prctl resumed>) = 0 [pid 374] rmdir("./26/file0" [pid 373] rmdir("./25/file0" [pid 372] rmdir("./27/file0" [pid 1380] memfd_create("syzkaller", 0 [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1380] <... memfd_create resumed>) = 3 [pid 372] <... rmdir resumed>) = 0 [pid 1380] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 373] <... rmdir resumed>) = 0 [pid 1380] <... mmap resumed>) = 0x7f70edbbd000 [pid 1378] setpgid(0, 0 [pid 374] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 372] getdents64(3, [pid 1378] <... setpgid resumed>) = 0 [pid 374] getdents64(3, [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 372] close(3 [pid 1378] <... openat resumed>) = 3 [pid 374] close(3 [pid 373] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1378] write(3, "1000", 4 [pid 374] <... close resumed>) = 0 [pid 373] rmdir("./25" [pid 372] rmdir("./27" [pid 1378] <... write resumed>) = 4 [pid 374] rmdir("./26" [pid 373] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 1380] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1378] close(3) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 373] mkdir("./26", 0777 [pid 372] mkdir("./28", 0777 [pid 1378] symlink("/dev/binderfs", "./binderfs" [pid 374] mkdir("./27", 0777 [pid 373] <... mkdir resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 1378] <... symlink resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1378] <... futex resumed>) = 0 [pid 1380] <... write resumed>) = 1048576 [pid 1378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1380] munmap(0x7f70edbbd000, 1048576 [pid 1378] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1378] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1380] <... munmap resumed>) = 0 [pid 1378] <... mprotect resumed>) = 0 [pid 1380] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1378] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1381 attached [pid 1381] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1378] <... clone resumed>, parent_tid=[1381], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1381 [pid 1381] <... set_robust_list resumed>) = 0 [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1381] memfd_create("syzkaller", 0) = 3 [pid 1381] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1381] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1381] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1381] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 1380] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 1381] ioctl(4, LOOP_SET_FD, 3 [pid 1380] ioctl(4, LOOP_SET_FD, 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 372] ioctl(3, LOOP_CLR_FD [pid 1381] <... ioctl resumed>) = 0 [pid 1380] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1380] close(3 [pid 376] close(3 [pid 374] close(3 [pid 373] close(3 [pid 372] close(3 [pid 1381] close(3 [pid 1380] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1381] <... close resumed>) = 0 [pid 1380] mkdir("./file0", 0777 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1381] mkdir("./file0", 0777 [pid 1380] <... mkdir resumed>) = 0 [pid 1380] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1384 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1385 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1386 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1387 [pid 1381] <... mkdir resumed>) = 0 [pid 1381] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 1384 attached ./strace-static-x86_64: Process 1385 attached ./strace-static-x86_64: Process 1386 attached ./strace-static-x86_64: Process 1387 attached [pid 1387] set_robust_list(0x5555569495e0, 24 [pid 1386] set_robust_list(0x5555569495e0, 24 [pid 1385] set_robust_list(0x5555569495e0, 24 [pid 1384] set_robust_list(0x5555569495e0, 24) = 0 [pid 1385] <... set_robust_list resumed>) = 0 [pid 1387] <... set_robust_list resumed>) = 0 [pid 1386] <... set_robust_list resumed>) = 0 [pid 1384] chdir("./28" [pid 1381] <... mount resumed>) = 0 [pid 1380] <... mount resumed>) = 0 [pid 1380] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1380] chdir("./file0") = 0 [pid 1380] ioctl(4, LOOP_CLR_FD) = 0 [pid 1380] close(4) = 0 [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] chdir("./26" [pid 1385] chdir("./27" [pid 1381] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1387] chdir("./28" [pid 1386] <... chdir resumed>) = 0 [pid 1385] <... chdir resumed>) = 0 [pid 1384] <... chdir resumed>) = 0 [pid 1381] <... openat resumed>) = 3 [pid 1380] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] <... chdir resumed>) = 0 [pid 1386] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1385] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1384] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1381] chdir("./file0" [pid 1380] <... open resumed>) = 4 [pid 1387] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1386] <... prctl resumed>) = 0 [pid 1385] <... prctl resumed>) = 0 [pid 1384] <... prctl resumed>) = 0 [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] <... prctl resumed>) = 0 [pid 1386] setpgid(0, 0 [pid 1385] setpgid(0, 0 [pid 1384] setpgid(0, 0 [pid 1380] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1387] setpgid(0, 0 [pid 1386] <... setpgid resumed>) = 0 [pid 1385] <... setpgid resumed>) = 0 [pid 1384] <... setpgid resumed>) = 0 [pid 1381] <... chdir resumed>) = 0 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] <... setpgid resumed>) = 0 [pid 1386] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1385] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1384] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1381] ioctl(4, LOOP_CLR_FD [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1387] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1386] <... openat resumed>) = 3 [pid 1385] <... openat resumed>) = 3 [pid 1384] <... openat resumed>) = 3 [pid 1381] <... ioctl resumed>) = 0 [pid 1380] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] <... openat resumed>) = 3 [pid 1386] write(3, "1000", 4 [pid 1385] write(3, "1000", 4 [pid 1384] write(3, "1000", 4 [pid 1381] close(4 [pid 1387] write(3, "1000", 4 [pid 1386] <... write resumed>) = 4 [pid 1385] <... write resumed>) = 4 [pid 1384] <... write resumed>) = 4 [pid 1381] <... close resumed>) = 0 [pid 1387] <... write resumed>) = 4 [pid 1386] close(3 [pid 1385] close(3 [pid 1384] close(3 [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] close(3 [pid 1386] <... close resumed>) = 0 [pid 1385] <... close resumed>) = 0 [pid 1384] <... close resumed>) = 0 [pid 1381] <... futex resumed>) = 1 [pid 1378] <... futex resumed>) = 0 [pid 1387] <... close resumed>) = 0 [pid 1386] symlink("/dev/binderfs", "./binderfs" [pid 1385] symlink("/dev/binderfs", "./binderfs" [pid 1384] symlink("/dev/binderfs", "./binderfs" [pid 1381] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] symlink("/dev/binderfs", "./binderfs" [pid 1386] <... symlink resumed>) = 0 [pid 1385] <... symlink resumed>) = 0 [pid 1384] <... symlink resumed>) = 0 [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] <... write resumed>) = 9 [pid 1378] <... futex resumed>) = 0 [pid 1387] <... symlink resumed>) = 0 [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] <... futex resumed>) = 0 [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 1380] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] <... futex resumed>) = 0 [pid 1386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1381] <... open resumed>) = 4 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1386] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1385] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1384] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1387] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1386] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1385] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1384] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1381] <... futex resumed>) = 1 [pid 1380] open("./bus", O_RDWR [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1378] <... futex resumed>) = 0 [pid 1387] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1386] <... mprotect resumed>) = 0 [pid 1385] <... mprotect resumed>) = 0 [pid 1384] <... mprotect resumed>) = 0 [pid 1381] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1380] <... open resumed>) = 5 [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] <... mprotect resumed>) = 0 [pid 1386] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1385] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1384] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1378] <... futex resumed>) = 0 [pid 1387] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1381] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1380] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1386] <... clone resumed>, parent_tid=[1392], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1392 [pid 1385] <... clone resumed>, parent_tid=[1393], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1393 [pid 1384] <... clone resumed>, parent_tid=[1394], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1394 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] <... clone resumed>, parent_tid=[1395], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1395 [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] <... write resumed>) = 9 [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] <... futex resumed>) = 0 [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1387] <... futex resumed>) = 0 [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1381] <... futex resumed>) = 1 [pid 1380] <... mmap resumed>) = 0x20000000 [pid 1378] <... futex resumed>) = 0 [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1381] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1380] <... futex resumed>) = 1 [pid 1379] <... futex resumed>) = 0 [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] open("./bus", O_RDWR [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1378] <... futex resumed>) = 0 [pid 1381] <... open resumed>) = 5 [pid 1380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1379] <... futex resumed>) = 0 [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1380] write(4, 0x20000f80, 9 [pid 1379] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1381] <... futex resumed>) = 0 [pid 1379] <... futex resumed>) = 0 [pid 1379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1381] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1380] <... write resumed>) = 9 [pid 1380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] <... mmap resumed>) = 0x7f70edc9c000 [pid 1378] <... futex resumed>) = 0 [pid 1381] <... mmap resumed>) = 0x20000000 ./strace-static-x86_64: Process 1395 attached [pid 1380] <... futex resumed>) = 0 [pid 1379] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1394 attached [pid 1395] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1380] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1379] <... mprotect resumed>) = 0 [pid 1378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1395] <... set_robust_list resumed>) = 0 [pid 1394] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1381] <... futex resumed>) = 0 [pid 1379] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] memfd_create("syzkaller", 0 [pid 1394] <... set_robust_list resumed>) = 0 [pid 1381] write(4, 0x20000f80, 9 [pid 1378] <... futex resumed>) = 0 [pid 1395] <... memfd_create resumed>) = 3 [pid 1394] memfd_create("syzkaller", 0 [pid 1379] <... clone resumed>, parent_tid=[1396], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1396 [pid 1378] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1393 attached [pid 1395] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1394] <... memfd_create resumed>) = 3 [pid 1381] <... write resumed>) = 9 [pid 1379] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1378] <... futex resumed>) = 0 [pid 1395] <... mmap resumed>) = 0x7f70edbbd000 [pid 1394] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1393] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1379] <... futex resumed>) = 0 [pid 1378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1394] <... mmap resumed>) = 0x7f70edbbd000 [pid 1393] <... set_robust_list resumed>) = 0 [pid 1381] <... futex resumed>) = 0 [pid 1379] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1378] <... mmap resumed>) = 0x7f70edc9c000 [pid 1394] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1393] memfd_create("syzkaller", 0 [pid 1381] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1378] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 1392 attached [pid 1393] <... memfd_create resumed>) = 3 [pid 1378] <... mprotect resumed>) = 0 [pid 1393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1378] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1393] <... mmap resumed>) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1396 attached [pid 1392] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1378] <... clone resumed>, parent_tid=[1397], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1397 [pid 1378] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1396] set_robust_list(0x7f70edcbc9e0, 24 [pid 1392] <... set_robust_list resumed>) = 0 [pid 1378] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1396] <... set_robust_list resumed>) = 0 [pid 1392] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 1397 attached [pid 1397] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1396] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1395] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1394] <... write resumed>) = 1048576 [pid 1393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1394] munmap(0x7f70edbbd000, 1048576 [pid 1393] <... write resumed>) = 1048576 [pid 1392] <... mmap resumed>) = 0x7f70edbbd000 [pid 1394] <... munmap resumed>) = 0 [pid 1394] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1397] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1395] <... write resumed>) = 1048576 [pid 1394] <... openat resumed>) = 4 [pid 1380] <... futex resumed>) = ? [pid 1379] <... futex resumed>) = ? [pid 1394] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1381] <... futex resumed>) = ? [pid 1380] +++ killed by SIGBUS +++ [pid 1378] <... futex resumed>) = ? [pid 1394] close(3) = 0 [pid 1396] +++ killed by SIGBUS +++ [pid 1394] mkdir("./file0", 0777 [pid 1392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1379] +++ killed by SIGBUS +++ [pid 1394] <... mkdir resumed>) = 0 [pid 1381] +++ killed by SIGBUS +++ [pid 1394] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1379, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, [pid 1397] +++ killed by SIGBUS +++ [pid 1378] +++ killed by SIGBUS +++ [pid 1395] munmap(0x7f70edbbd000, 1048576 [pid 1393] munmap(0x7f70edbbd000, 1048576 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 1393] <... munmap resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1378, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1395] <... munmap resumed>) = 0 [pid 377] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1393] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] lstat("./29/binderfs", [pid 1395] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1393] <... openat resumed>) = 4 [pid 377] <... openat resumed>) = 3 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1395] <... openat resumed>) = 4 [pid 1393] ioctl(4, LOOP_SET_FD, 3 [pid 1392] <... write resumed>) = 1048576 [pid 377] fstat(3, [pid 375] unlink("./29/binderfs" [pid 1395] ioctl(4, LOOP_SET_FD, 3 [pid 1393] <... ioctl resumed>) = 0 [pid 1392] munmap(0x7f70edbbd000, 1048576 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... unlink resumed>) = 0 [pid 377] getdents64(3, [pid 375] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1393] close(3 [pid 1392] <... munmap resumed>) = 0 [pid 377] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./28/binderfs", [pid 1393] <... close resumed>) = 0 [pid 1392] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1393] mkdir("./file0", 0777 [pid 377] unlink("./28/binderfs") = 0 [pid 377] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1393] <... mkdir resumed>) = 0 [pid 1393] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1395] <... ioctl resumed>) = 0 [pid 1395] close(3) = 0 [pid 1395] mkdir("./file0", 0777) = 0 [pid 1395] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1394] <... mount resumed>) = 0 [pid 1394] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1394] chdir("./file0") = 0 [pid 1394] ioctl(4, LOOP_CLR_FD [pid 1392] <... openat resumed>) = 4 [pid 1392] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1392] close(3) = 0 [pid 1392] mkdir("./file0", 0777) = 0 [pid 1392] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1393] <... mount resumed>) = 0 [pid 1393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1393] chdir("./file0") = 0 [ 30.859971][ T1396] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.862573][ T1397] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1393] ioctl(4, LOOP_CLR_FD [pid 1394] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 1394] close(4) = 0 [pid 1393] <... ioctl resumed>) = 0 [pid 1393] close(4) = 0 [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./29/file0" [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1385] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./29") = 0 [pid 375] mkdir("./30", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1394] <... futex resumed>) = 1 [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1406 [pid 377] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./28/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1394] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1393] <... futex resumed>) = 0 [pid 1385] <... futex resumed>) = 1 [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 1394] <... open resumed>) = 4 [pid 1393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1384] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./28" [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 1394] <... futex resumed>) = 1 [pid 1384] <... futex resumed>) = 0 [pid 377] mkdir("./29", 0777 [pid 1394] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 1394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] <... open resumed>) = 4 [pid 1384] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1394] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... openat resumed>) = 3 [pid 1394] <... write resumed>) = 9 [pid 1393] <... futex resumed>) = 1 [pid 1385] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1394] <... futex resumed>) = 1 [pid 1393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 377] close(3 [pid 1394] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 1394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] <... write resumed>) = 9 [pid 1384] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1394] open("./bus", O_RDWR [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... open resumed>) = 5 [pid 1393] <... futex resumed>) = 1 [pid 1385] <... futex resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1409 [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1394] <... futex resumed>) = 1 [pid 1393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 1394] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1393] open("./bus", O_RDWR [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] <... open resumed>) = 5 [pid 1384] <... futex resumed>) = 0 [pid 1394] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1394] <... mmap resumed>) = 0x20000000 [pid 1393] <... futex resumed>) = 1 [pid 1385] <... futex resumed>) = 0 [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1394] <... futex resumed>) = 1 [pid 1393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 1394] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1385] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1384] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1394] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1393] <... mmap resumed>) = 0x20000000 [pid 1384] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1406 attached [pid 1395] <... mount resumed>) = 0 [pid 1394] write(4, 0x20000f80, 9 [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... mount resumed>) = 0 [pid 1384] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] set_robust_list(0x5555569495e0, 24 [pid 1395] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1394] <... write resumed>) = 9 [pid 1393] <... futex resumed>) = 1 [pid 1392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1385] <... futex resumed>) = 0 [pid 1384] <... futex resumed>) = 0 [pid 1406] <... set_robust_list resumed>) = 0 [pid 1395] <... openat resumed>) = 3 [pid 1394] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] <... openat resumed>) = 3 [pid 1385] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1406] chdir("./30" [pid 1395] chdir("./file0" [pid 1394] <... futex resumed>) = 0 [pid 1393] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1392] chdir("./file0" [pid 1385] <... futex resumed>) = 0 [pid 1384] <... mmap resumed>) = 0x7f70edc9c000 ./strace-static-x86_64: Process 1409 attached [pid 1395] <... chdir resumed>) = 0 [pid 1394] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1393] write(4, 0x20000f80, 9 [pid 1392] <... chdir resumed>) = 0 [pid 1385] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1409] set_robust_list(0x5555569495e0, 24 [pid 1395] ioctl(4, LOOP_CLR_FD [pid 1393] <... write resumed>) = 9 [pid 1392] ioctl(4, LOOP_CLR_FD [pid 1385] <... futex resumed>) = 0 [pid 1384] <... mprotect resumed>) = 0 [pid 1409] <... set_robust_list resumed>) = 0 [pid 1395] <... ioctl resumed>) = 0 [pid 1393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... ioctl resumed>) = 0 [pid 1385] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1384] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1409] chdir("./29" [pid 1395] close(4 [pid 1393] <... futex resumed>) = 0 [pid 1392] close(4 [pid 1385] <... mmap resumed>) = 0x7f70edc9c000 [pid 1409] <... chdir resumed>) = 0 [pid 1395] <... close resumed>) = 0 [pid 1393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] <... close resumed>) = 0 [pid 1385] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1384] <... clone resumed>, parent_tid=[1412], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1412 [pid 1409] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1385] <... mprotect resumed>) = 0 [pid 1384] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... prctl resumed>) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1392] <... futex resumed>) = 1 [pid 1387] <... futex resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1385] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1384] <... futex resumed>) = 0 [pid 1409] setpgid(0, 0 [pid 1395] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1384] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1387] <... futex resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1385] <... clone resumed>, parent_tid=[1413], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1413 [pid 1395] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1385] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... setpgid resumed>) = 0 [pid 1385] <... futex resumed>) = 0 [pid 1409] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1385] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1409] <... openat resumed>) = 3 [pid 1395] <... open resumed>) = 4 [pid 1392] <... open resumed>) = 4 [pid 1409] write(3, "1000", 4 [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... write resumed>) = 4 [pid 1395] <... futex resumed>) = 1 [pid 1392] <... futex resumed>) = 1 [pid 1387] <... futex resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1409] close(3 [pid 1395] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] <... close resumed>) = 0 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1387] <... futex resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1409] symlink("/dev/binderfs", "./binderfs" [pid 1395] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1392] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1413 attached ./strace-static-x86_64: Process 1412 attached [pid 1409] <... symlink resumed>) = 0 [pid 1413] set_robust_list(0x7f70edcbc9e0, 24 [pid 1412] set_robust_list(0x7f70edcbc9e0, 24 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1413] <... set_robust_list resumed>) = 0 [pid 1412] <... set_robust_list resumed>) = 0 [pid 1409] <... futex resumed>) = 0 [pid 1395] <... write resumed>) = 9 [pid 1392] <... write resumed>) = 9 [pid 1412] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1406] <... chdir resumed>) = 0 [pid 1409] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1394] <... futex resumed>) = ? [pid 1384] <... futex resumed>) = ? [pid 1409] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1394] +++ killed by SIGBUS +++ [pid 1412] +++ killed by SIGBUS +++ [pid 1409] <... mprotect resumed>) = 0 [pid 1384] +++ killed by SIGBUS +++ [pid 1409] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1384, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1409] <... clone resumed>, parent_tid=[1414], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1414 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1414 attached [pid 1414] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1414] memfd_create("syzkaller", 0) = 3 [pid 1414] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] <... restart_syscall resumed>) = 0 [pid 376] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./28/binderfs") = 0 [pid 376] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1414] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... prctl resumed>) = 0 [pid 1395] <... futex resumed>) = 1 [pid 1387] <... futex resumed>) = 0 [pid 1413] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1406] setpgid(0, 0 [pid 1395] open("./bus", O_RDWR [pid 1392] <... futex resumed>) = 1 [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] <... futex resumed>) = 0 [pid 1406] <... setpgid resumed>) = 0 [pid 1395] <... open resumed>) = 5 [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1387] <... futex resumed>) = 0 [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... openat resumed>) = 3 [pid 1395] <... futex resumed>) = 0 [pid 1393] <... futex resumed>) = ? [pid 1392] open("./bus", O_RDWR [pid 1387] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1386] <... futex resumed>) = 0 [pid 1385] <... futex resumed>) = ? [pid 1406] write(3, "1000", 4 [pid 1395] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1393] +++ killed by SIGBUS +++ [pid 1392] <... open resumed>) = 5 [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] <... write resumed>) = 4 [pid 1395] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] <... futex resumed>) = 0 [pid 1395] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1387] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1406] close(3 [pid 1392] <... futex resumed>) = 1 [pid 1386] <... futex resumed>) = 0 [pid 1395] <... mmap resumed>) = 0x20000000 [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... close resumed>) = 0 [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] <... futex resumed>) = 0 [pid 1406] symlink("/dev/binderfs", "./binderfs" [pid 1395] <... futex resumed>) = 1 [pid 1392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1387] <... futex resumed>) = 0 [pid 1386] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1392] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1387] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... symlink resumed>) = 0 [pid 1387] <... futex resumed>) = 0 [pid 1392] <... mmap resumed>) = 0x20000000 [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1395] write(4, 0x20000f80, 9 [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... futex resumed>) = 0 [pid 1395] <... write resumed>) = 9 [pid 1392] <... futex resumed>) = 1 [pid 1387] <... futex resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1395] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1395] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1387] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1386] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1387] <... mmap resumed>) = 0x7f70edc9c000 [pid 1406] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1386] <... futex resumed>) = 0 [pid 1406] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1392] write(4, 0x20000f80, 9 [pid 1387] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1386] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... mprotect resumed>) = 0 [pid 1392] <... write resumed>) = 9 [pid 1387] <... mprotect resumed>) = 0 [pid 1386] <... futex resumed>) = 0 [pid 1406] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1387] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1386] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1406] <... clone resumed>, parent_tid=[1415], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1415 [pid 1392] <... futex resumed>) = 0 [pid 1386] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] <... futex resumed>) = 0 [pid 1387] <... clone resumed>, parent_tid=[1416], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1416 [pid 1386] <... mprotect resumed>) = 0 [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1387] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1386] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1387] <... futex resumed>) = 0 [pid 1387] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1386] <... clone resumed>, parent_tid=[1417], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1417 [pid 1386] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1386] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1415 attached ./strace-static-x86_64: Process 1416 attached [pid 1415] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1416] set_robust_list(0x7f70edcbc9e0, 24 [pid 1413] +++ killed by SIGBUS +++ [pid 1385] +++ killed by SIGBUS +++ [pid 1416] <... set_robust_list resumed>) = 0 [pid 1415] memfd_create("syzkaller", 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1385, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=0} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 1417 attached [pid 1417] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 374] <... restart_syscall resumed>) = 0 [pid 1415] <... memfd_create resumed>) = 3 [ 30.979830][ T1412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 30.987597][ T1413] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1415] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./27/binderfs") = 0 [pid 374] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1416] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1415] <... mmap resumed>) = 0x7f70edbbd000 [pid 1414] <... write resumed>) = 1048576 [pid 1414] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1414] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1415] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1387] <... futex resumed>) = ? [pid 1415] <... write resumed>) = 1048576 [pid 1415] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1415] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1395] <... futex resumed>) = ? [pid 1395] +++ killed by SIGBUS +++ [pid 1416] +++ killed by SIGBUS +++ [pid 1387] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1387, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./28/binderfs") = 0 [pid 372] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1414] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = 0 [pid 1417] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1392] <... futex resumed>) = ? [pid 1386] <... futex resumed>) = ? [pid 1392] +++ killed by SIGBUS +++ [pid 1417] +++ killed by SIGBUS +++ [pid 1386] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1386, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 1414] ioctl(4, LOOP_SET_FD, 3 [pid 373] <... restart_syscall resumed>) = 0 [pid 373] umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./26/binderfs") = 0 [pid 373] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1414] <... ioctl resumed>) = 0 [pid 1414] close(3) = 0 [pid 376] <... openat resumed>) = 4 [pid 1414] mkdir("./file0", 0777 [pid 376] fstat(4, [pid 1415] <... openat resumed>) = 4 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 1414] <... mkdir resumed>) = 0 [pid 1415] ioctl(4, LOOP_SET_FD, 3 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./28/file0" [pid 1414] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./28") = 0 [pid 376] mkdir("./29", 0777) = 0 [ 31.019803][ T1416] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.021002][ T1417] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1415] <... ioctl resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 1415] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 1415] <... close resumed>) = 0 [pid 1414] <... mount resumed>) = 0 [pid 1414] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 374] <... umount2 resumed>) = 0 [pid 1415] mkdir("./file0", 0777 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 1414] <... openat resumed>) = 3 [pid 1415] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1414] chdir("./file0") = 0 [pid 1414] ioctl(4, LOOP_CLR_FD) = 0 [pid 1414] close(4) = 0 [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1409] <... futex resumed>) = 0 [pid 1414] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1414] <... open resumed>) = 4 [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1409] <... futex resumed>) = 0 [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1414] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1409] <... futex resumed>) = 0 [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1414] open("./bus", O_RDWR [pid 1415] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1414] <... open resumed>) = 5 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1409] <... futex resumed>) = 0 [pid 1414] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1414] <... mmap resumed>) = 0x20000000 [pid 1409] <... futex resumed>) = 0 [pid 374] lstat("./27/file0", [pid 373] lstat("./26/file0", [pid 372] lstat("./28/file0", [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1422 [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1414] <... futex resumed>) = 0 [pid 1409] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1414] write(4, 0x20000f80, 9 [pid 1409] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1414] <... write resumed>) = 9 [pid 1409] <... futex resumed>) = 0 [pid 1414] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1409] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1414] <... futex resumed>) = 0 [pid 1409] <... futex resumed>) = 0 [pid 1414] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1409] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1409] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1409] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 373] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 1409] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... openat resumed>) = 4 [pid 1409] <... clone resumed>, parent_tid=[1423], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1423 [pid 1409] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] fstat(4, [pid 373] fstat(4, [pid 372] fstat(4, [pid 1409] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 372] getdents64(4, ./strace-static-x86_64: Process 1422 attached 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, [pid 372] getdents64(4, [pid 374] getdents64(4, [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1422] set_robust_list(0x5555569495e0, 24) = 0 [pid 1422] chdir("./29") = 0 [pid 1422] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1422] setpgid(0, 0) = 0 [pid 1422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] close(4 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 372] close(4 [pid 374] close(4 [pid 1422] <... openat resumed>) = 3 [pid 374] <... close resumed>) = 0 [pid 373] rmdir("./26/file0" [pid 372] <... close resumed>) = 0 [pid 1422] write(3, "1000", 4) = 4 [pid 1422] close(3) = 0 [pid 1422] symlink("/dev/binderfs", "./binderfs" [pid 374] rmdir("./27/file0" [pid 373] <... rmdir resumed>) = 0 [pid 372] rmdir("./28/file0" [pid 1422] <... symlink resumed>) = 0 ./strace-static-x86_64: Process 1423 attached [pid 1423] set_robust_list(0x7f70edcbc9e0, 24 [pid 374] <... rmdir resumed>) = 0 [pid 1423] <... set_robust_list resumed>) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 373] getdents64(3, [pid 372] <... rmdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] getdents64(3, [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 373] close(3 [pid 1423] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1414] <... futex resumed>) = ? [pid 1409] <... futex resumed>) = ? [pid 1414] +++ killed by SIGBUS +++ [pid 374] <... close resumed>) = 0 [pid 372] close(3 [pid 373] <... close resumed>) = 0 [pid 374] rmdir("./27" [pid 372] <... close resumed>) = 0 [pid 373] rmdir("./26" [pid 372] rmdir("./28") = 0 [pid 373] <... rmdir resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 373] mkdir("./27", 0777 [pid 372] mkdir("./29", 0777 [pid 374] mkdir("./28", 0777 [pid 1423] +++ killed by SIGBUS +++ [pid 1409] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1409, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... mkdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, [pid 374] <... mkdir resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] getdents64(3, [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] <... openat resumed>) = 3 [pid 377] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] lstat("./29/binderfs", [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] close(3 [pid 377] unlink("./29/binderfs" [pid 372] close(3 [pid 377] <... unlink resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 377] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1425 [pid 373] <... openat resumed>) = 3 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1424 ./strace-static-x86_64: Process 1425 attached ./strace-static-x86_64: Process 1424 attached [pid 1422] <... futex resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1428 ./strace-static-x86_64: Process 1428 attached [pid 1428] set_robust_list(0x5555569495e0, 24) = 0 [pid 1428] chdir("./27") = 0 [pid 1428] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1428] setpgid(0, 0) = 0 [pid 1428] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1428] write(3, "1000", 4) = 4 [pid 1428] close(3) = 0 [pid 1428] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1428] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1428] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1429], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1429 [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1429 attached [pid 1429] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1429] memfd_create("syzkaller", 0) = 3 [pid 1429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1415] <... mount resumed>) = 0 [pid 1422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1415] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1415] chdir("./file0" [pid 1422] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1415] <... chdir resumed>) = 0 [pid 1415] ioctl(4, LOOP_CLR_FD [pid 1422] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1429] <... mmap resumed>) = 0x7f70edbbd000 [pid 1422] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1425] set_robust_list(0x5555569495e0, 24 [pid 1422] <... clone resumed>, parent_tid=[1430], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1430 [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1425] <... set_robust_list resumed>) = 0 [pid 1424] set_robust_list(0x5555569495e0, 24 [pid 1425] chdir("./28" [pid 1424] <... set_robust_list resumed>) = 0 [pid 1425] <... chdir resumed>) = 0 [pid 1425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1424] chdir("./29" [pid 1425] <... prctl resumed>) = 0 [pid 1424] <... chdir resumed>) = 0 [pid 1425] setpgid(0, 0 [pid 1424] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 1430 attached [pid 1429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1425] <... setpgid resumed>) = 0 [pid 1415] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 1415] close(4 [pid 1425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1415] <... close resumed>) = 0 [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1415] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./29/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./29") = 0 [pid 377] mkdir("./30", 0777 [pid 1415] <... open resumed>) = 4 [pid 377] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1431 [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1415] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 1415] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... write resumed>) = 9 [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1415] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 1415] open("./bus", O_RDWR [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... open resumed>) = 5 [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1415] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 1415] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1406] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] <... mmap resumed>) = 0x20000000 [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1406] <... futex resumed>) = 0 [pid 1415] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1406] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1415] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1406] <... futex resumed>) = 0 [pid 1415] write(4, 0x20000f80, 9 [pid 1406] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1415] <... write resumed>) = 9 [pid 1406] <... mmap resumed>) = 0x7f70edc9c000 [pid 1406] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1415] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1406] <... mprotect resumed>) = 0 [pid 1406] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1425] <... openat resumed>) = 3 [pid 1415] <... futex resumed>) = 0 [pid 1406] <... clone resumed>, parent_tid=[1432], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1432 [pid 1406] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1406] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1415] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] write(3, "1000", 4) = 4 [ 31.173361][ T1423] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1425] close(3./strace-static-x86_64: Process 1432 attached [pid 1432] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1431 attached [pid 1430] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1429] <... write resumed>) = 1048576 [pid 1425] <... close resumed>) = 0 [pid 1424] <... prctl resumed>) = 0 [pid 1430] <... set_robust_list resumed>) = 0 [pid 1425] symlink("/dev/binderfs", "./binderfs" [pid 1424] setpgid(0, 0 [pid 1430] memfd_create("syzkaller", 0 [pid 1425] <... symlink resumed>) = 0 [pid 1424] <... setpgid resumed>) = 0 [pid 1430] <... memfd_create resumed>) = 3 [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1425] <... futex resumed>) = 0 [pid 1424] <... openat resumed>) = 3 [pid 1430] <... mmap resumed>) = 0x7f70edbbd000 [pid 1425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1424] write(3, "1000", 4 [pid 1430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1425] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1424] <... write resumed>) = 4 [pid 1425] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1424] close(3 [pid 1425] <... mprotect resumed>) = 0 [pid 1424] <... close resumed>) = 0 [pid 1432] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1431] set_robust_list(0x5555569495e0, 24 [pid 1429] munmap(0x7f70edbbd000, 1048576 [pid 1425] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1424] symlink("/dev/binderfs", "./binderfs" [pid 1431] <... set_robust_list resumed>) = 0 [pid 1424] <... symlink resumed>) = 0 [pid 1415] <... futex resumed>) = ? [pid 1406] <... futex resumed>) = ? [pid 1431] chdir("./30" [pid 1429] <... munmap resumed>) = 0 [pid 1425] <... clone resumed>, parent_tid=[1433], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1433 [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1415] +++ killed by SIGBUS +++ [pid 1431] <... chdir resumed>) = 0 [pid 1429] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1431] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1429] <... openat resumed>) = 4 [pid 1425] <... futex resumed>) = 0 [pid 1424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1432] +++ killed by SIGBUS +++ [pid 1431] <... prctl resumed>) = 0 [pid 1429] ioctl(4, LOOP_SET_FD, 3 [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1424] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1406] +++ killed by SIGBUS +++ [pid 1431] setpgid(0, 0 [pid 1430] <... write resumed>) = 1048576 [pid 1424] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1406, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- ./strace-static-x86_64: Process 1433 attached [pid 1431] <... setpgid resumed>) = 0 [pid 1430] munmap(0x7f70edbbd000, 1048576 [pid 1429] <... ioctl resumed>) = 0 [pid 1424] <... mprotect resumed>) = 0 [pid 1433] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1431] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1430] <... munmap resumed>) = 0 [pid 1429] close(3 [pid 1433] <... set_robust_list resumed>) = 0 [pid 1431] <... openat resumed>) = 3 [pid 1430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1429] <... close resumed>) = 0 [pid 1433] memfd_create("syzkaller", 0 [pid 1431] write(3, "1000", 4 [pid 1430] <... openat resumed>) = 4 [pid 1429] mkdir("./file0", 0777 [pid 1433] <... memfd_create resumed>) = 3 [pid 1431] <... write resumed>) = 4 [pid 1430] ioctl(4, LOOP_SET_FD, 3 [pid 1424] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1431] close(3 [pid 1429] <... mkdir resumed>) = 0 [pid 1433] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 1436 attached ) = 0x7f70edbbd000 [pid 1431] <... close resumed>) = 0 [pid 1430] <... ioctl resumed>) = 0 [pid 1429] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1436] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1431] symlink("/dev/binderfs", "./binderfs" [pid 1430] close(3 [pid 1424] <... clone resumed>, parent_tid=[1436], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1436 [pid 1430] <... close resumed>) = 0 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1431] <... symlink resumed>) = 0 [pid 1430] mkdir("./file0", 0777 [pid 1424] <... futex resumed>) = 0 [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... mkdir resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1431] <... futex resumed>) = 0 [pid 1430] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./30/binderfs", [pid 1431] <... mmap resumed>) = 0x7f70f5fbd000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1431] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] unlink("./30/binderfs" [pid 1436] <... set_robust_list resumed>) = 0 [pid 1431] <... mprotect resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1436] memfd_create("syzkaller", 0 [pid 1433] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1431] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1436] <... memfd_create resumed>) = 3 [pid 1436] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1431] <... clone resumed>, parent_tid=[1437], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1437 [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1436] <... mmap resumed>) = 0x7f70edbbd000 [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1437 attached [pid 1437] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1437] memfd_create("syzkaller", 0) = 3 [pid 1437] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1433] <... write resumed>) = 1048576 [pid 1433] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1433] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1436] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1429] <... mount resumed>) = 0 [pid 1437] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1430] <... mount resumed>) = 0 [pid 1429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1429] <... openat resumed>) = 3 [pid 1430] <... openat resumed>) = 3 [pid 1429] chdir("./file0" [pid 1430] chdir("./file0" [pid 1429] <... chdir resumed>) = 0 [pid 1430] <... chdir resumed>) = 0 [pid 1429] ioctl(4, LOOP_CLR_FD [pid 1430] ioctl(4, LOOP_CLR_FD [pid 1436] <... write resumed>) = 1048576 [pid 1436] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1436] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1437] <... write resumed>) = 1048576 [pid 1436] <... openat resumed>) = 4 [pid 1433] <... openat resumed>) = 4 [pid 1430] <... ioctl resumed>) = 0 [pid 1429] <... ioctl resumed>) = 0 [pid 1433] ioctl(4, LOOP_SET_FD, 3 [pid 1430] close(4 [pid 1429] close(4 [pid 1436] ioctl(4, LOOP_SET_FD, 3 [pid 1437] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1437] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1433] <... ioctl resumed>) = 0 [pid 1430] <... close resumed>) = 0 [pid 1429] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 1433] close(3 [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... close resumed>) = 0 [pid 1430] <... futex resumed>) = 1 [pid 1429] <... futex resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1433] mkdir("./file0", 0777 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... mkdir resumed>) = 0 [pid 1428] <... futex resumed>) = 0 [pid 1422] <... futex resumed>) = 0 [pid 375] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1433] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... open resumed>) = 4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1430] <... futex resumed>) = 0 [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 1 [pid 375] lstat("./30/file0", [pid 1430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1429] <... futex resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1436] <... ioctl resumed>) = 0 [pid 1430] <... open resumed>) = 4 [pid 1429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [ 31.232410][ T1432] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1436] close(3 [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] <... futex resumed>) = 0 [pid 375] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1436] <... close resumed>) = 0 [pid 1430] <... futex resumed>) = 1 [pid 1429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 1437] <... openat resumed>) = 4 [pid 1436] mkdir("./file0", 0777 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] <... write resumed>) = 9 [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 1437] ioctl(4, LOOP_SET_FD, 3 [pid 1436] <... mkdir resumed>) = 0 [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1430] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1429] <... futex resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(4, [pid 1430] <... write resumed>) = 9 [pid 1429] open("./bus", O_RDWR [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./30/file0" [pid 1436] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... open resumed>) = 5 [pid 1428] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 1430] <... futex resumed>) = 1 [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 1437] <... ioctl resumed>) = 0 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] <... futex resumed>) = 0 [pid 1428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3 [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./30" [pid 1430] open("./bus", O_RDWR [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] <... futex resumed>) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... rmdir resumed>) = 0 [pid 1430] <... open resumed>) = 5 [pid 1429] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1428] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdir("./31", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... mmap resumed>) = 0x20000000 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1437] close(3 [pid 1430] <... futex resumed>) = 1 [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 0 [pid 375] close(3 [pid 1437] <... close resumed>) = 0 [pid 1433] <... mount resumed>) = 0 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] <... futex resumed>) = 1 [pid 1428] <... futex resumed>) = 0 [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 1437] mkdir("./file0", 0777 [pid 1433] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1437] <... mkdir resumed>) = 0 [pid 1436] <... mount resumed>) = 0 [pid 1433] <... openat resumed>) = 3 [pid 1430] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1429] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1428] <... futex resumed>) = 0 [pid 1422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1436] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1433] chdir("./file0" [pid 1430] <... mmap resumed>) = 0x20000000 [pid 1429] write(4, 0x20000f80, 9 [pid 1428] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... openat resumed>) = 3 [pid 1433] <... chdir resumed>) = 0 [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1429] <... write resumed>) = 9 [pid 1428] <... futex resumed>) = 0 [pid 1436] chdir("./file0" [pid 1433] ioctl(4, LOOP_CLR_FD [pid 1430] <... futex resumed>) = 1 [pid 1429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1422] <... futex resumed>) = 0 [pid 1436] <... chdir resumed>) = 0 [pid 1433] <... ioctl resumed>) = 0 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1429] <... futex resumed>) = 0 [pid 1428] <... mmap resumed>) = 0x7f70edc9c000 [pid 1422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1449 [pid 1436] ioctl(4, LOOP_CLR_FD [pid 1433] close(4 [pid 1430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1422] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1449 attached [pid 1436] <... ioctl resumed>) = 0 [pid 1433] <... close resumed>) = 0 [pid 1449] set_robust_list(0x5555569495e0, 24 [pid 1436] close(4 [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] write(4, 0x20000f80, 9 [pid 1428] <... mprotect resumed>) = 0 [pid 1422] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... set_robust_list resumed>) = 0 [pid 1436] <... close resumed>) = 0 [pid 1449] chdir("./31" [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... futex resumed>) = 0 [pid 1449] <... chdir resumed>) = 0 [pid 1436] <... futex resumed>) = 1 [pid 1433] <... futex resumed>) = 1 [pid 1430] <... write resumed>) = 9 [pid 1428] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1425] <... futex resumed>) = 0 [pid 1424] <... futex resumed>) = 0 [pid 1422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1449] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1436] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1422] <... mmap resumed>) = 0x7f70edc9c000 [pid 1449] <... prctl resumed>) = 0 [pid 1436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1430] <... futex resumed>) = 0 [pid 1428] <... clone resumed>, parent_tid=[1450], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1450 [pid 1425] <... futex resumed>) = 0 [pid 1424] <... futex resumed>) = 0 [pid 1422] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 1450 attached [pid 1449] setpgid(0, 0 [pid 1436] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1433] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1449] <... setpgid resumed>) = 0 [pid 1449] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1449] write(3, "1000", 4) = 4 [pid 1430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1428] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] <... mprotect resumed>) = 0 [pid 1449] close(3) = 0 [pid 1428] <... futex resumed>) = 0 [pid 1450] set_robust_list(0x7f70edcbc9e0, 24 [pid 1449] symlink("/dev/binderfs", "./binderfs" [pid 1436] <... open resumed>) = 4 [pid 1433] <... open resumed>) = 4 [pid 1428] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1422] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1450] <... set_robust_list resumed>) = 0 [pid 1449] <... symlink resumed>) = 0 [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1453 attached [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] <... mount resumed>) = 0 [pid 1436] <... futex resumed>) = 1 [pid 1424] <... futex resumed>) = 0 [pid 1453] set_robust_list(0x7f70edcbc9e0, 24 [pid 1449] <... futex resumed>) = 0 [pid 1437] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1453] <... set_robust_list resumed>) = 0 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1437] <... openat resumed>) = 3 [pid 1453] futex(0x7f70f60b67b8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1437] chdir("./file0" [pid 1449] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1437] <... chdir resumed>) = 0 [pid 1449] <... mprotect resumed>) = 0 [pid 1437] ioctl(4, LOOP_CLR_FD [pid 1449] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1437] <... ioctl resumed>) = 0 [pid 1437] close(4 [pid 1449] <... clone resumed>, parent_tid=[1454], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1454 [pid 1437] <... close resumed>) = 0 [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] <... futex resumed>) = 0 [pid 1437] <... futex resumed>) = 1 [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1437] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] <... futex resumed>) = 1 [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1422] <... clone resumed>, parent_tid=[1453], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1453 [pid 1422] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] <... futex resumed>) = 0 [pid 1422] <... futex resumed>) = 1 [pid 1436] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1431] <... futex resumed>) = 0 [pid 1425] <... futex resumed>) = 0 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... write resumed>) = 9 [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1437] <... futex resumed>) = 0 [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... futex resumed>) = 0 [pid 1431] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 1 [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1436] <... futex resumed>) = 0 [pid 1433] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1436] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] <... write resumed>) = 9 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1436] open("./bus", O_RDWR [pid 1433] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1436] <... open resumed>) = 5 [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1425] <... futex resumed>) = 0 [pid 1436] <... futex resumed>) = 1 [pid 1433] open("./bus", O_RDWR [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 0 [pid 1436] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] <... open resumed>) = 5 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1436] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1433] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1436] <... mmap resumed>) = 0x20000000 [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1425] <... futex resumed>) = 0 [pid 1436] <... futex resumed>) = 1 [pid 1433] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1424] <... futex resumed>) = 0 [pid 1436] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] <... mmap resumed>) = 0x20000000 [pid 1424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1436] write(4, 0x20000f80, 9 [pid 1433] <... futex resumed>) = 1 [pid 1425] <... futex resumed>) = 0 [pid 1424] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1436] <... write resumed>) = 9 [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... futex resumed>) = 0 [pid 1436] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1433] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1425] <... futex resumed>) = 0 [pid 1424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1436] <... futex resumed>) = 0 [pid 1433] write(4, 0x20000f80, 9 [pid 1425] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1424] <... mmap resumed>) = 0x7f70edc9c000 [pid 1436] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1433] <... write resumed>) = 9 [pid 1425] <... futex resumed>) = 0 [pid 1424] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1433] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1424] <... mprotect resumed>) = 0 [pid 1433] <... futex resumed>) = 0 [pid 1425] <... mmap resumed>) = 0x7f70edc9c000 [pid 1424] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1433] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1425] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1424] <... clone resumed>, parent_tid=[1455], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1455 [pid 1425] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1424] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1454 attached ) = 0 [pid 1454] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1425] <... clone resumed>, parent_tid=[1456], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1456 [pid 1424] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] <... set_robust_list resumed>) = 0 [pid 1425] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1454] memfd_create("syzkaller", 0 [pid 1425] <... futex resumed>) = 0 [pid 1454] <... memfd_create resumed>) = 3 [pid 1425] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1454] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1454] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1456 attached [pid 1456] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1422] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... open resumed>) = 4 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 ./strace-static-x86_64: Process 1455 attached [pid 1437] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1453] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1450] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1431] <... futex resumed>) = 0 [pid 1437] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... write resumed>) = 9 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1437] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1431] <... futex resumed>) = 0 [pid 1437] open("./bus", O_RDWR [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... open resumed>) = 5 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1437] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1437] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1431] <... futex resumed>) = 0 [pid 1437] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1431] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1437] <... mmap resumed>) = 0x20000000 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1455] set_robust_list(0x7f70edcbc9e0, 24 [pid 1454] <... write resumed>) = 1048576 [pid 1437] <... futex resumed>) = 1 [pid 1431] <... futex resumed>) = 0 [pid 1422] <... futex resumed>) = ? [pid 1455] <... set_robust_list resumed>) = 0 [ 31.332147][ T1450] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.345215][ T1453] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.366565][ T1456] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1454] munmap(0x7f70edbbd000, 1048576 [pid 1437] write(4, 0x20000f80, 9 [pid 1431] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1430] <... futex resumed>) = ? [pid 1429] <... futex resumed>) = ? [pid 1428] <... futex resumed>) = ? [pid 1431] <... futex resumed>) = 0 [pid 1430] +++ killed by SIGBUS +++ [pid 1429] +++ killed by SIGBUS +++ [pid 1453] +++ killed by SIGBUS +++ [pid 1450] +++ killed by SIGBUS +++ [pid 1431] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1428] +++ killed by SIGBUS +++ [pid 1422] +++ killed by SIGBUS +++ [pid 1431] <... futex resumed>) = 0 [pid 1431] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1431] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1431] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1457], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1457 [pid 1431] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1431] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1457 attached [pid 1457] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1456] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1455] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1454] <... munmap resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1428, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1454] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1422, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1454] <... openat resumed>) = 4 [pid 376] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1454] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] lstat("./29/binderfs", [pid 373] <... openat resumed>) = 3 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] fstat(3, [pid 376] unlink("./29/binderfs" [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... unlink resumed>) = 0 [pid 373] getdents64(3, [pid 376] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./27/binderfs") = 0 [pid 373] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1437] <... write resumed>) = 9 [pid 1437] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1437] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1454] <... ioctl resumed>) = 0 [pid 1454] close(3) = 0 [pid 1454] mkdir("./file0", 0777) = 0 [pid 1454] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1457] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1437] <... futex resumed>) = ? [pid 1436] <... futex resumed>) = ? [pid 1433] <... futex resumed>) = ? [pid 1431] <... futex resumed>) = ? [pid 1425] <... futex resumed>) = ? [pid 1424] <... futex resumed>) = ? [pid 1436] +++ killed by SIGBUS +++ [pid 1433] +++ killed by SIGBUS +++ [pid 1455] +++ killed by SIGBUS +++ [pid 1424] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1424, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1456] +++ killed by SIGBUS +++ [pid 1425] +++ killed by SIGBUS +++ [pid 372] <... restart_syscall resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1425, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1437] +++ killed by SIGBUS +++ [pid 374] <... openat resumed>) = 3 [pid 372] <... openat resumed>) = 3 [pid 374] fstat(3, [pid 372] fstat(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./28/binderfs", [pid 372] lstat("./29/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./28/binderfs" [pid 372] unlink("./29/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 374] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1457] +++ killed by SIGBUS +++ [pid 1431] +++ killed by SIGBUS +++ [pid 1454] <... mount resumed>) = 0 [pid 1454] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1431, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1454] <... openat resumed>) = 3 [pid 1454] chdir("./file0") = 0 [pid 377] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1454] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./30/binderfs") = 0 [ 31.369346][ T1455] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.385740][ T1457] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./27/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./27") = 0 [pid 373] mkdir("./28", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1454] <... ioctl resumed>) = 0 [pid 1454] close(4) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1454] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] lstat("./29/file0", [pid 1454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1454] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1454] <... open resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1454] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 1454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1454] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 1454] <... write resumed>) = 9 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 1454] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 1454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1454] open("./bus", O_RDWR [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./29/file0" [pid 1454] <... open resumed>) = 5 [pid 376] <... rmdir resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 1454] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 1454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1454] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1449] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./29" [pid 1454] <... mmap resumed>) = 0x20000000 [pid 376] <... rmdir resumed>) = 0 [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mkdir("./30", 0777 [pid 1454] <... futex resumed>) = 1 [pid 1449] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1454] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1449] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 1454] write(4, 0x20000f80, 9 [pid 1449] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1454] <... write resumed>) = 9 [pid 1449] <... futex resumed>) = 0 [pid 377] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1454] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1449] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] close(3 [pid 373] close(3 [pid 1454] <... futex resumed>) = 0 [pid 1449] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] lstat("./30/file0", [pid 376] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1454] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1449] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... close resumed>) = 0 [pid 1449] <... mprotect resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] lstat("./28/file0", [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] lstat("./29/file0", ./strace-static-x86_64: Process 1462 attached ./strace-static-x86_64: Process 1461 attached [pid 1449] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1461] set_robust_list(0x5555569495e0, 24 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1461 [pid 374] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1462 [pid 372] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1461] <... set_robust_list resumed>) = 0 [pid 1449] <... clone resumed>, parent_tid=[1463], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1463 [pid 377] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1461] chdir("./30" [pid 1449] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 4 [pid 374] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1461] <... chdir resumed>) = 0 [pid 1449] <... futex resumed>) = 0 [pid 377] fstat(4, [pid 374] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 1461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1449] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] fstat(4, [pid 372] fstat(4, [pid 1461] <... prctl resumed>) = 0 [pid 377] getdents64(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 372] getdents64(4, [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] getdents64(4, [pid 372] getdents64(4, [pid 377] close(4 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1461] setpgid(0, 0 [pid 377] <... close resumed>) = 0 [pid 374] close(4 [pid 372] close(4 [pid 1461] <... setpgid resumed>) = 0 [pid 377] rmdir("./30/file0" [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... rmdir resumed>) = 0 [pid 374] rmdir("./28/file0" [pid 372] rmdir("./29/file0" [pid 1461] <... openat resumed>) = 3 [pid 377] getdents64(3, [pid 374] <... rmdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 1462] set_robust_list(0x5555569495e0, 24 [pid 1461] write(3, "1000", 4 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(3, [pid 372] getdents64(3, [pid 1461] <... write resumed>) = 4 [pid 377] close(3 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 1463 attached [pid 1461] close(3 [pid 377] <... close resumed>) = 0 [pid 374] close(3 [pid 372] close(3 [pid 1463] set_robust_list(0x7f70edcbc9e0, 24 [pid 1461] <... close resumed>) = 0 [pid 377] rmdir("./30" [pid 374] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 1463] <... set_robust_list resumed>) = 0 [pid 1461] symlink("/dev/binderfs", "./binderfs" [pid 377] <... rmdir resumed>) = 0 [pid 374] rmdir("./28" [pid 372] rmdir("./29" [pid 1462] <... set_robust_list resumed>) = 0 [pid 1461] <... symlink resumed>) = 0 [pid 377] mkdir("./31", 0777 [pid 1462] chdir("./28" [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... chdir resumed>) = 0 [pid 1461] <... futex resumed>) = 0 [pid 1462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1462] <... prctl resumed>) = 0 [pid 1461] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1462] setpgid(0, 0 [pid 1461] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1462] <... setpgid resumed>) = 0 [pid 1461] <... mprotect resumed>) = 0 [pid 1462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1461] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1462] <... openat resumed>) = 3 [pid 1462] write(3, "1000", 4 [pid 1461] <... clone resumed>, parent_tid=[1464], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1464 [pid 1462] <... write resumed>) = 4 [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] close(3 [pid 1461] <... futex resumed>) = 0 [pid 1462] <... close resumed>) = 0 [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1462] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1462] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1462] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1465], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1465 [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./29", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3./strace-static-x86_64: Process 1465 attached ./strace-static-x86_64: Process 1464 attached [pid 1463] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 377] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 1465] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1464] set_robust_list(0x7f70f5fdd9e0, 24 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 372] mkdir("./30", 0777 [pid 1465] <... set_robust_list resumed>) = 0 [pid 1464] <... set_robust_list resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 372] <... mkdir resumed>) = 0 [pid 1465] memfd_create("syzkaller", 0 [pid 1464] memfd_create("syzkaller", 0 [pid 1454] <... futex resumed>) = ? [pid 1449] <... futex resumed>) = ? [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1465] <... memfd_create resumed>) = 3 [pid 1464] <... memfd_create resumed>) = 3 [pid 1454] +++ killed by SIGBUS +++ [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... openat resumed>) = 3 ./strace-static-x86_64: Process 1466 attached [pid 1465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 377] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 1465] <... mmap resumed>) = 0x7f70edbbd000 [pid 1464] <... mmap resumed>) = 0x7f70edbbd000 [pid 1463] +++ killed by SIGBUS +++ [pid 1449] +++ killed by SIGBUS +++ [pid 377] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1466] set_robust_list(0x5555569495e0, 24 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1466 [pid 1466] <... set_robust_list resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1449, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 1466] chdir("./29" [pid 375] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1466] <... chdir resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1466] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1466] <... prctl resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 1466] setpgid(0, 0 [pid 375] fstat(3, [pid 1466] <... setpgid resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1466] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] getdents64(3, [pid 1466] <... openat resumed>) = 3 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1466] write(3, "1000", 4 [pid 375] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1466] <... write resumed>) = 4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1466] close(3 [pid 375] lstat("./31/binderfs", [pid 1466] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1466] symlink("/dev/binderfs", "./binderfs" [pid 375] unlink("./31/binderfs" [pid 1466] <... symlink resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1466] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] close(3 [pid 1466] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1466] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1466] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1467], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1467 [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1468 attached ./strace-static-x86_64: Process 1467 attached [pid 1465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... close resumed>) = 0 [pid 1468] set_robust_list(0x5555569495e0, 24 [pid 1467] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1467] memfd_create("syzkaller", 0) = 3 [pid 1467] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1465] <... write resumed>) = 1048576 [pid 1464] <... write resumed>) = 1048576 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1468 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1468] <... set_robust_list resumed>) = 0 [pid 1468] chdir("./31" [pid 1465] munmap(0x7f70edbbd000, 1048576 [pid 1464] munmap(0x7f70edbbd000, 1048576 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1469 [pid 1468] <... chdir resumed>) = 0 [pid 1468] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1465] <... munmap resumed>) = 0 [pid 1468] setpgid(0, 0) = 0 [pid 1465] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1468] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1467] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1468] write(3, "1000", 4 [pid 1464] <... munmap resumed>) = 0 [pid 1468] <... write resumed>) = 4 [pid 1464] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1468] close(3) = 0 [pid 1468] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1468] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1468] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1470], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1470 [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1470 attached [pid 1470] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1470] memfd_create("syzkaller", 0) = 3 [pid 1470] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1469 attached [pid 1469] set_robust_list(0x5555569495e0, 24) = 0 [pid 1469] chdir("./30") = 0 [pid 1469] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1469] setpgid(0, 0) = 0 [pid 1469] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1469] write(3, "1000", 4) = 4 [pid 1469] close(3) = 0 [pid 1469] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1469] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1469] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1471], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1471 [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1467] <... write resumed>) = 1048576 [pid 1467] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1467] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 1471 attached [pid 1471] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1470] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1471] memfd_create("syzkaller", 0) = 3 [pid 1471] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1470] <... write resumed>) = 1048576 [pid 1470] munmap(0x7f70edbbd000, 1048576) = 0 [ 31.756489][ T1463] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1470] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1471] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1471] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1471] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1465] <... openat resumed>) = 4 [pid 1464] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = 0 [pid 1467] <... openat resumed>) = 4 [pid 375] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1467] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1465] ioctl(4, LOOP_SET_FD, 3 [pid 1467] <... ioctl resumed>) = 0 [pid 1464] ioctl(4, LOOP_SET_FD, 3 [pid 375] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1467] close(3 [pid 375] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1467] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1467] mkdir("./file0", 0777 [pid 375] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1465] <... ioctl resumed>) = 0 [pid 1465] close(3) = 0 [pid 1465] mkdir("./file0", 0777 [pid 1467] <... mkdir resumed>) = 0 [pid 1465] <... mkdir resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 1467] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] fstat(4, [pid 1465] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1470] <... openat resumed>) = 4 [pid 375] getdents64(4, [pid 1471] <... openat resumed>) = 4 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 1464] <... ioctl resumed>) = 0 [pid 1464] close(3) = 0 [pid 1464] mkdir("./file0", 0777) = 0 [pid 1464] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1471] ioctl(4, LOOP_SET_FD, 3 [pid 1470] ioctl(4, LOOP_SET_FD, 3 [pid 375] close(4) = 0 [pid 375] rmdir("./31/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./31") = 0 [pid 375] mkdir("./32", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1471] <... ioctl resumed>) = 0 [pid 1471] close(3) = 0 [pid 1471] mkdir("./file0", 0777) = 0 [pid 1470] <... ioctl resumed>) = 0 [pid 1471] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1470] close(3 [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1478 [pid 1470] <... close resumed>) = 0 [pid 1470] mkdir("./file0", 0777) = 0 [pid 1470] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1465] <... mount resumed>) = 0 [pid 1465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1465] chdir("./file0") = 0 [pid 1465] ioctl(4, LOOP_CLR_FD) = 0 [pid 1465] close(4) = 0 [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1462] <... futex resumed>) = 0 [pid 1465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] <... futex resumed>) = 0 [pid 1465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... mount resumed>) = 0 [pid 1465] <... open resumed>) = 4 [pid 1471] <... mount resumed>) = 0 [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1462] <... futex resumed>) = 0 [pid 1465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] <... futex resumed>) = 0 [pid 1467] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1465] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] <... openat resumed>) = 3 [pid 1467] chdir("./file0") = 0 [pid 1467] ioctl(4, LOOP_CLR_FD) = 0 [pid 1467] close(4) = 0 [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1466] <... futex resumed>) = 0 [pid 1467] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1471] chdir("./file0") = 0 [pid 1467] <... open resumed>) = 4 [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1466] <... futex resumed>) = 0 [pid 1467] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] ioctl(4, LOOP_CLR_FD) = 0 [pid 1467] <... write resumed>) = 9 [pid 1465] <... write resumed>) = 9 [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1466] <... futex resumed>) = 0 [pid 1465] <... futex resumed>) = 1 [pid 1462] <... futex resumed>) = 0 [pid 1467] open("./bus", O_RDWR [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1467] <... open resumed>) = 5 [pid 1466] <... futex resumed>) = 0 [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1465] open("./bus", O_RDWR [pid 1462] <... futex resumed>) = 0 [pid 1467] <... futex resumed>) = 0 [pid 1466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1465] <... open resumed>) = 5 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1467] <... mmap resumed>) = 0x20000000 [pid 1466] <... futex resumed>) = 0 [pid 1465] <... futex resumed>) = 0 [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1465] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1462] <... futex resumed>) = 0 [pid 1467] <... futex resumed>) = 0 [pid 1466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1467] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1466] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1467] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1466] <... futex resumed>) = 0 [pid 1465] <... mmap resumed>) = 0x20000000 [pid 1462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1467] write(4, 0x20000f80, 9 [pid 1466] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... futex resumed>) = 0 [pid 1462] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1471] close(4 [pid 1467] <... write resumed>) = 9 [pid 1466] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1465] <... futex resumed>) = 0 [pid 1462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1467] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] <... mmap resumed>) = 0x7f70edc9c000 [pid 1465] write(4, 0x20000f80, 9 [pid 1462] <... futex resumed>) = 0 [pid 1467] <... futex resumed>) = 0 [pid 1466] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1467] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1466] <... mprotect resumed>) = 0 [pid 1462] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1466] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1462] <... futex resumed>) = 0 [pid 1462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1466] <... clone resumed>, parent_tid=[1488], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1488 [pid 1462] <... mmap resumed>) = 0x7f70edc9c000 [pid 1466] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1462] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1466] <... futex resumed>) = 0 [pid 1462] <... mprotect resumed>) = 0 [pid 1466] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1462] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1489 attached , parent_tid=[1489], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1489 [pid 1489] set_robust_list(0x7f70edcbc9e0, 24 [pid 1462] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] <... set_robust_list resumed>) = 0 [pid 1462] <... futex resumed>) = 0 [pid 1462] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1488 attached ./strace-static-x86_64: Process 1478 attached [pid 1489] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1471] <... close resumed>) = 0 [pid 1470] <... mount resumed>) = 0 [pid 1465] <... write resumed>) = 9 [pid 1488] set_robust_list(0x7f70edcbc9e0, 24 [pid 1478] set_robust_list(0x5555569495e0, 24 [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... mount resumed>) = 0 [pid 1488] <... set_robust_list resumed>) = 0 [pid 1478] <... set_robust_list resumed>) = 0 [pid 1471] <... futex resumed>) = 1 [pid 1470] <... openat resumed>) = 3 [pid 1469] <... futex resumed>) = 0 [pid 1465] <... futex resumed>) = 0 [pid 1464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1470] chdir("./file0" [pid 1464] <... openat resumed>) = 3 [pid 1462] <... futex resumed>) = ? [pid 1470] <... chdir resumed>) = 0 [pid 1464] chdir("./file0" [pid 1470] ioctl(4, LOOP_CLR_FD [pid 1464] <... chdir resumed>) = 0 [pid 1470] <... ioctl resumed>) = 0 [pid 1464] ioctl(4, LOOP_CLR_FD [pid 1470] close(4 [pid 1464] <... ioctl resumed>) = 0 [pid 1470] <... close resumed>) = 0 [pid 1464] close(4 [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... close resumed>) = 0 [pid 1470] <... futex resumed>) = 1 [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1461] <... futex resumed>) = 0 [pid 1470] <... open resumed>) = 4 [pid 1464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... open resumed>) = 4 [pid 1470] <... futex resumed>) = 1 [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1461] <... futex resumed>) = 0 [pid 1470] <... write resumed>) = 9 [pid 1464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... write resumed>) = 9 [pid 1470] <... futex resumed>) = 1 [pid 1468] <... futex resumed>) = 0 [pid 1465] +++ killed by SIGBUS +++ [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] open("./bus", O_RDWR [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1461] <... futex resumed>) = 0 [pid 1470] <... open resumed>) = 5 [pid 1464] open("./bus", O_RDWR [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... open resumed>) = 5 [pid 1470] <... futex resumed>) = 1 [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1489] +++ killed by SIGBUS +++ [pid 1470] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1468] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1462] +++ killed by SIGBUS +++ [pid 1461] <... futex resumed>) = 0 [pid 1470] <... mmap resumed>) = 0x20000000 [pid 1464] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1462, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... mmap resumed>) = 0x20000000 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 1470] <... futex resumed>) = 1 [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... restart_syscall resumed>) = 0 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = 1 [pid 1461] <... futex resumed>) = 0 [pid 1470] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1468] <... futex resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] write(4, 0x20000f80, 9 [pid 1468] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1464] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1461] <... futex resumed>) = 0 [pid 373] umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1470] <... write resumed>) = 9 [pid 1468] <... futex resumed>) = 0 [pid 1464] write(4, 0x20000f80, 9 [pid 1461] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1470] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1468] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1464] <... write resumed>) = 9 [pid 1461] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1470] <... futex resumed>) = 0 [pid 1468] <... mmap resumed>) = 0x7f70edc9c000 [pid 1464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... openat resumed>) = 3 [pid 1470] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1468] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1464] <... futex resumed>) = 0 [pid 1461] <... mmap resumed>) = 0x7f70edc9c000 [pid 373] fstat(3, [pid 1468] <... mprotect resumed>) = 0 [pid 1464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1461] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1468] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1461] <... mprotect resumed>) = 0 [pid 373] getdents64(3, [pid 1461] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1468] <... clone resumed>, parent_tid=[1490], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1490 [pid 373] umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1468] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1461] <... clone resumed>, parent_tid=[1491], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1491 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1468] <... futex resumed>) = 0 [pid 1461] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./28/binderfs", [pid 1468] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1461] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1461] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] unlink("./28/binderfs") = 0 [pid 373] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1471] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1478] chdir("./32"./strace-static-x86_64: Process 1491 attached ) = 0 [pid 1471] <... open resumed>) = 4 [pid 1469] <... futex resumed>) = 0 [pid 1478] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1491] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1490 attached [pid 1488] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1478] <... prctl resumed>) = 0 [pid 1471] <... futex resumed>) = 0 [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1478] setpgid(0, 0 [pid 1471] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1469] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... setpgid resumed>) = 0 [ 31.872097][ T1489] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.892732][ T1488] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1471] <... futex resumed>) = 0 [pid 1469] <... futex resumed>) = 1 [pid 1478] <... openat resumed>) = 3 [pid 1471] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1491] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1490] set_robust_list(0x7f70edcbc9e0, 24 [pid 1478] write(3, "1000", 4 [pid 1467] <... futex resumed>) = ? [pid 1466] <... futex resumed>) = ? [pid 1490] <... set_robust_list resumed>) = 0 [pid 1478] <... write resumed>) = 4 [pid 1471] <... write resumed>) = 9 [pid 1478] close(3 [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... close resumed>) = 0 [pid 1471] <... futex resumed>) = 1 [pid 1469] <... futex resumed>) = 0 [pid 1478] symlink("/dev/binderfs", "./binderfs" [pid 1471] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... symlink resumed>) = 0 [pid 1471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1469] <... futex resumed>) = 0 [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1471] open("./bus", O_RDWR [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1478] <... futex resumed>) = 0 [pid 1471] <... open resumed>) = 5 [pid 1478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1471] <... futex resumed>) = 1 [pid 1469] <... futex resumed>) = 0 [pid 1478] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1471] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] <... mprotect resumed>) = 0 [pid 1471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1469] <... futex resumed>) = 0 [pid 1478] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1471] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1469] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1471] <... mmap resumed>) = 0x20000000 [pid 1478] <... clone resumed>, parent_tid=[1492], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1492 [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1488] +++ killed by SIGBUS +++ [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1471] <... futex resumed>) = 1 [pid 1469] <... futex resumed>) = 0 [pid 1478] <... futex resumed>) = 0 [pid 1471] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1469] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1471] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1469] <... futex resumed>) = 0 [pid 1471] write(4, 0x20000f80, 9 [pid 1469] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1469] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1469] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1469] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1493], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1493 [pid 1469] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1469] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1461] <... futex resumed>) = ? [pid 1464] <... futex resumed>) = ? ./strace-static-x86_64: Process 1493 attached ./strace-static-x86_64: Process 1492 attached [pid 1490] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1464] +++ killed by SIGBUS +++ [pid 1493] set_robust_list(0x7f70edcbc9e0, 24 [pid 1492] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1471] <... write resumed>) = 9 [pid 1467] +++ killed by SIGBUS +++ [pid 1466] +++ killed by SIGBUS +++ [pid 1493] <... set_robust_list resumed>) = 0 [pid 1492] <... set_robust_list resumed>) = 0 [pid 1491] +++ killed by SIGBUS +++ [pid 1471] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1470] <... futex resumed>) = ? [pid 1468] <... futex resumed>) = ? [pid 1461] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1466, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1471] <... futex resumed>) = 0 [pid 1471] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1492] memfd_create("syzkaller", 0) = 3 [pid 1492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1492] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1492] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1461, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 376] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1493] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1470] +++ killed by SIGBUS +++ [pid 376] unlink("./30/binderfs" [pid 1490] +++ killed by SIGBUS +++ [pid 1468] +++ killed by SIGBUS +++ [pid 374] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 1471] <... futex resumed>) = ? [pid 1469] <... futex resumed>) = ? [pid 374] fstat(3, [pid 1471] +++ killed by SIGBUS +++ [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1493] +++ killed by SIGBUS +++ [pid 1469] +++ killed by SIGBUS +++ [pid 374] getdents64(3, [pid 373] <... umount2 resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./29/binderfs") = 0 [pid 374] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1492] <... openat resumed>) = 4 [pid 1492] ioctl(4, LOOP_SET_FD, 3 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1468, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 376] <... unlink resumed>) = 0 [pid 373] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1492] <... ioctl resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 376] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1469, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1492] close(3) = 0 [pid 373] lstat("./28/file0", [pid 1492] mkdir("./file0", 0777 [pid 377] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1492] <... mkdir resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1492] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] fstat(3, [pid 373] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] getdents64(3, [pid 373] <... openat resumed>) = 4 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] fstat(4, [pid 372] <... openat resumed>) = 3 [pid 377] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(3, [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] unlink("./31/binderfs") = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(3, [pid 377] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] getdents64(4, [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] close(4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 372] lstat("./30/binderfs", [pid 373] rmdir("./28/file0" [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./30/binderfs" [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 372] <... unlink resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 372] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./28") = 0 [pid 373] mkdir("./29", 0777) = 0 [ 31.909997][ T1491] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.925546][ T1490] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 31.942664][ T1493] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... umount2 resumed>) = 0 [pid 374] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./29/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 373] close(3 [pid 372] <... umount2 resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 374] rmdir("./29") = 0 [pid 374] mkdir("./30", 0777 [pid 377] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... mkdir resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 377] lstat("./31/file0", [pid 376] lstat("./30/file0", [pid 374] <... openat resumed>) = 3 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1495 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] lstat("./30/file0", [pid 377] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] close(3) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1496 ./strace-static-x86_64: Process 1495 attached [pid 1495] set_robust_list(0x5555569495e0, 24) = 0 [pid 1495] chdir("./29") = 0 [pid 1495] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1495] setpgid(0, 0) = 0 [pid 1495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1495] write(3, "1000", 4) = 4 [pid 1495] close(3) = 0 [pid 1495] symlink("/dev/binderfs", "./binderfs") = 0 [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 372] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] fstat(4, [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1495] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1495] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1498], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1498 [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1498 attached [pid 1498] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1498] memfd_create("syzkaller", 0 [pid 376] fstat(4, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1498] <... memfd_create resumed>) = 3 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 372] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 372] <... openat resumed>) = 4 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] fstat(4, [pid 377] close(4 [pid 376] close(4 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] rmdir("./31/file0" [pid 376] rmdir("./30/file0" [pid 372] getdents64(4, [pid 377] <... rmdir resumed>) = 0 [pid 1498] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] <... rmdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(3, [pid 376] getdents64(3, [pid 372] getdents64(4, [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4 [pid 376] close(3 [pid 377] close(3 [pid 372] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] rmdir("./30/file0" [pid 377] rmdir("./31" [pid 376] rmdir("./30" [pid 372] <... rmdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 372] getdents64(3, [pid 376] mkdir("./31", 0777 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 377] mkdir("./32", 0777 [pid 372] close(3 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] <... mkdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 372] rmdir("./30" [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] <... rmdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] mkdir("./31", 0777 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] close(3 [pid 372] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] close(3) = 0 [pid 372] <... openat resumed>) = 3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1499 [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1500 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1501 ./strace-static-x86_64: Process 1499 attached [pid 1499] set_robust_list(0x5555569495e0, 24) = 0 [pid 1499] chdir("./31") = 0 [pid 1499] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1499] setpgid(0, 0) = 0 [pid 1499] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 1500 attached ./strace-static-x86_64: Process 1501 attached ) = 3 [pid 1499] write(3, "1000", 4) = 4 [pid 1499] close(3) = 0 [pid 1501] set_robust_list(0x5555569495e0, 24 [pid 1500] set_robust_list(0x5555569495e0, 24 [pid 1499] symlink("/dev/binderfs", "./binderfs" [pid 1501] <... set_robust_list resumed>) = 0 [pid 1500] <... set_robust_list resumed>) = 0 [pid 1501] chdir("./31" [pid 1499] <... symlink resumed>) = 0 [pid 1501] <... chdir resumed>) = 0 [pid 1500] chdir("./32" [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1499] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1499] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1502 attached ./strace-static-x86_64: Process 1496 attached [pid 1501] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1500] <... chdir resumed>) = 0 [pid 1498] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1492] <... mount resumed>) = 0 [pid 1502] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1501] <... prctl resumed>) = 0 [pid 1500] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1499] <... clone resumed>, parent_tid=[1502], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1502 [pid 1496] set_robust_list(0x5555569495e0, 24 [pid 1492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1501] setpgid(0, 0 [pid 1500] <... prctl resumed>) = 0 [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] <... setpgid resumed>) = 0 [pid 1500] setpgid(0, 0 [pid 1499] <... futex resumed>) = 0 [pid 1501] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1500] <... setpgid resumed>) = 0 [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1492] <... openat resumed>) = 3 [pid 1501] <... openat resumed>) = 3 [pid 1500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1492] chdir("./file0" [pid 1501] write(3, "1000", 4 [pid 1500] <... openat resumed>) = 3 [pid 1492] <... chdir resumed>) = 0 [pid 1501] <... write resumed>) = 4 [pid 1500] write(3, "1000", 4 [pid 1492] ioctl(4, LOOP_CLR_FD [pid 1501] close(3 [pid 1500] <... write resumed>) = 4 [pid 1492] <... ioctl resumed>) = 0 [pid 1501] <... close resumed>) = 0 [pid 1500] close(3 [pid 1492] close(4 [pid 1501] symlink("/dev/binderfs", "./binderfs" [pid 1500] <... close resumed>) = 0 [pid 1498] <... write resumed>) = 1048576 [pid 1492] <... close resumed>) = 0 [pid 1498] munmap(0x7f70edbbd000, 1048576 [pid 1501] <... symlink resumed>) = 0 [pid 1500] symlink("/dev/binderfs", "./binderfs" [pid 1498] <... munmap resumed>) = 0 [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1498] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] <... symlink resumed>) = 0 [pid 1498] <... openat resumed>) = 4 [pid 1496] <... set_robust_list resumed>) = 0 [pid 1492] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1498] ioctl(4, LOOP_SET_FD, 3 [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1501] <... futex resumed>) = 0 [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] chdir("./30" [pid 1492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1500] <... futex resumed>) = 0 [pid 1496] <... chdir resumed>) = 0 [pid 1492] <... open resumed>) = 4 [pid 1501] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1500] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1498] <... ioctl resumed>) = 0 [pid 1496] <... prctl resumed>) = 0 [pid 1492] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1501] <... mprotect resumed>) = 0 [pid 1500] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1496] setpgid(0, 0 [pid 1492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1500] <... mprotect resumed>) = 0 [pid 1498] close(3 [pid 1496] <... setpgid resumed>) = 0 [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1501] <... clone resumed>, parent_tid=[1505], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1505 [pid 1496] <... openat resumed>) = 3 [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] <... clone resumed>, parent_tid=[1506], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1506 [pid 1498] <... close resumed>) = 0 [pid 1496] write(3, "1000", 4 [pid 1492] <... futex resumed>) = 0 [pid 1478] <... futex resumed>) = 1 ./strace-static-x86_64: Process 1506 attached ./strace-static-x86_64: Process 1505 attached [pid 1502] <... set_robust_list resumed>) = 0 [pid 1501] <... futex resumed>) = 0 [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1498] mkdir("./file0", 0777 [pid 1496] <... write resumed>) = 4 [pid 1492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1506] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1505] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1502] memfd_create("syzkaller", 0 [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1500] <... futex resumed>) = 0 [pid 1498] <... mkdir resumed>) = 0 [pid 1496] close(3 [pid 1492] <... write resumed>) = 9 [pid 1505] <... set_robust_list resumed>) = 0 [pid 1502] <... memfd_create resumed>) = 3 [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1498] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1496] <... close resumed>) = 0 [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] symlink("/dev/binderfs", "./binderfs" [pid 1492] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1496] <... symlink resumed>) = 0 [pid 1492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1496] <... futex resumed>) = 0 [pid 1492] open("./bus", O_RDWR [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1505] memfd_create("syzkaller", 0 [pid 1502] <... mmap resumed>) = 0x7f70edbbd000 [pid 1496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1492] <... open resumed>) = 5 [pid 1496] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1492] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1496] <... mprotect resumed>) = 0 [pid 1492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1492] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1478] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1496] <... clone resumed>, parent_tid=[1507], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1507 [pid 1492] <... mmap resumed>) = 0x20000000 [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = 0 [pid 1492] <... futex resumed>) = 1 [pid 1478] <... futex resumed>) = 0 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] <... memfd_create resumed>) = 3 [pid 1492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1478] <... futex resumed>) = 0 [pid 1492] write(4, 0x20000f80, 9 [pid 1478] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1492] <... write resumed>) = 9 [pid 1478] <... futex resumed>) = 0 [pid 1492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1478] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1492] <... futex resumed>) = 0 [pid 1478] <... mmap resumed>) = 0x7f70edc9c000 [pid 1492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1478] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1505] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1478] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1505] <... mmap resumed>) = 0x7f70edbbd000 [pid 1478] <... clone resumed>, parent_tid=[1508], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1508 [pid 1478] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1478] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1507 attached [pid 1507] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1507] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 1508 attached [pid 1507] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1508] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1507] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1506] <... set_robust_list resumed>) = 0 [pid 1505] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1506] memfd_create("syzkaller", 0 [pid 1505] <... write resumed>) = 1048576 [pid 1502] <... write resumed>) = 1048576 [pid 1506] <... memfd_create resumed>) = 3 [pid 1506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1498] <... mount resumed>) = 0 [pid 1507] <... write resumed>) = 1048576 [pid 1507] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1507] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1507] ioctl(4, LOOP_SET_FD, 3 [pid 1508] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1492] <... futex resumed>) = ? [pid 1478] <... futex resumed>) = ? [pid 1492] +++ killed by SIGBUS +++ [pid 1498] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1502] munmap(0x7f70edbbd000, 1048576 [pid 1498] <... openat resumed>) = 3 [pid 1498] chdir("./file0") = 0 [pid 1498] ioctl(4, LOOP_CLR_FD [pid 1502] <... munmap resumed>) = 0 [pid 1502] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1508] +++ killed by SIGBUS +++ [pid 1478] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1478, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 1507] <... ioctl resumed>) = 0 [pid 1507] close(3) = 0 [pid 1507] mkdir("./file0", 0777) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1507] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, [pid 1498] <... ioctl resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1498] close(4 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./32/binderfs") = 0 [pid 375] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1498] <... close resumed>) = 0 [pid 1505] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1505] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 1505] ioctl(4, LOOP_SET_FD, 3 [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1495] <... futex resumed>) = 0 [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1498] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1495] <... futex resumed>) = 0 [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1498] <... open resumed>) = 4 [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1498] <... futex resumed>) = 1 [pid 1495] <... futex resumed>) = 0 [pid 1505] <... ioctl resumed>) = 0 [pid 1505] close(3) = 0 [pid 1505] mkdir("./file0", 0777 [pid 1498] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1502] <... openat resumed>) = 4 [pid 1498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1495] <... futex resumed>) = 0 [pid 1498] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1505] <... mkdir resumed>) = 0 [pid 1498] <... write resumed>) = 9 [pid 1505] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1495] <... futex resumed>) = 0 [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1502] ioctl(4, LOOP_SET_FD, 3 [pid 1498] open("./bus", O_RDWR [pid 1495] <... futex resumed>) = 0 [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1498] <... open resumed>) = 5 [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1495] <... futex resumed>) = 0 [pid 1498] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1495] <... futex resumed>) = 0 [pid 1498] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1498] <... mmap resumed>) = 0x20000000 [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1495] <... futex resumed>) = 0 [pid 1498] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1498] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1495] <... futex resumed>) = 0 [pid 1498] write(4, 0x20000f80, 9 [pid 1495] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1498] <... write resumed>) = 9 [pid 1495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1498] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1495] <... mmap resumed>) = 0x7f70edc9c000 [pid 1498] <... futex resumed>) = 0 [pid 1495] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1498] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1495] <... mprotect resumed>) = 0 [pid 1495] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1513], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1513 [pid 1495] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1495] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1513 attached [pid 1513] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 32.158766][ T1508] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1506] <... write resumed>) = 1048576 [pid 1506] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1506] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1507] <... mount resumed>) = 0 [pid 1507] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1507] chdir("./file0") = 0 [pid 1507] ioctl(4, LOOP_CLR_FD [pid 1513] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1498] <... futex resumed>) = ? [pid 1495] <... futex resumed>) = ? [pid 1498] +++ killed by SIGBUS +++ [pid 1505] <... mount resumed>) = 0 [pid 1505] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1513] +++ killed by SIGBUS +++ [pid 1505] <... openat resumed>) = 3 [pid 1495] +++ killed by SIGBUS +++ [pid 1505] chdir("./file0" [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1495, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 1505] <... chdir resumed>) = 0 [pid 1505] ioctl(4, LOOP_CLR_FD [pid 373] umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./29/binderfs") = 0 [pid 373] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = 0 [pid 1502] <... ioctl resumed>) = 0 [pid 375] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1502] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1502] <... close resumed>) = 0 [pid 375] lstat("./32/file0", [pid 1507] <... ioctl resumed>) = 0 [pid 1506] <... openat resumed>) = 4 [pid 1502] mkdir("./file0", 0777 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1507] close(4 [pid 1506] ioctl(4, LOOP_SET_FD, 3 [pid 1502] <... mkdir resumed>) = 0 [pid 375] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1507] <... close resumed>) = 0 [pid 1502] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1506] <... ioctl resumed>) = 0 [pid 1505] <... ioctl resumed>) = 0 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] close(3 [pid 1505] close(4 [pid 375] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1507] <... futex resumed>) = 1 [pid 1506] <... close resumed>) = 0 [pid 1496] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 1507] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1506] mkdir("./file0", 0777 [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] fstat(4, [pid 1507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1496] <... futex resumed>) = 0 [pid 1507] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1506] <... mkdir resumed>) = 0 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1506] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] getdents64(4, [pid 1507] <... open resumed>) = 4 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1507] <... futex resumed>) = 1 [pid 1496] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1507] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1496] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(4 [pid 1507] <... write resumed>) = 9 [pid 375] <... close resumed>) = 0 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 375] rmdir("./32/file0" [pid 1496] <... futex resumed>) = 0 [pid 1507] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... rmdir resumed>) = 0 [pid 1507] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 1507] open("./bus", O_RDWR [pid 1496] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1507] <... open resumed>) = 5 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(3 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... close resumed>) = 0 [pid 1507] <... futex resumed>) = 0 [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./32" [pid 1507] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1496] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./33", 0777 [pid 1507] <... mmap resumed>) = 0x20000000 [pid 1496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mkdir resumed>) = 0 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1507] <... futex resumed>) = 0 [pid 1496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1507] write(4, 0x20000f80, 9 [pid 1496] <... futex resumed>) = 0 [pid 1496] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1507] <... write resumed>) = 9 [pid 1496] <... futex resumed>) = 0 [pid 1496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1507] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1496] <... mmap resumed>) = 0x7f70edc9c000 [pid 1507] <... futex resumed>) = 0 [pid 1496] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1507] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1496] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1520 attached [pid 1520] set_robust_list(0x7f70edcbc9e0, 24 [pid 1496] <... clone resumed>, parent_tid=[1520], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1520 [pid 1520] <... set_robust_list resumed>) = 0 [ 32.199241][ T1513] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1496] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1496] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1520] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1507] <... futex resumed>) = ? [pid 1496] <... futex resumed>) = ? [pid 1507] +++ killed by SIGBUS +++ [pid 1520] +++ killed by SIGBUS +++ [pid 1496] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1496, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./30/binderfs") = 0 [pid 374] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1505] <... close resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1505] <... futex resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./29/file0", [pid 1505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1501] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1505] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1505] <... open resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1505] <... futex resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 4 [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] fstat(4, [pid 1505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1501] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1505] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 1505] <... write resumed>) = 9 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 1505] <... futex resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 1505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1501] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1505] open("./bus", O_RDWR [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./29/file0" [pid 1505] <... open resumed>) = 5 [pid 373] <... rmdir resumed>) = 0 [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 1505] <... futex resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 1505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1501] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 1505] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1501] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./29" [pid 1505] <... mmap resumed>) = 0x20000000 [pid 373] <... rmdir resumed>) = 0 [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./30", 0777 [pid 1505] <... futex resumed>) = 1 [pid 1501] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1505] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1501] <... futex resumed>) = 0 [pid 1505] write(4, 0x20000f80, 9 [pid 1501] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1505] <... write resumed>) = 9 [pid 1501] <... futex resumed>) = 0 [pid 1505] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1501] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1505] <... futex resumed>) = 0 [pid 1501] <... mmap resumed>) = 0x7f70edc9c000 [pid 1505] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1501] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1501] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1523 attached , parent_tid=[1523], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1523 [pid 1501] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1501] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1523] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 32.240572][ T1520] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.276171][ T1502] EXT4-fs mount: 126 callbacks suppressed [ 32.276179][ T1502] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 1506] <... mount resumed>) = 0 [pid 1502] <... mount resumed>) = 0 [pid 1502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1502] chdir("./file0") = 0 [pid 1502] ioctl(4, LOOP_CLR_FD [pid 1506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1506] chdir("./file0") = 0 [pid 1506] ioctl(4, LOOP_CLR_FD [pid 1523] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1505] <... futex resumed>) = ? [pid 1501] <... futex resumed>) = ? [pid 1505] +++ killed by SIGBUS +++ [pid 1523] +++ killed by SIGBUS +++ [pid 1501] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1501, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./31/binderfs" [pid 1506] <... ioctl resumed>) = 0 [pid 1502] <... ioctl resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... unlink resumed>) = 0 [pid 1506] close(4 [pid 1502] close(4 [pid 375] close(3 [pid 374] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] ioctl(3, LOOP_CLR_FD [pid 1502] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] lstat("./30/file0", [pid 373] close(3 [pid 1502] <... futex resumed>) = 1 [pid 1499] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... close resumed>) = 0 [pid 1502] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1526 [pid 374] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1502] <... open resumed>) = 4 [pid 1499] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1527 [pid 1502] <... futex resumed>) = 0 [pid 1499] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... openat resumed>) = 4 [pid 1502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 1502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1502] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1499] <... futex resumed>) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(4, [pid 1502] <... write resumed>) = 9 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(4) = 0 [pid 374] rmdir("./30/file0" [pid 1502] <... futex resumed>) = 1 [pid 1499] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 1502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1499] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1502] open("./bus", O_RDWR [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] close(3 [pid 1502] <... open resumed>) = 5 [pid 374] <... close resumed>) = 0 [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] rmdir("./30" [pid 1502] <... futex resumed>) = 1 [pid 1499] <... futex resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 1502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./31", 0777 [pid 1502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1499] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 1502] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1499] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1502] <... mmap resumed>) = 0x20000000 [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1499] <... futex resumed>) = 0 [pid 1502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1499] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1502] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1499] <... futex resumed>) = 0 [pid 1502] write(4, 0x20000f80, 9 [pid 1499] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1526 attached ) = 0 [pid 1499] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1502] <... write resumed>) = 9 [pid 1499] <... mmap resumed>) = 0x7f70edc9c000 [pid 1502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1499] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1502] <... futex resumed>) = 0 [pid 1499] <... mprotect resumed>) = 0 [pid 1502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1499] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1528], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1528 [pid 1499] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1499] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1526] set_robust_list(0x5555569495e0, 24) = 0 [pid 1526] chdir("./33") = 0 [pid 1526] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 1528 attached ./strace-static-x86_64: Process 1527 attached ) = 0 [pid 1526] setpgid(0, 0 [pid 1528] set_robust_list(0x7f70edcbc9e0, 24 [pid 1527] set_robust_list(0x5555569495e0, 24 [pid 1528] <... set_robust_list resumed>) = 0 [pid 1527] <... set_robust_list resumed>) = 0 [pid 1526] <... setpgid resumed>) = 0 [pid 1527] chdir("./30" [pid 1526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1527] <... chdir resumed>) = 0 [ 32.280359][ T1523] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, [ 32.282491][ T1506] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 32.290750][ T1523] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1527] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1527] setpgid(0, 0) = 0 [pid 1527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1527] write(3, "1000", 4) = 4 [pid 1527] close(3) = 0 [pid 1527] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1527] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1527] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1529], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1529 [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1526] <... openat resumed>) = 3 [pid 1526] write(3, "1000", 4) = 4 [pid 1526] close(3) = 0 [pid 1526] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1526] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1526] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1530], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1530 [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1529 attached [pid 1529] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1529] memfd_create("syzkaller", 0) = 3 [pid 1529] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1530 attached [pid 1530] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1530] memfd_create("syzkaller", 0) = 3 [pid 1530] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1529] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1528] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1529] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1499] <... futex resumed>) = 0 [pid 1529] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1502] <... futex resumed>) = ? [pid 1502] +++ killed by SIGBUS +++ [pid 1530] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1528] +++ killed by SIGBUS +++ [pid 1499] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1499, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, [pid 1530] <... write resumed>) = 1048576 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./31/binderfs") = 0 [pid 376] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1530] munmap(0x7f70edbbd000, 1048576 [pid 374] <... openat resumed>) = 3 [pid 1506] <... close resumed>) = 0 [pid 1530] <... munmap resumed>) = 0 [pid 1530] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 1529] <... openat resumed>) = 4 [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 1529] ioctl(4, LOOP_SET_FD, 3 [pid 1506] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] close(3 [pid 1506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 372] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./31/file0", [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1506] <... open resumed>) = 4 [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1506] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4 [pid 1506] <... write resumed>) = 9 [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 1506] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./31/file0" [pid 1506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1500] <... futex resumed>) = 0 [pid 1506] open("./bus", O_RDWR) = 5 [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... rmdir resumed>) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3 [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 1506] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 372] rmdir("./31" [pid 1529] <... ioctl resumed>) = 0 [pid 1506] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./32", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1532 ./strace-static-x86_64: Process 1532 attached [pid 1506] <... mmap resumed>) = 0x20000000 [pid 1500] <... futex resumed>) = 0 [pid 1529] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1532] set_robust_list(0x5555569495e0, 24) = 0 [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1533 [pid 1532] chdir("./32" [pid 1529] mkdir("./file0", 0777 [pid 1506] <... futex resumed>) = 1 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1506] write(4, 0x20000f80, 9 [pid 1529] <... mkdir resumed>) = 0 [pid 1500] <... futex resumed>) = 0 [pid 1500] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1506] <... write resumed>) = 9 [pid 1529] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1532] <... chdir resumed>) = 0 [pid 1506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1532] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1532] setpgid(0, 0) = 0 [pid 1506] <... futex resumed>) = 0 [pid 1500] <... mmap resumed>) = 0x7f70edc9c000 [pid 1532] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC./strace-static-x86_64: Process 1533 attached [pid 1506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1500] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1533] set_robust_list(0x5555569495e0, 24 [pid 1500] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1533] <... set_robust_list resumed>) = 0 [pid 1532] <... openat resumed>) = 3 [pid 1500] <... clone resumed>, parent_tid=[1534], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1534 [pid 1500] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1500] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1532] write(3, "1000", 4./strace-static-x86_64: Process 1534 attached [pid 1534] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1533] chdir("./31" [pid 1532] <... write resumed>) = 4 [pid 1533] <... chdir resumed>) = 0 [pid 1532] close(3 [pid 1533] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1532] <... close resumed>) = 0 [pid 1532] symlink("/dev/binderfs", "./binderfs" [pid 1533] <... prctl resumed>) = 0 [ 32.341871][ T1528] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1533] setpgid(0, 0 [pid 1532] <... symlink resumed>) = 0 [pid 1533] <... setpgid resumed>) = 0 [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1534] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1533] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1532] <... futex resumed>) = 0 [pid 1506] <... futex resumed>) = ? [pid 1500] <... futex resumed>) = ? [pid 1532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1533] <... openat resumed>) = 3 [pid 1506] +++ killed by SIGBUS +++ [pid 1533] write(3, "1000", 4) = 4 [pid 1533] close(3 [pid 1532] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1533] <... close resumed>) = 0 [pid 1533] symlink("/dev/binderfs", "./binderfs" [pid 1532] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1533] <... symlink resumed>) = 0 [pid 1532] <... mprotect resumed>) = 0 [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1533] <... futex resumed>) = 0 [pid 1533] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 ./strace-static-x86_64: Process 1535 attached [pid 1534] +++ killed by SIGBUS +++ [pid 1533] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1532] <... clone resumed>, parent_tid=[1535], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1535 [pid 1500] +++ killed by SIGBUS +++ [pid 1533] <... mprotect resumed>) = 0 [pid 1535] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1532] <... futex resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1500, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./32/binderfs") = 0 [pid 1533] <... clone resumed>, parent_tid=[1536], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1536 [pid 377] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1536 attached [pid 1535] <... set_robust_list resumed>) = 0 [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1536] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1535] memfd_create("syzkaller", 0 [pid 1536] <... set_robust_list resumed>) = 0 [pid 1536] memfd_create("syzkaller", 0 [pid 1535] <... memfd_create resumed>) = 3 [pid 1536] <... memfd_create resumed>) = 3 [pid 1536] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1535] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1536] <... mmap resumed>) = 0x7f70edbbd000 [pid 1535] <... mmap resumed>) = 0x7f70edbbd000 [pid 1535] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1536] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1535] <... write resumed>) = 1048576 [pid 1535] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1535] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1536] <... write resumed>) = 1048576 [pid 1536] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1536] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 1536] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 1530] <... openat resumed>) = 4 [pid 1530] ioctl(4, LOOP_SET_FD, 3 [pid 1536] close(3) = 0 [pid 1530] <... ioctl resumed>) = 0 [pid 1536] mkdir("./file0", 0777 [pid 1530] close(3 [pid 1536] <... mkdir resumed>) = 0 [pid 1530] <... close resumed>) = 0 [pid 1530] mkdir("./file0", 0777 [pid 1536] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1530] <... mkdir resumed>) = 0 [ 32.383794][ T1534] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1530] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1535] <... openat resumed>) = 4 [pid 376] <... umount2 resumed>) = 0 [pid 1535] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 376] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./31/file0", [pid 377] lstat("./32/file0", [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 4 [pid 377] <... openat resumed>) = 4 [pid 376] fstat(4, [pid 377] fstat(4, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 377] getdents64(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, [pid 377] getdents64(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4 [pid 377] close(4 [pid 376] <... close resumed>) = 0 [pid 1535] <... ioctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./32/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./32") = 0 [pid 377] mkdir("./33", 0777 [pid 1535] close(3 [pid 377] <... mkdir resumed>) = 0 [pid 376] rmdir("./31/file0" [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 1535] <... close resumed>) = 0 [pid 377] close(3 [pid 1535] mkdir("./file0", 0777 [pid 377] <... close resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1535] <... mkdir resumed>) = 0 [pid 376] getdents64(3, [pid 1535] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1545 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3./strace-static-x86_64: Process 1545 attached [pid 1545] set_robust_list(0x5555569495e0, 24) = 0 [pid 1545] chdir("./33") = 0 [pid 1545] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1545] setpgid(0, 0) = 0 [pid 1545] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1545] write(3, "1000", 4) = 4 [pid 1545] close(3 [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./31" [pid 1545] <... close resumed>) = 0 [pid 1545] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 1545] <... symlink resumed>) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1545] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1545] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1547], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1547 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1547 attached [pid 1547] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1547] memfd_create("syzkaller", 0) = 3 [pid 1547] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1547] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1530] <... mount resumed>) = 0 [pid 376] mkdir("./32", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 1547] <... write resumed>) = 1048576 [pid 1547] munmap(0x7f70edbbd000, 1048576) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 1547] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 1547] ioctl(4, LOOP_SET_FD, 3 [pid 1536] <... mount resumed>) = 0 [pid 1536] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1536] chdir("./file0") = 0 [pid 1536] ioctl(4, LOOP_CLR_FD [pid 1529] <... mount resumed>) = 0 [pid 1529] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1529] chdir("./file0" [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1529] <... chdir resumed>) = 0 [pid 1529] ioctl(4, LOOP_CLR_FD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1549 [pid 1530] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 ./strace-static-x86_64: Process 1549 attached [pid 1547] <... ioctl resumed>) = 0 [pid 1536] <... ioctl resumed>) = 0 [pid 1530] chdir("./file0" [pid 1547] close(3 [pid 1536] close(4 [pid 1549] set_robust_list(0x5555569495e0, 24 [pid 1547] <... close resumed>) = 0 [pid 1536] <... close resumed>) = 0 [pid 1530] <... chdir resumed>) = 0 [pid 1547] mkdir("./file0", 0777 [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1547] <... mkdir resumed>) = 0 [pid 1536] <... futex resumed>) = 1 [pid 1533] <... futex resumed>) = 0 [pid 1547] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1536] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] <... open resumed>) = 4 [pid 1533] <... futex resumed>) = 0 [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] <... set_robust_list resumed>) = 0 [pid 1536] <... futex resumed>) = 0 [pid 1533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1530] ioctl(4, LOOP_CLR_FD [pid 1529] <... ioctl resumed>) = 0 [pid 1529] close(4) = 0 [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] <... futex resumed>) = 0 [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1529] <... futex resumed>) = 1 [pid 1529] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1530] <... ioctl resumed>) = 0 [pid 1536] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] <... write resumed>) = 9 [pid 1533] <... futex resumed>) = 0 [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1529] <... open resumed>) = 4 [pid 1536] <... futex resumed>) = 0 [pid 1533] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... futex resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1533] <... futex resumed>) = 0 [pid 1529] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] open("./bus", O_RDWR [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 0 [pid 1536] <... open resumed>) = 5 [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1533] <... futex resumed>) = 0 [pid 1529] <... write resumed>) = 9 [pid 1536] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1533] <... futex resumed>) = 0 [pid 1536] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] <... futex resumed>) = 0 [pid 1536] <... mmap resumed>) = 0x20000000 [pid 1529] <... futex resumed>) = 1 [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] open("./bus", O_RDWR [pid 1527] <... futex resumed>) = 0 [pid 1536] <... futex resumed>) = 1 [pid 1533] <... futex resumed>) = 0 [pid 1529] <... open resumed>) = 5 [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1536] write(4, 0x20000f80, 9 [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] close(4) = 0 [pid 1549] chdir("./32" [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... chdir resumed>) = 0 [pid 1530] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1536] <... write resumed>) = 9 [pid 1533] <... futex resumed>) = 0 [pid 1530] <... open resumed>) = 4 [pid 1529] <... futex resumed>) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... prctl resumed>) = 0 [pid 1536] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1533] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] setpgid(0, 0 [pid 1536] <... futex resumed>) = 0 [pid 1533] <... futex resumed>) = 0 [pid 1530] <... futex resumed>) = 0 [pid 1529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1527] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1549] <... setpgid resumed>) = 0 [pid 1530] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [ 32.474863][ T1536] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.478022][ T1529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 32.497636][ T1530] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1530] <... write resumed>) = 9 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... openat resumed>) = 3 [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] write(3, "1000", 4 [pid 1530] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1549] <... write resumed>) = 4 [pid 1530] open("./bus", O_RDWR [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] close(3 [pid 1530] <... open resumed>) = 5 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... close resumed>) = 0 [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] symlink("/dev/binderfs", "./binderfs" [pid 1530] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1549] <... symlink resumed>) = 0 [pid 1530] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1530] <... mmap resumed>) = 0x20000000 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... futex resumed>) = 0 [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1530] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1549] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1530] write(4, 0x20000f80, 9 [pid 1526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1530] <... write resumed>) = 9 [pid 1526] <... futex resumed>) = 0 [pid 1549] <... mprotect resumed>) = 0 [pid 1530] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1530] <... futex resumed>) = 0 [pid 1526] <... futex resumed>) = 0 [pid 1530] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1549] <... clone resumed>, parent_tid=[1553], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1553 [pid 1526] <... mmap resumed>) = 0x7f70edc9c000 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1526] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1549] <... futex resumed>) = 0 [pid 1526] <... mprotect resumed>) = 0 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1526] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1554], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1554 [pid 1526] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1526] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1553 attached [pid 1553] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1553] memfd_create("syzkaller", 0) = 3 [pid 1553] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 1554 attached [pid 1533] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1529] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1554] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1529] <... mmap resumed>) = 0x20000000 [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1527] <... futex resumed>) = 0 [pid 1529] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1529] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1527] <... futex resumed>) = 0 [pid 1529] write(4, 0x20000f80, 9 [pid 1527] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1529] <... write resumed>) = 9 [pid 1527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1529] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1527] <... mmap resumed>) = 0x7f70edc9c000 [pid 1529] <... futex resumed>) = 0 [pid 1527] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1529] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1527] <... mprotect resumed>) = 0 [pid 1527] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1555], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1555 [pid 1527] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1555 attached [pid 1553] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1536] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1527] <... futex resumed>) = 0 [pid 1555] set_robust_list(0x7f70edcbc9e0, 24 [pid 1553] <... write resumed>) = 1048576 [pid 1533] <... futex resumed>) = ? [pid 1527] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1555] <... set_robust_list resumed>) = 0 [pid 1536] +++ killed by SIGBUS +++ [pid 1533] +++ killed by SIGBUS +++ [ 32.532557][ T1536] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.552399][ T1554] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.565128][ T1555] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1553] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1553] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 1553] ioctl(4, LOOP_SET_FD, 3 [pid 1555] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1529] <... futex resumed>) = ? [pid 1527] <... futex resumed>) = ? [pid 1529] +++ killed by SIGBUS +++ [pid 1555] +++ killed by SIGBUS +++ [pid 1527] +++ killed by SIGBUS +++ [pid 1554] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1533, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1527, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 1535] <... mount resumed>) = 0 [pid 1530] <... futex resumed>) = ? [pid 1526] <... futex resumed>) = ? [pid 374] <... restart_syscall resumed>) = 0 [pid 373] <... restart_syscall resumed>) = 0 [pid 374] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 374] fstat(3, [pid 373] fstat(3, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 373] getdents64(3, [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./31/binderfs", [pid 373] lstat("./30/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./31/binderfs" [pid 373] unlink("./30/binderfs" [pid 374] <... unlink resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 374] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1535] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1530] +++ killed by SIGBUS +++ [pid 1535] chdir("./file0") = 0 [pid 1535] ioctl(4, LOOP_CLR_FD [pid 1554] +++ killed by SIGBUS +++ [pid 1526] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1526, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 1553] <... ioctl resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 1553] close(3) = 0 [pid 1553] mkdir("./file0", 0777 [pid 375] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1553] <... mkdir resumed>) = 0 [pid 1547] <... mount resumed>) = 0 [pid 1535] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1553] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1535] close(4) = 0 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 1535] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1535] <... futex resumed>) = 1 [pid 1535] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1547] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1547] chdir("./file0") = 0 [pid 1547] ioctl(4, LOOP_CLR_FD) = 0 [pid 1547] close(4) = 0 [pid 1547] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1545] <... futex resumed>) = 0 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1547] <... futex resumed>) = 1 [pid 1547] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 1547] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1545] <... futex resumed>) = 0 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1547] <... futex resumed>) = 1 [pid 1547] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./33/binderfs", [pid 1547] <... write resumed>) = 9 [pid 1547] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./33/binderfs" [pid 1545] <... futex resumed>) = 0 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1547] <... futex resumed>) = 1 [pid 1547] open("./bus", O_RDWR) = 5 [pid 1547] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1545] <... futex resumed>) = 0 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1547] <... futex resumed>) = 1 [pid 1547] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1545] <... futex resumed>) = 0 [pid 1545] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1545] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1545] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1558], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1558 [pid 1545] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1545] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1547] <... futex resumed>) = 1 [pid 1547] write(4, 0x20000f80, 9) = 9 [pid 1547] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1547] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1558 attached [pid 1558] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1535] <... open resumed>) = 4 [pid 1535] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1535] <... futex resumed>) = 1 [pid 1535] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 1535] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1535] <... futex resumed>) = 1 [pid 1535] open("./bus", O_RDWR) = 5 [pid 1535] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1535] <... futex resumed>) = 1 [pid 1535] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1532] <... futex resumed>) = 0 [pid 1532] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1532] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1532] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1560], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1560 [pid 1532] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1532] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1535] <... futex resumed>) = 1 [pid 1535] write(4, 0x20000f80, 9) = 9 [pid 1535] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1535] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1560 attached [pid 1560] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1558] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1547] <... futex resumed>) = ? [pid 1545] <... futex resumed>) = ? [pid 1547] +++ killed by SIGBUS +++ [pid 1558] +++ killed by SIGBUS +++ [pid 1545] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1545, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 32.567943][ T1535] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.588489][ T1547] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 32.615047][ T1558] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./33/binderfs") = 0 [pid 377] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1535] <... futex resumed>) = ? [pid 1532] <... futex resumed>) = ? [pid 1535] +++ killed by SIGBUS +++ [pid 1560] +++ killed by SIGBUS +++ [pid 1532] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1532, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 373] <... umount2 resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./32/binderfs") = 0 [pid 372] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 1553] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./30/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./30") = 0 [pid 373] mkdir("./31", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1553] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1553] chdir("./file0") = 0 [ 32.624425][ T1560] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.635601][ T1553] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 1553] ioctl(4, LOOP_CLR_FD [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1562 [pid 1553] <... ioctl resumed>) = 0 [pid 1553] close(4) = 0 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1553] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1549] <... futex resumed>) = 0 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 374] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1562 attached [pid 1562] set_robust_list(0x5555569495e0, 24) = 0 [pid 1562] chdir("./31") = 0 [pid 1562] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 375] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1553] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1553] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./33/file0", [pid 1562] <... prctl resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1562] setpgid(0, 0) = 0 [pid 1562] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1562] write(3, "1000", 4) = 4 [pid 1562] close(3) = 0 [pid 1562] symlink("/dev/binderfs", "./binderfs") = 0 [pid 375] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1562] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1562] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1563], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1563 [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1563 attached [pid 1563] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1563] memfd_create("syzkaller", 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./31/file0", [pid 375] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1563] <... memfd_create resumed>) = 3 [pid 1563] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 375] fstat(4, [pid 374] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 374] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... openat resumed>) = 4 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] fstat(4, [pid 375] close(4 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 375] rmdir("./33/file0" [pid 374] getdents64(4, [pid 375] <... rmdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(3, [pid 374] getdents64(4, [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 374] close(4 [pid 375] rmdir("./33") = 0 [pid 374] <... close resumed>) = 0 [pid 374] rmdir("./31/file0" [pid 375] mkdir("./34", 0777 [pid 374] <... rmdir resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] close(3) = 0 [pid 374] rmdir("./31") = 0 [pid 374] mkdir("./32", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1553] <... open resumed>) = 4 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = 1 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1563] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1553] <... futex resumed>) = 1 [pid 1549] <... futex resumed>) = 0 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] open("./bus", O_RDWR) = 5 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = 1 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1553] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1549] <... futex resumed>) = 0 [pid 1549] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1553] <... mmap resumed>) = 0x20000000 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] <... futex resumed>) = 0 [pid 1553] <... futex resumed>) = 1 [pid 1549] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] write(4, 0x20000f80, 9 [pid 1549] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1549] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1549] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1549] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1553] <... write resumed>) = 9 [pid 1553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1549] <... clone resumed>, parent_tid=[1564], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1564 [pid 1553] <... futex resumed>) = 0 [pid 1549] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1553] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1549] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1563] <... write resumed>) = 1048576 [pid 1563] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1563] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 1564 attached [pid 1564] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./32/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 377] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] rmdir("./32" [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 377] lstat("./33/file0", [pid 372] mkdir("./33", 0777 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 377] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./33/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./33") = 0 [pid 377] mkdir("./34", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1564] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1549] <... futex resumed>) = ? [pid 1553] <... futex resumed>) = ? [pid 1553] +++ killed by SIGBUS +++ [pid 1564] +++ killed by SIGBUS +++ [pid 1549] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1549, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./32/binderfs") = 0 [pid 376] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 1563] <... openat resumed>) = 4 [pid 1563] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD [pid 375] ioctl(3, LOOP_CLR_FD [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3 [pid 1563] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1566 ./strace-static-x86_64: Process 1566 attached [pid 1566] set_robust_list(0x5555569495e0, 24) = 0 [pid 1566] chdir("./33") = 0 [pid 1566] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1566] setpgid(0, 0) = 0 [pid 1566] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1566] write(3, "1000", 4) = 4 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1563] close(3 [pid 377] close(3 [pid 374] <... close resumed>) = 0 [pid 1566] close(3) = 0 [pid 1566] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1566] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1566] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1567], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1567 [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1567 attached [pid 1567] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1567] memfd_create("syzkaller", 0) = 3 [pid 1567] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 375] close(3 [pid 377] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 1563] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1563] mkdir("./file0", 0777 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1568 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1569 [pid 1563] <... mkdir resumed>) = 0 [pid 1563] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1570 [pid 1567] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1568 attached [pid 1568] set_robust_list(0x5555569495e0, 24) = 0 [pid 1568] chdir("./34") = 0 [pid 1568] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1568] setpgid(0, 0) = 0 [pid 1568] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1568] write(3, "1000", 4) = 4 [pid 1568] close(3) = 0 [pid 1568] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1568] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1568] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1571], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1571 [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1569 attached ./strace-static-x86_64: Process 1570 attached [pid 1567] <... write resumed>) = 1048576 [pid 1567] munmap(0x7f70edbbd000, 1048576 [pid 1570] set_robust_list(0x5555569495e0, 24./strace-static-x86_64: Process 1571 attached ) = 0 [pid 1569] set_robust_list(0x5555569495e0, 24) = 0 [pid 1569] chdir("./32" [pid 1570] chdir("./34") = 0 [pid 1569] <... chdir resumed>) = 0 [pid 1571] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1570] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1569] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1569] setpgid(0, 0 [pid 1570] <... prctl resumed>) = 0 [pid 1569] <... setpgid resumed>) = 0 [pid 1570] setpgid(0, 0 [pid 1569] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1570] <... setpgid resumed>) = 0 [pid 1569] <... openat resumed>) = 3 [pid 1570] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1569] write(3, "1000", 4) = 4 [pid 1570] <... openat resumed>) = 3 [pid 1569] close(3) = 0 [pid 1569] symlink("/dev/binderfs", "./binderfs" [pid 1570] write(3, "1000", 4) = 4 [pid 1569] <... symlink resumed>) = 0 [pid 1570] close(3 [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... close resumed>) = 0 [pid 1569] <... futex resumed>) = 0 [pid 1570] symlink("/dev/binderfs", "./binderfs" [pid 1569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1570] <... symlink resumed>) = 0 [pid 1569] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1570] <... futex resumed>) = 0 [pid 1569] <... mprotect resumed>) = 0 [pid 1567] <... munmap resumed>) = 0 [pid 1570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1569] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1570] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 1573 attached [pid 1573] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1570] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1569] <... clone resumed>, parent_tid=[1573], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1573 [pid 1573] <... set_robust_list resumed>) = 0 [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... clone resumed>, parent_tid=[1574], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1574 [pid 1569] <... futex resumed>) = 1 ./strace-static-x86_64: Process 1574 attached [pid 1574] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1573] <... futex resumed>) = 0 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] memfd_create("syzkaller", 0 [pid 1574] memfd_create("syzkaller", 0 [pid 1570] <... futex resumed>) = 0 [pid 1574] <... memfd_create resumed>) = 3 [ 32.728940][ T1564] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1574] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1573] memfd_create("syzkaller", 0 [pid 1571] <... memfd_create resumed>) = 3 [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1567] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1563] <... mount resumed>) = 0 [pid 1573] <... memfd_create resumed>) = 3 [pid 1571] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1573] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1573] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1571] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1563] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1574] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1573] <... write resumed>) = 1048576 [pid 1573] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1573] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1571] <... write resumed>) = 1048576 [pid 1563] <... openat resumed>) = 3 [pid 1571] munmap(0x7f70edbbd000, 1048576 [pid 1563] chdir("./file0") = 0 [pid 1563] ioctl(4, LOOP_CLR_FD [pid 1571] <... munmap resumed>) = 0 [pid 1571] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 1574] <... write resumed>) = 1048576 [pid 376] <... umount2 resumed>) = 0 [pid 1567] <... openat resumed>) = 4 [pid 1574] munmap(0x7f70edbbd000, 1048576 [pid 1573] <... openat resumed>) = 4 [pid 1571] <... openat resumed>) = 4 [pid 1567] ioctl(4, LOOP_SET_FD, 3 [pid 1563] <... ioctl resumed>) = 0 [pid 376] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1563] close(4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1567] <... ioctl resumed>) = 0 [pid 1563] <... close resumed>) = 0 [pid 376] lstat("./32/file0", [pid 1567] close(3) = 0 [pid 1567] mkdir("./file0", 0777) = 0 [pid 1567] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1563] <... futex resumed>) = 1 [pid 1562] <... futex resumed>) = 0 [pid 376] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1563] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1562] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1563] <... open resumed>) = 4 [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... openat resumed>) = 4 [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 1571] ioctl(4, LOOP_SET_FD, 3 [pid 1563] <... futex resumed>) = 1 [pid 1562] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1563] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 1563] <... write resumed>) = 9 [pid 1562] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(4, [pid 1563] <... futex resumed>) = 0 [pid 1562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1563] open("./bus", O_RDWR [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 1563] <... open resumed>) = 5 [pid 1562] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] rmdir("./32/file0" [pid 1563] <... futex resumed>) = 0 [pid 1562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... rmdir resumed>) = 0 [pid 1563] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 1563] <... mmap resumed>) = 0x20000000 [pid 1562] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(3 [pid 1563] <... futex resumed>) = 0 [pid 1562] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... close resumed>) = 0 [pid 1563] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1562] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./32" [pid 1574] <... munmap resumed>) = 0 [pid 1563] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1562] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 1574] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1573] ioctl(4, LOOP_SET_FD, 3 [pid 1563] write(4, 0x20000f80, 9 [pid 1562] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mkdir("./33", 0777 [pid 1563] <... write resumed>) = 9 [pid 1562] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 1563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1562] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1563] <... futex resumed>) = 0 [pid 1562] <... mmap resumed>) = 0x7f70edc9c000 [pid 1563] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1562] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1562] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1578 attached , parent_tid=[1578], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1578 [pid 1562] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1562] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1578] set_robust_list(0x7f70edcbc9e0, 24 [pid 1571] <... ioctl resumed>) = 0 [pid 1571] close(3) = 0 [pid 1571] mkdir("./file0", 0777 [pid 1574] <... openat resumed>) = 4 [ 32.777219][ T1563] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 376] <... openat resumed>) = 3 [pid 1578] <... set_robust_list resumed>) = 0 [pid 1574] ioctl(4, LOOP_SET_FD, 3 [pid 1571] <... mkdir resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 1573] <... ioctl resumed>) = 0 [pid 1573] close(3) = 0 [pid 1573] mkdir("./file0", 0777) = 0 [pid 1573] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1571] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1567] <... mount resumed>) = 0 [pid 1567] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1567] chdir("./file0") = 0 [pid 1567] ioctl(4, LOOP_CLR_FD [pid 1574] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1574] close(3 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1574] <... close resumed>) = 0 [pid 1574] mkdir("./file0", 0777 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1583 [pid 1574] <... mkdir resumed>) = 0 [pid 1574] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 1583 attached [pid 1567] <... ioctl resumed>) = 0 [pid 1578] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1563] <... futex resumed>) = ? [pid 1562] <... futex resumed>) = ? [pid 1563] +++ killed by SIGBUS +++ [pid 1583] set_robust_list(0x5555569495e0, 24 [pid 1567] close(4 [pid 1578] +++ killed by SIGBUS +++ [pid 1562] +++ killed by SIGBUS +++ [pid 1567] <... close resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1562, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./31/binderfs") = 0 [pid 373] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1583] <... set_robust_list resumed>) = 0 [pid 1571] <... mount resumed>) = 0 [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] chdir("./33" [pid 1571] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1567] <... futex resumed>) = 1 [pid 1583] <... chdir resumed>) = 0 [pid 1571] <... openat resumed>) = 3 [pid 1567] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1571] chdir("./file0" [pid 1583] <... prctl resumed>) = 0 [pid 1571] <... chdir resumed>) = 0 [pid 1583] setpgid(0, 0 [pid 1571] ioctl(4, LOOP_CLR_FD [pid 1583] <... setpgid resumed>) = 0 [pid 1571] <... ioctl resumed>) = 0 [pid 1583] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1571] close(4 [pid 1583] <... openat resumed>) = 3 [pid 1571] <... close resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1583] write(3, "1000", 4 [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... write resumed>) = 4 [pid 1571] <... futex resumed>) = 1 [pid 1583] close(3 [pid 1571] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] <... close resumed>) = 0 [pid 1583] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1583] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1568] <... futex resumed>) = 0 [pid 1583] <... mprotect resumed>) = 0 [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 1 [pid 1583] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1568] <... futex resumed>) = 1 [pid 1567] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1583] <... clone resumed>, parent_tid=[1590], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1590 [pid 1567] <... open resumed>) = 4 [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... futex resumed>) = 0 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1567] <... futex resumed>) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1567] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] <... write resumed>) = 9 [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... open resumed>) = 4 [pid 1567] <... futex resumed>) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1567] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... futex resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1567] open("./bus", O_RDWR [pid 1566] <... futex resumed>) = 0 [pid 1571] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] <... open resumed>) = 5 [pid 1568] <... futex resumed>) = 0 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] <... write resumed>) = 9 [pid 1567] <... futex resumed>) = 1 [pid 1566] <... futex resumed>) = 0 [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1571] <... futex resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1567] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1566] <... futex resumed>) = 0 [pid 1571] open("./bus", O_RDWR [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1567] <... mmap resumed>) = 0x20000000 [pid 1566] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1571] <... open resumed>) = 5 [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1567] <... futex resumed>) = 0 [pid 1566] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1571] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] write(4, 0x20000f80, 9 [pid 1568] <... futex resumed>) = 0 [pid 1566] <... futex resumed>) = 0 [pid 1571] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1567] <... write resumed>) = 9 ./strace-static-x86_64: Process 1590 attached [ 32.830200][ T1567] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 32.832225][ T1578] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.860631][ T1571] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 1590] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1590] memfd_create("syzkaller", 0) = 3 [pid 1590] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1590] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1568] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1566] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... futex resumed>) = 0 [pid 1590] <... write resumed>) = 1048576 [pid 1574] <... mount resumed>) = 0 [pid 1571] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1567] <... futex resumed>) = 0 [pid 1566] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1571] <... mmap resumed>) = 0x20000000 [pid 1567] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1566] <... mmap resumed>) = 0x7f70edc9c000 [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1571] <... futex resumed>) = 1 [pid 1568] <... futex resumed>) = 0 [pid 1566] <... mprotect resumed>) = 0 [pid 1571] write(4, 0x20000f80, 9 [pid 1568] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1568] <... futex resumed>) = 0 [pid 1568] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1566] <... clone resumed>, parent_tid=[1591], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1591 [pid 1568] <... futex resumed>) = 0 [pid 1566] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1566] <... futex resumed>) = 0 [pid 1568] <... mmap resumed>) = 0x7f70edc9c000 [pid 1566] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1568] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1568] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1592], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1592 [pid 1568] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1568] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1574] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1590] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1574] chdir("./file0") = 0 [pid 1574] ioctl(4, LOOP_CLR_FD [pid 1590] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 1591 attached [pid 1591] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1592 attached [pid 1573] <... mount resumed>) = 0 [pid 1592] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1591] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1573] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1571] <... write resumed>) = 9 [pid 1571] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1590] <... openat resumed>) = 4 [pid 1574] <... ioctl resumed>) = 0 [pid 1571] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... umount2 resumed>) = 0 [pid 1590] ioctl(4, LOOP_SET_FD, 3 [pid 1574] close(4) = 0 [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./31/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./31") = 0 [pid 373] mkdir("./32", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1567] <... futex resumed>) = ? [pid 1566] <... futex resumed>) = ? [pid 1573] <... openat resumed>) = 3 [pid 1570] <... futex resumed>) = 0 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1567] +++ killed by SIGBUS +++ [pid 1592] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1591] +++ killed by SIGBUS +++ [pid 1590] <... ioctl resumed>) = 0 [pid 1574] <... futex resumed>) = 0 [pid 1573] chdir("./file0" [pid 1570] <... futex resumed>) = 1 [pid 1566] +++ killed by SIGBUS +++ [pid 1574] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1573] <... chdir resumed>) = 0 [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] close(3 [pid 1574] <... open resumed>) = 4 [pid 1573] ioctl(4, LOOP_CLR_FD [pid 1590] <... close resumed>) = 0 [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1573] <... ioctl resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1566, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 1590] mkdir("./file0", 0777 [pid 1574] <... futex resumed>) = 1 [pid 1573] close(4 [pid 1571] <... futex resumed>) = ? [pid 1570] <... futex resumed>) = 0 [pid 1568] <... futex resumed>) = ? [pid 373] ioctl(3, LOOP_CLR_FD [pid 1590] <... mkdir resumed>) = 0 [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1573] <... close resumed>) = 0 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1590] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 373] close(3 [pid 372] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1574] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1573] <... futex resumed>) = 1 [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1574] <... write resumed>) = 9 [pid 1573] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1573] <... open resumed>) = 4 [pid 1569] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1574] <... futex resumed>) = 1 [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1594 [pid 372] fstat(3, [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1573] <... futex resumed>) = 0 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] <... futex resumed>) = 0 [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 1574] open("./bus", O_RDWR [pid 1573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1574] <... open resumed>) = 5 [pid 1573] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1571] +++ killed by SIGBUS +++ [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1573] <... write resumed>) = 9 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1574] <... futex resumed>) = 1 [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 372] lstat("./33/binderfs", [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1573] <... futex resumed>) = 1 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1592] +++ killed by SIGBUS +++ [pid 1574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] <... futex resumed>) = 0 [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1568] +++ killed by SIGBUS +++ [pid 372] unlink("./33/binderfs" [pid 1574] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1570] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] <... futex resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 1574] <... mmap resumed>) = 0x20000000 [pid 1573] open("./bus", O_RDWR [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1568, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1573] <... open resumed>) = 5 [pid 377] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 1594 attached [pid 1574] <... futex resumed>) = 1 [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [ 32.883262][ T1574] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 32.892855][ T1573] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 32.896172][ T1591] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.903112][ T1592] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1594] set_robust_list(0x5555569495e0, 24 [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1573] <... futex resumed>) = 1 [pid 1570] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1594] <... set_robust_list resumed>) = 0 [pid 1574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] <... futex resumed>) = 0 [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1594] chdir("./32" [pid 1574] write(4, 0x20000f80, 9 [pid 1573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1570] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] <... futex resumed>) = 0 [pid 1594] <... chdir resumed>) = 0 [pid 1574] <... write resumed>) = 9 [pid 1573] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1570] <... futex resumed>) = 0 [pid 1569] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1594] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1573] <... mmap resumed>) = 0x20000000 [pid 1570] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1594] <... prctl resumed>) = 0 [pid 1574] <... futex resumed>) = 0 [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] <... mmap resumed>) = 0x7f70edc9c000 [pid 1594] setpgid(0, 0 [pid 1574] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1573] <... futex resumed>) = 1 [pid 1570] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1569] <... futex resumed>) = 0 [pid 1594] <... setpgid resumed>) = 0 [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] <... mprotect resumed>) = 0 [pid 1569] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1594] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1573] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1570] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1569] <... futex resumed>) = 0 [pid 1594] <... openat resumed>) = 3 [pid 1573] write(4, 0x20000f80, 9 [pid 1569] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1594] write(3, "1000", 4 [pid 1573] <... write resumed>) = 9 [pid 1570] <... clone resumed>, parent_tid=[1597], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1597 [pid 1569] <... futex resumed>) = 0 [pid 1594] <... write resumed>) = 4 [pid 1573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1570] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1569] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1594] close(3 [pid 1573] <... futex resumed>) = 0 [pid 1570] <... futex resumed>) = 0 [pid 1569] <... mmap resumed>) = 0x7f70edc9c000 [pid 1594] <... close resumed>) = 0 [pid 1573] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1570] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1569] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1594] symlink("/dev/binderfs", "./binderfs" [pid 1569] <... mprotect resumed>) = 0 [pid 1594] <... symlink resumed>) = 0 [pid 1569] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1569] <... clone resumed>, parent_tid=[1598], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1598 [pid 1594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1569] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1594] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1569] <... futex resumed>) = 0 [pid 1594] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1569] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1594] <... mprotect resumed>) = 0 [pid 1594] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1599], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1599 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1598 attached [pid 1598] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1599 attached ./strace-static-x86_64: Process 1597 attached [pid 1590] <... mount resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./34/binderfs") = 0 [pid 377] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1590] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1590] chdir("./file0") = 0 [pid 1590] ioctl(4, LOOP_CLR_FD [pid 1597] set_robust_list(0x7f70edcbc9e0, 24 [pid 1599] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1597] <... set_robust_list resumed>) = 0 [pid 1599] <... set_robust_list resumed>) = 0 [pid 1599] memfd_create("syzkaller", 0 [pid 1598] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1573] <... futex resumed>) = ? [pid 1569] <... futex resumed>) = ? [pid 1573] +++ killed by SIGBUS +++ [pid 1599] <... memfd_create resumed>) = 3 [pid 1599] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1598] +++ killed by SIGBUS +++ [pid 1569] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1569, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./32/binderfs") = 0 [pid 374] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1599] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1599] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1599] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 1597] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1590] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 1590] close(4 [pid 372] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1590] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1599] ioctl(4, LOOP_SET_FD, 3 [pid 1574] <... futex resumed>) = ? [pid 1570] <... futex resumed>) = ? [pid 1574] +++ killed by SIGBUS +++ [pid 372] lstat("./33/file0", [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1590] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1583] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1590] <... futex resumed>) = 0 [pid 1583] <... futex resumed>) = 1 [pid 1590] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] <... open resumed>) = 4 [pid 372] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 1590] <... futex resumed>) = 1 [pid 1583] <... futex resumed>) = 0 [pid 1590] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 1597] +++ killed by SIGBUS +++ [pid 1590] <... write resumed>) = 9 [pid 1583] <... futex resumed>) = 0 [pid 1570] +++ killed by SIGBUS +++ [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] <... futex resumed>) = 0 [pid 1583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1590] open("./bus", O_RDWR [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 1590] <... open resumed>) = 5 [pid 1583] <... futex resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1570, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1590] <... futex resumed>) = 0 [pid 1583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1590] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1590] <... mmap resumed>) = 0x20000000 [pid 1583] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 1599] <... ioctl resumed>) = 0 [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1583] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... restart_syscall resumed>) = 0 [pid 372] close(4 [pid 1590] <... futex resumed>) = 0 [pid 1583] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 1590] write(4, 0x20000f80, 9 [pid 1583] <... futex resumed>) = 0 [pid 372] rmdir("./33/file0" [pid 1590] <... write resumed>) = 9 [pid 1583] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 1599] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] getdents64(3, [pid 375] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] <... openat resumed>) = 3 [pid 372] close(3 [pid 375] fstat(3, [pid 372] <... close resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] rmdir("./33" [pid 1599] <... close resumed>) = 0 [pid 1590] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1583] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 372] <... rmdir resumed>) = 0 [pid 1590] <... futex resumed>) = 0 [pid 1583] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] mkdir("./34", 0777 [pid 1590] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1583] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1583] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1583] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... mkdir resumed>) = 0 [pid 1583] <... clone resumed>, parent_tid=[1601], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1601 [pid 375] lstat("./34/binderfs", [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1583] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1583] <... futex resumed>) = 0 [pid 1583] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] unlink("./34/binderfs"./strace-static-x86_64: Process 1601 attached [pid 1599] mkdir("./file0", 0777 [pid 375] <... unlink resumed>) = 0 [pid 1601] set_robust_list(0x7f70edcbc9e0, 24 [pid 375] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1599] <... mkdir resumed>) = 0 [pid 1601] <... set_robust_list resumed>) = 0 [ 32.953302][ T1590] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 32.956997][ T1598] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 32.966961][ T1597] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1599] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1601] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1590] <... futex resumed>) = ? [pid 1583] <... futex resumed>) = ? [pid 1590] +++ killed by SIGBUS +++ [pid 1601] +++ killed by SIGBUS +++ [pid 1583] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1583, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./33/binderfs") = 0 [pid 376] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1602 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./33/file0", [pid 374] lstat("./32/file0", ./strace-static-x86_64: Process 1602 attached [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1602] set_robust_list(0x5555569495e0, 24) = 0 [pid 1602] chdir("./34") = 0 [pid 1602] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1602] setpgid(0, 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./34/file0", [pid 374] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1602] <... setpgid resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1602] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] fstat(4, [pid 374] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... openat resumed>) = 4 [ 33.009601][ T1601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] getdents64(4, [pid 1602] <... openat resumed>) = 3 [pid 1602] write(3, "1000", 4) = 4 [pid 1602] close(3) = 0 [pid 1602] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1602] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1602] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1605], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1605 [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1605 attached [pid 1605] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1605] memfd_create("syzkaller", 0) = 3 [pid 1605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... openat resumed>) = 4 [pid 376] getdents64(4, [pid 374] fstat(4, [pid 377] fstat(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1599] <... mount resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(4 [pid 374] getdents64(4, [pid 1599] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] getdents64(4, [pid 1605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 376] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1599] <... openat resumed>) = 3 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./33/file0" [pid 374] getdents64(4, [pid 1599] chdir("./file0" [pid 377] getdents64(4, [pid 1599] <... chdir resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1599] ioctl(4, LOOP_CLR_FD [pid 377] close(4 [pid 376] getdents64(3, [pid 374] close(4 [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./34/file0" [pid 374] <... close resumed>) = 0 [pid 376] close(3 [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 376] <... close resumed>) = 0 [pid 374] rmdir("./32/file0" [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] rmdir("./33" [pid 374] <... rmdir resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 377] close(3 [pid 374] getdents64(3, [pid 376] mkdir("./34", 0777 [pid 377] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] rmdir("./34" [pid 376] <... mkdir resumed>) = 0 [pid 374] close(3 [pid 377] <... rmdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... close resumed>) = 0 [pid 377] mkdir("./35", 0777 [pid 374] rmdir("./32" [pid 377] <... mkdir resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] mkdir("./33", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1605] <... write resumed>) = 1048576 [pid 1605] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1605] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 375] <... umount2 resumed>) = 0 [ 33.061014][ T1599] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 376] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 375] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 1599] <... ioctl resumed>) = 0 [pid 1605] <... openat resumed>) = 4 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] ioctl(3, LOOP_CLR_FD [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 1606 ./strace-static-x86_64: Process 1606 attached [pid 1606] set_robust_list(0x5555569495e0, 24) = 0 [pid 1606] chdir("./35") = 0 [pid 1606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1606] setpgid(0, 0) = 0 [pid 1606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1606] write(3, "1000", 4) = 4 [pid 1606] close(3) = 0 [pid 1606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] close(3 [pid 376] <... close resumed>) = 0 [pid 375] lstat("./34/file0", [pid 1606] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 374] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1606] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1607], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1607 [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1607 attached [pid 1607] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1607] memfd_create("syzkaller", 0) = 3 [pid 1607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 1608 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 1609 [pid 375] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4./strace-static-x86_64: Process 1609 attached [pid 1609] set_robust_list(0x5555569495e0, 24 [pid 375] <... close resumed>) = 0 [pid 1609] <... set_robust_list resumed>) = 0 [pid 375] rmdir("./34/file0" [pid 1609] chdir("./33") = 0 [pid 1609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 1609] setpgid(0, 0) = 0 [pid 1609] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 1609] <... openat resumed>) = 3 [pid 1609] write(3, "1000", 4) = 4 [pid 1609] close(3) = 0 [pid 1609] symlink("/dev/binderfs", "./binderfs" [pid 375] close(3 [pid 1599] close(4 [pid 375] <... close resumed>) = 0 [pid 1609] <... symlink resumed>) = 0 [pid 375] rmdir("./34" [pid 1599] <... close resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 1599] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./35", 0777 [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1609] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1609] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... mkdir resumed>) = 0 [pid 1599] <... futex resumed>) = 1 [pid 1594] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 1599] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 1594] <... futex resumed>) = 0 [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1599] <... open resumed>) = 4 [pid 1599] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 1611 [pid 1599] <... futex resumed>) = 1 [pid 1594] <... futex resumed>) = 0 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... clone resumed>, parent_tid=[1610], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1610 [pid 1594] <... futex resumed>) = 0 [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1599] <... write resumed>) = 9 [pid 1599] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1594] <... futex resumed>) = 0 [pid 1599] <... futex resumed>) = 1 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] open("./bus", O_RDWR [pid 1605] ioctl(4, LOOP_SET_FD, 3 [pid 1599] <... open resumed>) = 5 [pid 1599] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1594] <... futex resumed>) = 0 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1594] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1599] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1594] <... futex resumed>) = 0 [pid 1599] <... futex resumed>) = 1 [pid 1594] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1599] write(4, 0x20000f80, 9 [pid 1594] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1594] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1594] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1599] <... write resumed>) = 9 [pid 1594] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1599] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1599] <... futex resumed>) = 0 [pid 1594] <... clone resumed>, parent_tid=[1613], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1613 [pid 1594] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1594] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1613 attached ./strace-static-x86_64: Process 1611 attached ./strace-static-x86_64: Process 1610 attached ./strace-static-x86_64: Process 1608 attached [pid 1607] <... write resumed>) = 1048576 [pid 1599] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1607] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1607] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 1607] ioctl(4, LOOP_SET_FD, 3 [pid 1613] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1611] set_robust_list(0x5555569495e0, 24 [pid 1610] set_robust_list(0x7f70f5fdd9e0, 24 [pid 1608] set_robust_list(0x5555569495e0, 24 [pid 1605] <... ioctl resumed>) = 0 [pid 1607] <... ioctl resumed>) = 0 [pid 1605] close(3 [pid 1607] close(3) = 0 [pid 1607] mkdir("./file0", 0777) = 0 [pid 1607] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1613] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1611] <... set_robust_list resumed>) = 0 [pid 1611] chdir("./35") = 0 [pid 1611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1611] setpgid(0, 0) = 0 [pid 1611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1611] write(3, "1000", 4) = 4 [pid 1611] close(3) = 0 [pid 1611] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1599] <... futex resumed>) = ? [pid 1594] <... futex resumed>) = ? [pid 1605] <... close resumed>) = 0 [pid 1611] <... futex resumed>) = 0 [pid 1611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1611] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1611] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1608] <... set_robust_list resumed>) = 0 [pid 1605] mkdir("./file0", 0777 [pid 1611] <... clone resumed>, parent_tid=[1615], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1615 [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 1615 attached [pid 1615] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1615] memfd_create("syzkaller", 0) = 3 [pid 1615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1605] <... mkdir resumed>) = 0 [pid 1605] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1608] chdir("./34") = 0 [pid 1608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1608] setpgid(0, 0) = 0 [pid 1608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1608] write(3, "1000", 4 [pid 1610] <... set_robust_list resumed>) = 0 [pid 1608] <... write resumed>) = 4 [pid 1608] close(3) = 0 [pid 1608] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1610] memfd_create("syzkaller", 0 [pid 1608] <... mmap resumed>) = 0x7f70f5fbd000 [pid 1608] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1608] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1610] <... memfd_create resumed>) = 3 [pid 1608] <... clone resumed>, parent_tid=[1617], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1617 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1608] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1610] <... mmap resumed>) = 0x7f70edbbd000 [pid 1615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 1617 attached [pid 1617] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1617] memfd_create("syzkaller", 0) = 3 [pid 1617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1615] <... write resumed>) = 1048576 [pid 1615] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1615] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 1615] ioctl(4, LOOP_SET_FD, 3 [pid 1617] <... write resumed>) = 1048576 [pid 1617] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1617] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1599] +++ killed by SIGBUS +++ [pid 1613] +++ killed by SIGBUS +++ [pid 1594] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1594, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 1610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1605] <... mount resumed>) = 0 [pid 373] umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 33.145102][ T1613] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.177686][ T1605] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 373] unlink("./32/binderfs") = 0 [pid 373] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1605] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1617] <... openat resumed>) = 4 [pid 1615] <... ioctl resumed>) = 0 [pid 1610] <... write resumed>) = 1048576 [pid 1607] <... mount resumed>) = 0 [pid 1605] <... openat resumed>) = 3 [pid 1617] ioctl(4, LOOP_SET_FD, 3 [pid 1615] close(3) = 0 [pid 1615] mkdir("./file0", 0777) = 0 [pid 1615] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1607] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1607] chdir("./file0") = 0 [pid 1607] ioctl(4, LOOP_CLR_FD [pid 1610] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1605] chdir("./file0") = 0 [pid 1605] ioctl(4, LOOP_CLR_FD [pid 1610] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 1617] <... ioctl resumed>) = 0 [pid 1617] close(3) = 0 [pid 1617] mkdir("./file0", 0777) = 0 [pid 1617] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1607] <... ioctl resumed>) = 0 [pid 1607] close(4) = 0 [pid 1607] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1606] <... futex resumed>) = 0 [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1607] <... futex resumed>) = 1 [pid 1607] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./32/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 1607] <... open resumed>) = 4 [pid 1605] <... ioctl resumed>) = 0 [pid 373] rmdir("./32" [pid 1607] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1605] close(4 [pid 373] <... rmdir resumed>) = 0 [ 33.190541][ T1607] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 1610] <... openat resumed>) = 4 [pid 1607] <... futex resumed>) = 1 [pid 1606] <... futex resumed>) = 0 [pid 373] mkdir("./33", 0777 [pid 1610] ioctl(4, LOOP_SET_FD, 3 [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1607] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1606] <... futex resumed>) = 0 [pid 1615] <... mount resumed>) = 0 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1607] <... write resumed>) = 9 [pid 1607] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] <... ioctl resumed>) = 0 [pid 1607] <... futex resumed>) = 1 [pid 1606] <... futex resumed>) = 0 [pid 1607] open("./bus", O_RDWR [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] close(3) = 0 [pid 1610] mkdir("./file0", 0777) = 0 [pid 1610] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 1615] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1615] chdir("./file0") = 0 [pid 1615] ioctl(4, LOOP_CLR_FD [pid 1607] <... open resumed>) = 5 [pid 1607] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1607] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1606] <... futex resumed>) = 1 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1607] <... futex resumed>) = 0 [pid 1607] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1606] <... futex resumed>) = 0 [pid 1606] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1606] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1606] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1628], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1628 [pid 1606] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1606] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1607] <... futex resumed>) = 1 [pid 1607] write(4, 0x20000f80, 9) = 9 [pid 1607] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1607] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 1628 attached [pid 1628] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 1617] <... mount resumed>) = 0 [pid 1617] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 1617] chdir("./file0") = 0 [pid 1617] ioctl(4, LOOP_CLR_FD [pid 1628] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1607] <... futex resumed>) = ? [pid 1606] <... futex resumed>) = ? [pid 1607] +++ killed by SIGBUS +++ [pid 1628] +++ killed by SIGBUS +++ [pid 1606] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1606, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 1605] <... close resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 377] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1615] <... ioctl resumed>) = 0 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 1615] close(4 [pid 1605] <... futex resumed>) = 1 [pid 1602] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1602] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./35/binderfs") = 0 [pid 377] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1615] <... close resumed>) = 0 [pid 1605] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1617] <... ioctl resumed>) = 0 [pid 1617] close(4) = 0 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1617] <... futex resumed>) = 1 [pid 1617] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 1611] <... futex resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 1611] <... futex resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] close(3) = 0 [pid 1615] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1617] <... open resumed>) = 4 [pid 1615] <... open resumed>) = 4 [pid 1605] <... open resumed>) = 4 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 1629 [pid 1617] <... futex resumed>) = 1 [pid 1615] <... futex resumed>) = 1 [pid 1611] <... futex resumed>) = 0 [pid 1608] <... futex resumed>) = 0 [pid 1605] <... futex resumed>) = 1 [pid 1602] <... futex resumed>) = 0 [pid 1617] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] <... futex resumed>) = 0 [pid 1608] <... futex resumed>) = 0 [pid 1602] <... futex resumed>) = 0 [pid 1617] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1617] <... write resumed>) = 9 [pid 1615] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1605] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1615] <... write resumed>) = 9 [pid 1605] <... write resumed>) = 9 [pid 1617] <... futex resumed>) = 1 [pid 1615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1615] <... futex resumed>) = 1 [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1605] <... futex resumed>) = 1 [pid 1602] <... futex resumed>) = 0 [pid 1617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1615] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1605] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 1629 attached [pid 1617] open("./bus", O_RDWR [pid 1615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1602] <... futex resumed>) = 0 [pid 1617] <... open resumed>) = 5 [pid 1615] open("./bus", O_RDWR [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] open("./bus", O_RDWR [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1629] set_robust_list(0x5555569495e0, 24 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1615] <... open resumed>) = 5 [pid 1605] <... open resumed>) = 5 [pid 1629] <... set_robust_list resumed>) = 0 [pid 1617] <... futex resumed>) = 1 [pid 1615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1629] chdir("./33" [pid 1617] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1615] <... futex resumed>) = 1 [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1605] <... futex resumed>) = 1 [pid 1602] <... futex resumed>) = 0 [pid 1629] <... chdir resumed>) = 0 [pid 1617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1615] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1605] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1629] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 1617] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1602] <... futex resumed>) = 0 [pid 1629] <... prctl resumed>) = 0 [pid 1617] <... mmap resumed>) = 0x20000000 [pid 1615] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1611] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1605] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1602] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1629] setpgid(0, 0 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1615] <... mmap resumed>) = 0x20000000 [pid 1629] <... setpgid resumed>) = 0 [pid 1617] <... futex resumed>) = 1 [pid 1615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1605] <... mmap resumed>) = 0x20000000 [ 33.218260][ T1615] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 33.229095][ T1617] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 33.236561][ T1628] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1617] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1615] <... futex resumed>) = 1 [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1617] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1611] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1617] write(4, 0x20000f80, 9 [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1611] <... futex resumed>) = 0 [pid 1608] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1611] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1608] <... mmap resumed>) = 0x7f70edc9c000 [pid 1611] <... mmap resumed>) = 0x7f70edc9c000 [pid 1608] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1611] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 1608] <... mprotect resumed>) = 0 [pid 1611] <... mprotect resumed>) = 0 [pid 1608] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1611] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1608] <... clone resumed>, parent_tid=[1632], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1632 [pid 1611] <... clone resumed>, parent_tid=[1633], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1633 [pid 1608] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1608] <... futex resumed>) = 0 [pid 1611] <... futex resumed>) = 0 [pid 1608] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1611] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1633 attached [pid 1633] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1632 attached [pid 1629] <... openat resumed>) = 3 [pid 1615] write(4, 0x20000f80, 9 [pid 1610] <... mount resumed>) = 0 [pid 1605] <... futex resumed>) = 1 [pid 1629] write(3, "1000", 4 [pid 1605] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1629] <... write resumed>) = 4 [pid 1629] close(3) = 0 [pid 1629] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1629] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1629] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1629] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1634], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1634 [pid 1629] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1629] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1610] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1632] set_robust_list(0x7f70edcbc9e0, 24 [pid 1610] <... openat resumed>) = 3 [pid 1632] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 1634 attached [pid 1633] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1617] <... write resumed>) = 9 [pid 1602] <... futex resumed>) = 0 [pid 1617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1617] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1632] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1617] <... futex resumed>) = ? [pid 1610] chdir("./file0") = 0 [pid 1610] ioctl(4, LOOP_CLR_FD [pid 1634] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1634] memfd_create("syzkaller", 0) = 3 [pid 1634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 33.279488][ T1610] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 33.281289][ T1633] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.294316][ T1632] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 1634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1608] <... futex resumed>) = ? [pid 1602] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1611] <... futex resumed>) = ? [pid 1605] <... futex resumed>) = 0 [pid 1602] <... futex resumed>) = 1 [pid 1634] <... write resumed>) = 1048576 [pid 1634] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1634] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 1617] +++ killed by SIGBUS +++ [pid 1632] +++ killed by SIGBUS +++ [pid 1608] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1608, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./34/binderfs") = 0 [pid 376] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1605] write(4, 0x20000f80, 9 [pid 1602] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1602] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 1602] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 1602] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1635], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1635 [pid 1602] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1602] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 1635 attached [pid 1605] <... write resumed>) = 9 [pid 377] <... umount2 resumed>) = 0 [pid 1605] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1605] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1605] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./35/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./35") = 0 [pid 377] mkdir("./36", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1636 [pid 1635] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 1636 attached [pid 1636] set_robust_list(0x5555569495e0, 24) = 0 [pid 1636] chdir("./36") = 0 [pid 1636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 1636] setpgid(0, 0) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, [pid 1610] <... ioctl resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1610] close(4 [pid 376] getdents64(4, [pid 1610] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 1635] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1634] <... openat resumed>) = 4 [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 1636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 1634] ioctl(4, LOOP_SET_FD, 3 [pid 1602] <... futex resumed>) = ? [pid 1610] <... futex resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1605] <... futex resumed>) = ? [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 1636] <... openat resumed>) = 3 [pid 1605] +++ killed by SIGBUS +++ [pid 1636] write(3, "1000", 4 [pid 1610] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 1636] <... write resumed>) = 4 [pid 1636] close(3 [pid 1610] <... open resumed>) = 4 [pid 1609] <... futex resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1636] <... close resumed>) = 0 [pid 1635] +++ killed by SIGBUS +++ [pid 1610] <... futex resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1602] +++ killed by SIGBUS +++ [pid 376] rmdir("./34/file0" [pid 1636] symlink("/dev/binderfs", "./binderfs" [pid 1610] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 1636] <... symlink resumed>) = 0 [pid 1610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... rmdir resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1602, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 1636] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 376] getdents64(3, [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 1636] <... futex resumed>) = 0 [pid 1610] <... write resumed>) = 9 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 1610] <... futex resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1610] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... close resumed>) = 0 [pid 372] umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1610] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 1609] <... futex resumed>) = 0 [pid 376] rmdir("./34" [pid 1610] open("./bus", O_RDWR [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1610] <... open resumed>) = 5 [pid 376] <... rmdir resumed>) = 0 [pid 372] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 1636] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] mkdir("./35", 0777 [pid 372] <... openat resumed>) = 3 [pid 1610] <... futex resumed>) = 1 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 1610] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 1609] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 372] fstat(3, [pid 1610] <... mmap resumed>) = 0x20000000 [pid 1609] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 1610] <... futex resumed>) = 0 [pid 1609] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 1610] write(4, 0x20000f80, 9 [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 1609] <... futex resumed>) = 0 [pid 1609] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1610] <... write resumed>) = 9 [pid 1609] <... mmap resumed>) = 0x7f70edc9c000 [pid 1610] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 1609] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1610] <... futex resumed>) = 0 [pid 1609] <... mprotect resumed>) = 0 [pid 372] lstat("./34/binderfs", [pid 1610] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 1609] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 1638 attached [pid 1636] <... mmap resumed>) = 0x7f70f5fbd000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 1609] <... clone resumed>, parent_tid=[1638], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 1638 [pid 1609] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] unlink("./34/binderfs" [pid 1609] <... futex resumed>) = 0 [pid 1609] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... unlink resumed>) = 0 [ 33.303607][ T1615] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 33.330571][ T1615] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.330571][ T1615] [ 33.342719][ T1615] EXT4-fs (loop3): Total free blocks count 0 [ 33.346375][ T1635] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.363329][ T1615] EXT4-fs (loop3): Free/Dirty block details [pid 372] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1638] set_robust_list(0x7f70edcbc9e0, 24 [pid 1636] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1634] <... ioctl resumed>) = 0 [pid 1634] close(3 [pid 1638] <... set_robust_list resumed>) = 0 [pid 1636] <... mprotect resumed>) = 0 [pid 1636] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 1634] <... close resumed>) = 0 [pid 1638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 1634] mkdir("./file0", 0777) = 0 [pid 1610] <... futex resumed>) = ? [pid 1609] <... futex resumed>) = ? [pid 376] <... openat resumed>) = 3 [pid 1634] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] ioctl(3, LOOP_CLR_FD [pid 1636] <... clone resumed>, parent_tid=[1639], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1639 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1636] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 376] close(3 [pid 1636] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1640 [pid 1610] +++ killed by SIGBUS +++ [pid 1638] +++ killed by SIGBUS +++ [pid 1609] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 1640 attached ./strace-static-x86_64: Process 1639 attached [pid 1639] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1639] memfd_create("syzkaller", 0 [pid 1640] set_robust_list(0x5555569495e0, 24) = 0 [pid 1640] chdir("./35" [pid 1639] <... memfd_create resumed>) = 3 [pid 1639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 1640] <... chdir resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1609, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 374] umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./33/binderfs") = 0 [pid 374] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 33.386867][ T1615] EXT4-fs (loop3): free_blocks=2415919104 [ 33.393968][ T1615] EXT4-fs (loop3): dirty_blocks=16 [ 33.394169][ T1638] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.399761][ T1615] EXT4-fs (loop3): Block reservation details [pid 1640] setpgid(0, 0) = 0 [pid 1640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 1640] write(3, "1000", 4) = 4 [pid 1640] close(3) = 0 [pid 1640] symlink("/dev/binderfs", "./binderfs") = 0 [pid 1640] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 1640] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 1615] <... write resumed>) = ? [pid 1640] <... mprotect resumed>) = 0 [pid 1640] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[1643], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 1643 [pid 1640] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 1640] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 1639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 1639] munmap(0x7f70edbbd000, 1048576) = 0 [pid 1639] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 1643 attached [pid 1643] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 1643] memfd_create("syzkaller", 0) = 3 [pid 1643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 1615] +++ killed by SIGBUS +++ [pid 1643] <... mmap resumed>) = 0x7f70edbbd000 [pid 1633] +++ killed by SIGBUS +++ [pid 1611] +++ killed by SIGBUS +++ [pid 1634] <... mount resumed>) = 0 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=1611, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=10} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./35/binderfs") = 0 [pid 375] umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 1634] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 1643] <... write resumed>) = 1048576 [pid 1634] <... openat resumed>) = 3 [pid 1634] chdir("./file0") = 0 [pid 1634] ioctl(4, LOOP_CLR_FD [pid 1643] munmap(0x7f70edbbd000, 1048576) = 0 [ 33.440470][ T1615] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 33.449531][ T1634] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 33.463417][ T9] ------------[ cut here ]------------ [ 33.468978][ T9] kernel BUG at fs/ext4/inode.c:2767! [ 33.474382][ T9] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 33.480429][ T9] CPU: 1 PID: 9 Comm: kworker/u4:1 Not tainted 5.10.153-syzkaller-00570-g673a7341bdab #0 [ 33.490196][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 33.500230][ T9] Workqueue: writeback wb_workfn (flush-7:3) [ 33.506208][ T9] RIP: 0010:ext4_writepages+0x36f6/0x3710 [ 33.511915][ T9] Code: c6 31 ff e8 3c ec 8f ff 84 db 75 2c e8 23 e9 8f ff 48 bb 00 00 00 00 00 fc ff df 4c 8b 64 24 40 e9 28 f7 ff ff e8 0a e9 8f ff <0f> 0b e8 03 e9 8f ff e8 8d 87 23 ff eb a0 e8 f7 e8 8f ff e8 81 87 [ 33.531498][ T9] RSP: 0018:ffffc900000970c0 EFLAGS: 00010293 [ 33.537541][ T9] RAX: ffffffff81dcfab6 RBX: 0000008000000000 RCX: ffff88810023e2c0 [ 33.545483][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 33.553425][ T9] RBP: ffffc900000974b0 R08: ffffffff81dcca9a R09: ffffed10234e300b [ 33.561369][ T9] R10: ffffed10234e300b R11: 1ffff110234e300a R12: ffff888105da0000 [ 33.569317][ T9] R13: ffffc90000097380 R14: 0000008410000000 R15: ffffc90000097830 [ 33.577262][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.586163][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.592724][ T9] CR2: 0000555556952628 CR3: 000000011eaf4000 CR4: 00000000003506a0 [ 33.600671][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.608614][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.616555][ T9] Call Trace: [ 33.619823][ T9] ? __kasan_check_write+0x14/0x20 [ 33.624913][ T9] ? __switch_to+0x5e4/0x1220 [ 33.629569][ T9] ? ext4_readpage+0x220/0x220 [ 33.634306][ T9] ? set_next_entity+0xc5/0x390 [ 33.639135][ T9] ? compat_start_thread+0x80/0x80 [ 33.644225][ T9] ? switch_mm_irqs_off+0x63f/0x990 [ 33.649395][ T9] ? ext4_readpage+0x220/0x220 [ 33.654167][ T9] do_writepages+0x13a/0x280 [ 33.658741][ T9] ? __writepage+0x130/0x130 [ 33.663312][ T9] ? __kasan_check_write+0x14/0x20 [ 33.668393][ T9] ? _raw_spin_lock+0xa3/0x1b0 [ 33.673133][ T9] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 33.678494][ T9] ? __kasan_check_write+0x14/0x20 [ 33.683595][ T9] __writeback_single_inode+0xb8/0x6e0 [ 33.689045][ T9] writeback_sb_inodes+0x999/0x1700 [ 33.694234][ T9] ? __kasan_check_write+0x14/0x20 [ 33.699331][ T9] ? release_firmware_map_entry+0x194/0x194 [ 33.705204][ T9] ? move_expired_inodes+0x804/0x860 [ 33.710458][ T9] ? queue_io+0x500/0x500 [ 33.714761][ T9] ? writeback_sb_inodes+0x1700/0x1700 [ 33.720196][ T9] ? __irq_exit_rcu+0x41/0x150 [ 33.724937][ T9] ? queue_io+0x3c7/0x500 [ 33.729241][ T9] ? __do_softirq+0x596/0x596 [ 33.733895][ T9] wb_writeback+0x42f/0xc20 [ 33.738377][ T9] ? wb_io_lists_depopulated+0x180/0x180 [ 33.743989][ T9] ? widen_string+0x41/0x3a0 [ 33.748549][ T9] ? __kasan_check_write+0x14/0x20 [ 33.753630][ T9] wb_do_writeback+0x222/0xbd0 [ 33.758363][ T9] ? wb_workfn+0x3f0/0x3f0 [ 33.762750][ T9] ? compat_start_thread+0x80/0x80 [ 33.767830][ T9] ? set_worker_desc+0x158/0x1c0 [ 33.772737][ T9] ? work_busy+0x250/0x250 [ 33.777123][ T9] ? finish_task_switch+0x130/0x580 [ 33.782292][ T9] ? __switch_to_asm+0x34/0x60 [ 33.787024][ T9] ? kthread_data+0x52/0xc0 [ 33.791495][ T9] wb_workfn+0xf8/0x3f0 [ 33.795621][ T9] process_one_work+0x726/0xc10 [ 33.800441][ T9] worker_thread+0xb27/0x1550 [ 33.805101][ T9] kthread+0x349/0x3d0 [ 33.809146][ T9] ? worker_clr_flags+0x180/0x180 [ 33.814140][ T9] ? kthread_blkcg+0xd0/0xd0 [ 33.818707][ T9] ret_from_fork+0x1f/0x30 [ 33.823097][ T9] Modules linked in: [ 33.827514][ T9] ---[ end trace e558c04fd4a1c702 ]--- [ 33.832967][ T9] RIP: 0010:ext4_writepages+0x36f6/0x3710 [pid 1643] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./34/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./34") = 0 [pid 372] mkdir("./35", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 1639] <... openat resumed>) = 4 [ 33.839223][ T9] Code: c6 31 ff e8 3c ec 8f ff 84 db 75 2c e8 23 e9 8f ff 48 bb 00 00 00 00 00 fc ff df 4c 8b 64 24 40 e9 28 f7 ff ff e8 0a e9 8f ff <0f> 0b e8 03 e9 8f ff e8 8d 87 23 ff eb a0 e8 f7 e8 8f ff e8 81 87 [ 33.858992][ T9] RSP: 0018:ffffc900000970c0 EFLAGS: 00010293 [ 33.865104][ T9] RAX: ffffffff81dcfab6 RBX: 0000008000000000 RCX: ffff88810023e2c0 [ 33.873262][ T9] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 33.881345][ T9] RBP: ffffc900000974b0 R08: ffffffff81dcca9a R09: ffffed10234e300b [pid 1639] ioctl(4, LOOP_SET_FD, 3 [pid 1643] <... openat resumed>) = 4 [pid 1639] <... ioctl resumed>) = 0 [pid 1634] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 1643] ioctl(4, LOOP_SET_FD, 3 [pid 1639] close(3 [pid 1634] close(4 [pid 374] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 1639] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 1639] mkdir("./file0", 0777 [pid 374] lstat("./33/file0", [pid 1639] <... mkdir resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1639] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 1643] <... ioctl resumed>) = 0 [pid 1634] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 1643] close(3 [pid 1634] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 1643] <... close resumed>) = 0 [pid 1634] <... futex resumed>) = 1 [pid 1629] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 4 [pid 372] <... close resumed>) = 0 [pid 1643] mkdir("./file0", 0777 [pid 1634] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] fstat(4, [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 1643] <... mkdir resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 1643] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] getdents64(4, [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 1646 [ 33.889464][ T9] R10: ffffed10234e300b R11: 1ffff110234e300a R12: ffff888105da0000 [ 33.897599][ T9] R13: ffffc90000097380 R14: 0000008410000000 R15: ffffc90000097830 [ 33.905567][ T9] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 33.914711][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.921429][ T9] CR2: 00007f70edcbc000 CR3: 000000010c541000 CR4: 00000000003506b0 [ 33.929528][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 1629] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... close resumed>) = 0 [pid 1634] <... futex resumed>) = 0 [pid 1629] <... futex resumed>) = 1 [pid 374] rmdir("./33/file0" [pid 1634] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 1629] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... rmdir resumed>) = 0 [pid 1634] <... open resumed>) = 4 [pid 374] getdents64(3, ./strace-static-x86_64: Process 1646 attached [pid 1634] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./33") = 0 [pid 374] mkdir("./34", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 1647 [ 33.937717][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.949687][ T9] Kernel panic - not syncing: Fatal exception [ 33.955891][ T9] Kernel Offset: disabled [ 33.960198][ T9] Rebooting in 86400 seconds..