./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor800797254 <...> OK syzkaller syzkaller login: [ 11.526040][ T23] kauditd_printk_skb: 60 callbacks suppressed [ 11.526047][ T23] audit: type=1400 audit(1669521277.969:71): avc: denied { transition } for pid=290 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 11.531500][ T23] audit: type=1400 audit(1669521277.979:72): avc: denied { write } for pid=290 comm="sh" path="pipe:[10618]" dev="pipefs" ino=10618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1 [ 12.417552][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 12.668139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #80!!! Warning: Permanently added '10.128.15.196' (ECDSA) to the list of known hosts. execve("./syz-executor800797254", ["./syz-executor800797254"], 0x7ffe05dd02f0 /* 10 vars */) = 0 brk(NULL) = 0x555556949000 brk(0x555556949c40) = 0x555556949c40 arch_prctl(ARCH_SET_FS, 0x555556949300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 set_tid_address(0x5555569495d0) = 371 set_robust_list(0x5555569495e0, 24) = 0 rt_sigaction(SIGRTMIN, {sa_handler=0x7f70f5fee500, sa_mask=[], sa_flags=SA_RESTORER|SA_SIGINFO, sa_restorer=0x7f70f5feebd0}, NULL, 8) = 0 rt_sigaction(SIGRT_1, {sa_handler=0x7f70f5fee5a0, sa_mask=[], sa_flags=SA_RESTORER|SA_RESTART|SA_SIGINFO, sa_restorer=0x7f70f5feebd0}, NULL, 8) = 0 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor800797254", 4096) = 27 brk(0x55555696ac40) = 0x55555696ac40 brk(0x55555696b000) = 0x55555696b000 mprotect(0x7f70f60b0000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 372 ./strace-static-x86_64: Process 372 attached [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] set_robust_list(0x5555569495e0, 24) = 0 ./strace-static-x86_64: Process 373 attached [pid 372] getpid( [pid 373] set_robust_list(0x5555569495e0, 24 [pid 372] <... getpid resumed>) = 372 [pid 373] <... set_robust_list resumed>) = 0 [pid 372] mkdir("./syzkaller.kCEUrk", 0700 [pid 373] getpid( [pid 372] <... mkdir resumed>) = 0 [pid 373] <... getpid resumed>) = 373 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 373 [pid 372] chmod("./syzkaller.kCEUrk", 0777 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] mkdir("./syzkaller.Sa0Rjo", 0700./strace-static-x86_64: Process 374 attached [pid 372] <... chmod resumed>) = 0 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 374 [pid 374] set_robust_list(0x5555569495e0, 24 [pid 373] <... mkdir resumed>) = 0 [pid 374] <... set_robust_list resumed>) = 0 [pid 372] chdir("./syzkaller.kCEUrk" [pid 373] chmod("./syzkaller.Sa0Rjo", 0777 [pid 372] <... chdir resumed>) = 0 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] getpid( [pid 373] <... chmod resumed>) = 0 [pid 372] mkdir("./0", 0777./strace-static-x86_64: Process 375 attached [pid 374] <... getpid resumed>) = 374 [pid 373] chdir("./syzkaller.Sa0Rjo" [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 375 [pid 374] mkdir("./syzkaller.DsT2Mv", 0700 [pid 373] <... chdir resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 375] set_robust_list(0x5555569495e0, 24 [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... set_robust_list resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] mkdir("./0", 0777 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] chmod("./syzkaller.DsT2Mv", 0777 [pid 375] getpid( [pid 374] <... chmod resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 376 [pid 375] <... getpid resumed>) = 375 [pid 374] chdir("./syzkaller.DsT2Mv" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] ioctl(3, LOOP_CLR_FD [pid 374] <... chdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 371] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] mkdir("./syzkaller.aHmh5z", 0700 [pid 374] mkdir("./0", 0777 [pid 373] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 375] chmod("./syzkaller.aHmh5z", 0777 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] close(3 [pid 372] <... close resumed>) = 0 [pid 375] <... chmod resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] chdir("./syzkaller.aHmh5z" [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... chdir resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 378 [pid 375] mkdir("./0", 0777 [pid 374] close(3 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 379 [pid 375] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... openat resumed>) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 380 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 381 [pid 371] <... clone resumed>, child_tidptr=0x5555569495d0) = 377 ./strace-static-x86_64: Process 376 attached [pid 376] set_robust_list(0x5555569495e0, 24) = 0 [pid 376] getpid() = 376 [pid 376] mkdir("./syzkaller.LseQLB", 0700) = 0 [pid 376] chmod("./syzkaller.LseQLB", 0777) = 0 [pid 376] chdir("./syzkaller.LseQLB") = 0 [pid 376] mkdir("./0", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 382 ./strace-static-x86_64: Process 382 attached [pid 382] set_robust_list(0x5555569495e0, 24) = 0 [pid 382] chdir("./0") = 0 [pid 382] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 382] setpgid(0, 0) = 0 [pid 382] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 382] write(3, "1000", 4) = 4 [pid 382] close(3) = 0 [pid 382] symlink("/dev/binderfs", "./binderfs") = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 382] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 380 attached ./strace-static-x86_64: Process 378 attached ./strace-static-x86_64: Process 377 attached ./strace-static-x86_64: Process 379 attached ./strace-static-x86_64: Process 381 attached [pid 380] set_robust_list(0x5555569495e0, 24 [pid 378] set_robust_list(0x5555569495e0, 24 [pid 377] set_robust_list(0x5555569495e0, 24 [pid 380] <... set_robust_list resumed>) = 0 [pid 379] set_robust_list(0x5555569495e0, 24 [pid 378] <... set_robust_list resumed>) = 0 [pid 377] <... set_robust_list resumed>) = 0 [pid 381] set_robust_list(0x5555569495e0, 24 [pid 380] chdir("./0" [pid 379] <... set_robust_list resumed>) = 0 [pid 378] chdir("./0" [pid 381] <... set_robust_list resumed>) = 0 [pid 377] getpid( [pid 379] chdir("./0" [pid 381] chdir("./0" [pid 382] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 380] <... chdir resumed>) = 0 [pid 379] <... chdir resumed>) = 0 [pid 378] <... chdir resumed>) = 0 [pid 377] <... getpid resumed>) = 377 [pid 381] <... chdir resumed>) = 0 [pid 380] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 379] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 378] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 382] <... clone resumed>, parent_tid=[387], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 387 [pid 381] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 380] <... prctl resumed>) = 0 [pid 379] <... prctl resumed>) = 0 [pid 378] <... prctl resumed>) = 0 [pid 377] mkdir("./syzkaller.Mq9WhJ", 0700 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... prctl resumed>) = 0 [pid 380] setpgid(0, 0 [pid 379] setpgid(0, 0 [pid 378] setpgid(0, 0 [pid 381] setpgid(0, 0 [pid 379] <... setpgid resumed>) = 0 [pid 378] <... setpgid resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 380] <... setpgid resumed>) = 0 [pid 382] <... futex resumed>) = 0 [pid 381] <... setpgid resumed>) = 0 [pid 379] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 378] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 380] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 381] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 380] <... openat resumed>) = 3 [pid 378] <... openat resumed>) = 3 [pid 379] <... openat resumed>) = 3 [pid 381] <... openat resumed>) = 3 [pid 380] write(3, "1000", 4 [pid 379] write(3, "1000", 4 [pid 378] write(3, "1000", 4 [pid 377] chmod("./syzkaller.Mq9WhJ", 0777 [pid 381] write(3, "1000", 4 [pid 380] <... write resumed>) = 4 [pid 379] <... write resumed>) = 4 [pid 378] <... write resumed>) = 4 [pid 377] <... chmod resumed>) = 0 [pid 381] <... write resumed>) = 4 [pid 380] close(3 [pid 379] close(3 [pid 378] close(3 [pid 377] chdir("./syzkaller.Mq9WhJ" [pid 381] close(3 [pid 380] <... close resumed>) = 0 [pid 379] <... close resumed>) = 0 [pid 378] <... close resumed>) = 0 [pid 381] <... close resumed>) = 0 [pid 380] symlink("/dev/binderfs", "./binderfs" [pid 379] symlink("/dev/binderfs", "./binderfs" [pid 378] symlink("/dev/binderfs", "./binderfs" [pid 377] <... chdir resumed>) = 0 [pid 381] symlink("/dev/binderfs", "./binderfs" [pid 380] <... symlink resumed>) = 0 [pid 379] <... symlink resumed>) = 0 [pid 378] <... symlink resumed>) = 0 [pid 381] <... symlink resumed>) = 0 [pid 379] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./0", 0777 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 379] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 381] <... futex resumed>) = 0 [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 380] <... mmap resumed>) = 0x7f70f5fbd000 [pid 379] <... mmap resumed>) = 0x7f70f5fbd000 [pid 378] <... mmap resumed>) = 0x7f70f5fbd000 [pid 377] <... openat resumed>) = 3 [pid 381] <... mmap resumed>) = 0x7f70f5fbd000 [pid 380] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 379] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 378] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 377] ioctl(3, LOOP_CLR_FD [pid 381] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 380] <... mprotect resumed>) = 0 [pid 379] <... mprotect resumed>) = 0 [pid 378] <... mprotect resumed>) = 0 [pid 381] <... mprotect resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 380] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] close(3 [pid 379] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 378] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... close resumed>) = 0 [pid 381] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 378] <... clone resumed>, parent_tid=[388], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 388 [pid 381] <... clone resumed>, parent_tid=[392], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 392 [pid 380] <... clone resumed>, parent_tid=[390], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 390 [pid 379] <... clone resumed>, parent_tid=[391], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 391 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 389 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 391 attached ./strace-static-x86_64: Process 390 attached ./strace-static-x86_64: Process 392 attached ./strace-static-x86_64: Process 389 attached ./strace-static-x86_64: Process 388 attached ./strace-static-x86_64: Process 387 attached [pid 392] set_robust_list(0x7f70f5fdd9e0, 24 [pid 391] set_robust_list(0x7f70f5fdd9e0, 24 [pid 390] set_robust_list(0x7f70f5fdd9e0, 24 [pid 389] set_robust_list(0x5555569495e0, 24 [pid 388] set_robust_list(0x7f70f5fdd9e0, 24 [pid 387] set_robust_list(0x7f70f5fdd9e0, 24 [pid 392] <... set_robust_list resumed>) = 0 [pid 391] <... set_robust_list resumed>) = 0 [pid 390] <... set_robust_list resumed>) = 0 [pid 389] <... set_robust_list resumed>) = 0 [pid 388] <... set_robust_list resumed>) = 0 [pid 387] <... set_robust_list resumed>) = 0 [pid 391] memfd_create("syzkaller", 0 [pid 390] memfd_create("syzkaller", 0 [pid 388] memfd_create("syzkaller", 0 [pid 387] memfd_create("syzkaller", 0 [pid 391] <... memfd_create resumed>) = 3 [pid 390] <... memfd_create resumed>) = 3 [pid 391] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 390] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 388] <... memfd_create resumed>) = 3 [pid 387] <... memfd_create resumed>) = 3 [pid 391] <... mmap resumed>) = 0x7f70edbbd000 [pid 390] <... mmap resumed>) = 0x7f70edbbd000 [pid 388] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 387] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 392] memfd_create("syzkaller", 0) = 3 [pid 392] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 19.591405][ T23] audit: type=1400 audit(1669521286.039:73): avc: denied { execmem } for pid=371 comm="syz-executor800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.602722][ T23] audit: type=1400 audit(1669521286.049:74): avc: denied { read write } for pid=372 comm="syz-executor800" name="loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.606020][ T23] audit: type=1400 audit(1669521286.049:75): avc: denied { open } for pid=372 comm="syz-executor800" path="/dev/loop0" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 19.610429][ T23] audit: type=1400 audit(1669521286.059:76): avc: denied { ioctl } for pid=372 comm="syz-executor800" path="/dev/loop0" dev="devtmpfs" ino=115 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [pid 392] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 390] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 389] chdir("./0" [pid 388] <... mmap resumed>) = 0x7f70edbbd000 [pid 387] <... mmap resumed>) = 0x7f70edbbd000 [pid 389] <... chdir resumed>) = 0 [pid 389] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 389] setpgid(0, 0) = 0 [pid 389] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 389] write(3, "1000", 4) = 4 [pid 389] close(3) = 0 [pid 389] symlink("/dev/binderfs", "./binderfs") = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 389] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[393], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 393 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 393 attached [pid 393] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 393] memfd_create("syzkaller", 0) = 3 [pid 393] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 391] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 388] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 387] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 392] <... write resumed>) = 1048576 [pid 392] munmap(0x7f70edbbd000, 1048576) = 0 [pid 392] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 392] ioctl(4, LOOP_SET_FD, 3 [pid 393] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 390] <... write resumed>) = 1048576 [pid 391] <... write resumed>) = 1048576 [pid 388] <... write resumed>) = 1048576 [pid 391] munmap(0x7f70edbbd000, 1048576 [pid 390] munmap(0x7f70edbbd000, 1048576 [pid 388] munmap(0x7f70edbbd000, 1048576) = 0 [pid 391] <... munmap resumed>) = 0 [pid 390] <... munmap resumed>) = 0 [pid 388] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 391] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 390] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 387] <... write resumed>) = 1048576 [pid 387] munmap(0x7f70edbbd000, 1048576) = 0 [pid 387] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 392] <... ioctl resumed>) = 0 [pid 391] <... openat resumed>) = 4 [pid 390] <... openat resumed>) = 4 [pid 388] <... openat resumed>) = 4 [pid 391] ioctl(4, LOOP_SET_FD, 3 [pid 390] ioctl(4, LOOP_SET_FD, 3 [pid 388] ioctl(4, LOOP_SET_FD, 3 [pid 387] <... openat resumed>) = 4 [pid 387] ioctl(4, LOOP_SET_FD, 3 [pid 388] <... ioctl resumed>) = 0 [pid 388] close(3) = 0 [pid 388] mkdir("./file0", 0777 [pid 392] close(3 [pid 388] <... mkdir resumed>) = 0 [pid 388] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 393] <... write resumed>) = 1048576 [pid 392] <... close resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 392] mkdir("./file0", 0777 [pid 391] close(3 [pid 392] <... mkdir resumed>) = 0 [pid 391] <... close resumed>) = 0 [pid 392] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 391] mkdir("./file0", 0777) = 0 [pid 391] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 393] munmap(0x7f70edbbd000, 1048576) = 0 [pid 393] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 393] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 393] close(3) = 0 [pid 393] mkdir("./file0", 0777) = 0 [pid 393] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 390] <... ioctl resumed>) = 0 [pid 390] close(3) = 0 [pid 390] mkdir("./file0", 0777) = 0 [pid 390] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 387] <... ioctl resumed>) = 0 [pid 387] close(3) = 0 [pid 387] mkdir("./file0", 0777) = 0 [pid 387] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue") = 0 [pid 387] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 387] chdir("./file0") = 0 [pid 387] ioctl(4, LOOP_CLR_FD) = 0 [pid 387] close(4) = 0 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [ 19.705843][ T23] audit: type=1400 audit(1669521286.149:77): avc: denied { mounton } for pid=378 comm="syz-executor800" path="/root/syzkaller.kCEUrk/0/file0" dev="sda1" ino=1156 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 19.742142][ T387] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 387] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] open("./bus", O_RDWR) = 5 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 382] <... futex resumed>) = 0 [pid 382] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 382] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 382] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[412], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 412 [pid 382] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 382] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 387] <... futex resumed>) = 1 [pid 387] write(4, 0x20000f80, 9) = 9 [pid 387] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 19.756119][ T23] audit: type=1400 audit(1669521286.199:78): avc: denied { mount } for pid=382 comm="syz-executor800" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 19.767862][ T392] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 19.781664][ T23] audit: type=1400 audit(1669521286.199:79): avc: denied { write } for pid=382 comm="syz-executor800" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 19.788513][ T388] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 19.809725][ T391] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 19.818155][ T23] audit: type=1400 audit(1669521286.199:80): avc: denied { add_name } for pid=382 comm="syz-executor800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [pid 387] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 388] <... mount resumed>) = 0 ./strace-static-x86_64: Process 412 attached [pid 412] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 412] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 392] <... mount resumed>) = 0 [pid 391] <... mount resumed>) = 0 [pid 388] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 382] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 392] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 391] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 388] <... openat resumed>) = 3 [pid 392] <... openat resumed>) = 3 [pid 391] <... openat resumed>) = 3 [pid 388] chdir("./file0" [pid 392] chdir("./file0" [pid 391] chdir("./file0" [pid 388] <... chdir resumed>) = 0 [pid 392] <... chdir resumed>) = 0 [pid 391] <... chdir resumed>) = 0 [pid 388] ioctl(4, LOOP_CLR_FD [pid 392] ioctl(4, LOOP_CLR_FD [pid 391] ioctl(4, LOOP_CLR_FD [pid 388] <... ioctl resumed>) = 0 [pid 392] <... ioctl resumed>) = 0 [pid 391] <... ioctl resumed>) = 0 [pid 388] close(4 [pid 392] close(4 [pid 391] close(4 [pid 388] <... close resumed>) = 0 [pid 392] <... close resumed>) = 0 [pid 391] <... close resumed>) = 0 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] <... futex resumed>) = 1 [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 388] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [ 19.827106][ T412] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.847386][ T23] audit: type=1400 audit(1669521286.199:81): avc: denied { create } for pid=382 comm="syz-executor800" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.862260][ T390] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 390] <... mount resumed>) = 0 [pid 387] <... futex resumed>) = ? [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 387] +++ killed by SIGBUS +++ [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 412] +++ killed by SIGBUS +++ [pid 392] <... futex resumed>) = 0 [pid 391] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 0 [pid 382] +++ killed by SIGBUS +++ [pid 381] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 1 [pid 378] <... futex resumed>) = 1 [pid 392] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 391] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 388] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=382, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 390] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 390] chdir("./file0" [pid 393] <... mount resumed>) = 0 [pid 392] <... open resumed>) = 4 [pid 391] <... open resumed>) = 4 [pid 388] <... open resumed>) = 4 [pid 390] <... chdir resumed>) = 0 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 390] ioctl(4, LOOP_CLR_FD [pid 388] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 393] <... openat resumed>) = 3 [pid 392] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 391] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 390] <... ioctl resumed>) = 0 [pid 388] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... write resumed>) = 9 [pid 391] <... write resumed>) = 9 [pid 381] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 388] <... write resumed>) = 9 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 392] <... futex resumed>) = 1 [pid 391] <... futex resumed>) = 1 [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] chdir("./file0") = 0 [pid 390] close(4) = 0 [pid 393] ioctl(4, LOOP_CLR_FD) = 0 [pid 393] close(4 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 393] <... close resumed>) = 0 [pid 390] <... futex resumed>) = 1 [pid 390] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 380] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 1 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 393] <... open resumed>) = 4 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] open("./bus", O_RDWR) = 5 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 389] <... futex resumed>) = 0 [pid 389] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 389] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 389] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[415], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 415 [pid 389] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 389] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 393] <... futex resumed>) = 1 [pid 393] write(4, 0x20000f80, 9) = 9 [pid 393] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 393] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 415 attached [pid 415] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 392] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 1 [pid 381] <... futex resumed>) = 1 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 392] open("./bus", O_RDWR [pid 388] open("./bus", O_RDWR [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] <... futex resumed>) = 1 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 392] <... open resumed>) = 5 [pid 388] <... open resumed>) = 5 [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] <... futex resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] getdents64(3, [pid 392] <... futex resumed>) = 1 [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 392] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 388] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... mmap resumed>) = 0x20000000 [pid 388] <... mmap resumed>) = 0x20000000 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./0/binderfs", [pid 392] <... futex resumed>) = 0 [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 378] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 392] write(4, 0x20000f80, 9 [pid 388] write(4, 0x20000f80, 9 [pid 381] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./0/binderfs" [pid 388] <... write resumed>) = 9 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 388] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 388] <... futex resumed>) = 0 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 388] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 381] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 378] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 381] <... mmap resumed>) = 0x7f70edc9c000 [pid 378] <... mmap resumed>) = 0x7f70edc9c000 [pid 381] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 378] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 381] <... mprotect resumed>) = 0 [pid 378] <... mprotect resumed>) = 0 [pid 381] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 378] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 381] <... clone resumed>, parent_tid=[416], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 416 [pid 378] <... clone resumed>, parent_tid=[417], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 417 [pid 381] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 378] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 381] <... futex resumed>) = 0 [pid 378] <... futex resumed>) = 0 [pid 381] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 378] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] <... futex resumed>) = 0 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 417 attached ./strace-static-x86_64: Process 416 attached [pid 415] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 391] <... futex resumed>) = 0 [pid 390] <... futex resumed>) = 1 [pid 392] <... write resumed>) = 9 [pid 393] <... futex resumed>) = ? [pid 391] open("./bus", O_RDWR [pid 389] <... futex resumed>) = ? [pid 393] +++ killed by SIGBUS +++ [pid 391] <... open resumed>) = 5 [pid 415] +++ killed by SIGBUS +++ [pid 392] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 389] +++ killed by SIGBUS +++ [pid 391] <... futex resumed>) = 1 [pid 379] <... futex resumed>) = 0 [pid 391] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 379] <... futex resumed>) = 0 [pid 392] <... futex resumed>) = 0 [pid 391] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 416] set_robust_list(0x7f70edcbc9e0, 24 [pid 392] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 391] <... mmap resumed>) = 0x20000000 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=389, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 416] <... set_robust_list resumed>) = 0 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 417] set_robust_list(0x7f70edcbc9e0, 24 [pid 391] <... futex resumed>) = 1 [pid 390] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 379] <... futex resumed>) = 0 [pid 377] <... restart_syscall resumed>) = 0 [pid 377] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./0/binderfs" [pid 417] <... set_robust_list resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [ 19.881941][ T23] audit: type=1400 audit(1669521286.199:82): avc: denied { read write open } for pid=382 comm="syz-executor800" path="/root/syzkaller.LseQLB/0/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 19.908947][ T393] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 19.932279][ T415] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 416] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 391] write(4, 0x20000f80, 9 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 391] <... write resumed>) = 9 [pid 379] <... futex resumed>) = 0 [pid 391] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 379] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 391] <... futex resumed>) = 0 [pid 379] <... futex resumed>) = 0 [pid 417] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 388] <... futex resumed>) = ? [pid 378] <... futex resumed>) = ? [pid 388] +++ killed by SIGBUS +++ [pid 417] +++ killed by SIGBUS +++ [pid 378] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=378, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./0/binderfs") = 0 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 392] <... futex resumed>) = ? [pid 381] <... futex resumed>) = ? [pid 390] <... write resumed>) = 9 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 380] <... futex resumed>) = 0 [pid 390] open("./bus", O_RDWR [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... open resumed>) = 5 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... mmap resumed>) = 0x20000000 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 390] write(4, 0x20000f80, 9 [pid 380] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... write resumed>) = 9 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 380] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 390] <... futex resumed>) = 0 [pid 380] <... futex resumed>) = 0 [pid 390] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 380] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 380] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 380] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[419], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 419 [pid 380] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 380] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 379] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 392] +++ killed by SIGBUS +++ [pid 416] +++ killed by SIGBUS +++ [pid 381] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=381, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 419 attached [pid 391] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 419] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 379] <... futex resumed>) = ? [pid 375] lstat("./0/binderfs", [pid 391] +++ killed by SIGBUS +++ [pid 379] +++ killed by SIGBUS +++ [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./0/binderfs") = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=379, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./0/binderfs") = 0 [ 19.949985][ T416] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.955407][ T417] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 19.965379][ T391] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 419] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 390] <... futex resumed>) = ? [pid 380] <... futex resumed>) = ? [pid 390] +++ killed by SIGBUS +++ [pid 419] +++ killed by SIGBUS +++ [pid 380] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=380, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 376] <... umount2 resumed>) = 0 [pid 374] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./0/binderfs" [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... unlink resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./0/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./0") = 0 [pid 376] mkdir("./1", 0777) = 0 [ 19.994363][ T419] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./0/file0", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./0/file0", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = 0 [pid 375] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] fstat(4, [pid 373] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... openat resumed>) = 4 [pid 373] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 372] lstat("./0/file0", [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 373] getdents64(4, [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 372] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] close(4 [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./0/file0" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 375] rmdir("./0/file0" [pid 373] getdents64(3, [pid 372] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 372] <... openat resumed>) = 4 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 375] getdents64(3, [pid 373] rmdir("./0" [pid 372] fstat(4, [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 375] close(3 [pid 373] mkdir("./1", 0777 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 372] getdents64(4, [pid 375] rmdir("./0" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] mkdir("./1", 0777 [pid 372] close(4) = 0 [pid 372] rmdir("./0/file0" [pid 375] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./0") = 0 [pid 372] mkdir("./1", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] lstat("./0/file0", [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] lstat("./0/file0", [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... close resumed>) = 0 [pid 374] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 377] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 422 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 421 [pid 377] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 423 [pid 374] <... openat resumed>) = 4 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 424 [pid 377] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 377] fstat(4, [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 377] getdents64(4, [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 377] close(4 [pid 374] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] rmdir("./0/file0" [pid 377] rmdir("./0/file0" [pid 374] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 374] getdents64(3, [pid 377] getdents64(3, [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3 [pid 377] close(3 [pid 374] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] rmdir("./0" [pid 377] rmdir("./0" [pid 374] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 374] mkdir("./1", 0777 [pid 377] mkdir("./1", 0777 [pid 374] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 423 attached ./strace-static-x86_64: Process 422 attached [pid 377] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 424 attached ./strace-static-x86_64: Process 421 attached [pid 423] set_robust_list(0x5555569495e0, 24 [pid 422] set_robust_list(0x5555569495e0, 24 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 424] set_robust_list(0x5555569495e0, 24 [pid 423] <... set_robust_list resumed>) = 0 [pid 422] <... set_robust_list resumed>) = 0 [pid 421] set_robust_list(0x5555569495e0, 24 [pid 377] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 424] <... set_robust_list resumed>) = 0 [pid 423] chdir("./1" [pid 422] chdir("./1" [pid 421] <... set_robust_list resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 374] close(3 [pid 424] chdir("./1" [pid 423] <... chdir resumed>) = 0 [pid 422] <... chdir resumed>) = 0 [pid 421] chdir("./1" [pid 377] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 424] <... chdir resumed>) = 0 [pid 421] <... chdir resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 424] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 421] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] <... prctl resumed>) = 0 [pid 421] <... prctl resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 425 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 426 [pid 424] setpgid(0, 0 [pid 421] setpgid(0, 0 [pid 424] <... setpgid resumed>) = 0 [pid 421] <... setpgid resumed>) = 0 [pid 424] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 421] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 424] <... openat resumed>) = 3 [pid 421] <... openat resumed>) = 3 [pid 424] write(3, "1000", 4 [pid 421] write(3, "1000", 4./strace-static-x86_64: Process 425 attached [pid 424] <... write resumed>) = 4 [pid 421] <... write resumed>) = 4 [pid 423] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 422] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] close(3 [pid 421] close(3 [pid 424] <... close resumed>) = 0 [pid 421] <... close resumed>) = 0 [pid 424] symlink("/dev/binderfs", "./binderfs" [pid 421] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 426 attached [pid 425] set_robust_list(0x5555569495e0, 24 [pid 424] <... symlink resumed>) = 0 [pid 423] <... prctl resumed>) = 0 [pid 422] <... prctl resumed>) = 0 [pid 421] <... symlink resumed>) = 0 [pid 426] set_robust_list(0x5555569495e0, 24 [pid 425] <... set_robust_list resumed>) = 0 [pid 423] setpgid(0, 0 [pid 422] setpgid(0, 0 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] <... set_robust_list resumed>) = 0 [pid 425] chdir("./1" [pid 423] <... setpgid resumed>) = 0 [pid 422] <... setpgid resumed>) = 0 [pid 426] chdir("./1" [pid 425] <... chdir resumed>) = 0 [pid 424] <... futex resumed>) = 0 [pid 423] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 422] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 421] <... futex resumed>) = 0 [pid 426] <... chdir resumed>) = 0 [pid 425] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 423] <... openat resumed>) = 3 [pid 422] <... openat resumed>) = 3 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 426] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 425] <... prctl resumed>) = 0 [pid 424] <... mmap resumed>) = 0x7f70f5fbd000 [pid 423] write(3, "1000", 4 [pid 422] write(3, "1000", 4 [pid 421] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... prctl resumed>) = 0 [pid 425] setpgid(0, 0 [pid 424] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 423] <... write resumed>) = 4 [pid 422] <... write resumed>) = 4 [pid 426] setpgid(0, 0 [pid 425] <... setpgid resumed>) = 0 [pid 423] close(3 [pid 422] close(3 [pid 421] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 426] <... setpgid resumed>) = 0 [pid 425] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 424] <... mprotect resumed>) = 0 [pid 423] <... close resumed>) = 0 [pid 422] <... close resumed>) = 0 [pid 421] <... mprotect resumed>) = 0 [pid 426] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 425] <... openat resumed>) = 3 [pid 423] symlink("/dev/binderfs", "./binderfs" [pid 422] symlink("/dev/binderfs", "./binderfs" [pid 426] <... openat resumed>) = 3 [pid 425] write(3, "1000", 4 [pid 424] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 421] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 426] write(3, "1000", 4 [pid 425] <... write resumed>) = 4 [pid 423] <... symlink resumed>) = 0 [pid 422] <... symlink resumed>) = 0 [pid 426] <... write resumed>) = 4 [pid 425] close(3 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] close(3 [pid 425] <... close resumed>) = 0 [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 421] <... clone resumed>, parent_tid=[427], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 427 [pid 426] <... close resumed>) = 0 [pid 425] symlink("/dev/binderfs", "./binderfs" [pid 424] <... clone resumed>, parent_tid=[428], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 428 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 428 attached ./strace-static-x86_64: Process 427 attached [pid 426] symlink("/dev/binderfs", "./binderfs" [pid 425] <... symlink resumed>) = 0 [pid 423] <... mmap resumed>) = 0x7f70f5fbd000 [pid 422] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... symlink resumed>) = 0 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 422] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 426] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 423] <... mprotect resumed>) = 0 [pid 422] <... mprotect resumed>) = 0 [pid 426] <... futex resumed>) = 0 [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 423] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 422] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 425] <... mmap resumed>) = 0x7f70f5fbd000 [pid 426] <... mmap resumed>) = 0x7f70f5fbd000 [pid 425] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 423] <... clone resumed>, parent_tid=[429], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 429 [pid 422] <... clone resumed>, parent_tid=[430], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 430 [pid 426] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 425] <... mprotect resumed>) = 0 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 426] <... mprotect resumed>) = 0 [pid 425] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 423] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 426] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 425] <... clone resumed>, parent_tid=[431], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 431 [pid 426] <... clone resumed>, parent_tid=[432], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 432 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] <... futex resumed>) = 0 [pid 426] <... futex resumed>) = 0 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 431 attached [pid 431] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 431] memfd_create("syzkaller", 0) = 3 [pid 431] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 428] set_robust_list(0x7f70f5fdd9e0, 24 [pid 427] set_robust_list(0x7f70f5fdd9e0, 24./strace-static-x86_64: Process 432 attached ./strace-static-x86_64: Process 430 attached [pid 428] <... set_robust_list resumed>) = 0 [pid 427] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 429 attached [pid 432] set_robust_list(0x7f70f5fdd9e0, 24 [pid 430] set_robust_list(0x7f70f5fdd9e0, 24 [pid 428] memfd_create("syzkaller", 0) = 3 [pid 428] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 431] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 427] memfd_create("syzkaller", 0) = 3 [pid 427] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 431] <... write resumed>) = 1048576 [pid 431] munmap(0x7f70edbbd000, 1048576) = 0 [pid 431] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 431] ioctl(4, LOOP_SET_FD, 3 [pid 432] <... set_robust_list resumed>) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 431] close(3 [pid 432] memfd_create("syzkaller", 0 [pid 431] <... close resumed>) = 0 [pid 431] mkdir("./file0", 0777) = 0 [pid 431] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 432] <... memfd_create resumed>) = 3 [pid 432] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 430] <... set_robust_list resumed>) = 0 [pid 429] set_robust_list(0x7f70f5fdd9e0, 24 [pid 428] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 432] <... mmap resumed>) = 0x7f70edbbd000 [pid 430] memfd_create("syzkaller", 0 [pid 429] <... set_robust_list resumed>) = 0 [pid 430] <... memfd_create resumed>) = 3 [pid 430] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 429] memfd_create("syzkaller", 0 [pid 430] <... mmap resumed>) = 0x7f70edbbd000 [pid 429] <... memfd_create resumed>) = 3 [pid 429] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 432] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 430] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 428] <... write resumed>) = 1048576 [pid 427] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 428] munmap(0x7f70edbbd000, 1048576) = 0 [pid 428] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 428] ioctl(4, LOOP_SET_FD, 3 [pid 432] <... write resumed>) = 1048576 [pid 432] munmap(0x7f70edbbd000, 1048576) = 0 [pid 432] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 428] <... ioctl resumed>) = 0 [pid 432] ioctl(4, LOOP_SET_FD, 3 [pid 428] close(3) = 0 [pid 428] mkdir("./file0", 0777) = 0 [pid 428] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 429] <... mmap resumed>) = 0x7f70edbbd000 [pid 431] <... mount resumed>) = 0 [pid 431] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 431] chdir("./file0") = 0 [pid 431] ioctl(4, LOOP_CLR_FD [pid 430] <... write resumed>) = 1048576 [pid 430] munmap(0x7f70edbbd000, 1048576) = 0 [pid 430] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 432] <... ioctl resumed>) = 0 [pid 431] <... ioctl resumed>) = 0 [pid 432] close(3 [pid 431] close(4 [pid 432] <... close resumed>) = 0 [pid 431] <... close resumed>) = 0 [pid 432] mkdir("./file0", 0777 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... mkdir resumed>) = 0 [pid 431] <... futex resumed>) = 1 [pid 425] <... futex resumed>) = 0 [pid 432] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 431] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... open resumed>) = 4 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... write resumed>) = 9 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] open("./bus", O_RDWR [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... open resumed>) = 5 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... mmap resumed>) = 0x20000000 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 431] write(4, 0x20000f80, 9 [pid 425] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... write resumed>) = 9 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 425] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 431] <... futex resumed>) = 0 [pid 425] <... futex resumed>) = 0 [pid 431] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 425] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 425] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 425] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[438], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 438 [pid 425] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 425] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... openat resumed>) = 4 [pid 430] ioctl(4, LOOP_SET_FD, 3 [pid 427] <... write resumed>) = 1048576 [pid 427] munmap(0x7f70edbbd000, 1048576) = 0 [pid 427] openat(AT_FDCWD, "/dev/loop0", O_RDWR./strace-static-x86_64: Process 438 attached [pid 438] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 429] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 429] munmap(0x7f70edbbd000, 1048576) = 0 [pid 429] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 430] <... ioctl resumed>) = 0 [pid 430] close(3) = 0 [pid 430] mkdir("./file0", 0777) = 0 [pid 430] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 438] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 429] <... openat resumed>) = 4 [pid 429] ioctl(4, LOOP_SET_FD, 3 [pid 425] <... futex resumed>) = ? [pid 431] <... futex resumed>) = ? [pid 427] <... openat resumed>) = 4 [pid 427] ioctl(4, LOOP_SET_FD, 3 [pid 429] <... ioctl resumed>) = 0 [pid 429] close(3) = 0 [pid 429] mkdir("./file0", 0777) = 0 [ 20.312847][ T431] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 20.342737][ T438] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 429] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 431] +++ killed by SIGBUS +++ [pid 438] +++ killed by SIGBUS +++ [pid 425] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=425, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, [pid 428] <... mount resumed>) = 0 [pid 428] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 428] <... openat resumed>) = 3 [pid 428] chdir("./file0") = 0 [pid 428] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 427] <... ioctl resumed>) = 0 [pid 377] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./1/binderfs") = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] close(3) = 0 [pid 427] mkdir("./file0", 0777 [pid 432] <... mount resumed>) = 0 [pid 428] <... ioctl resumed>) = 0 [pid 427] <... mkdir resumed>) = 0 [pid 427] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 432] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 429] <... mount resumed>) = 0 [pid 428] close(4 [pid 432] <... openat resumed>) = 3 [pid 428] <... close resumed>) = 0 [pid 432] chdir("./file0" [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... chdir resumed>) = 0 [pid 428] <... futex resumed>) = 1 [pid 432] ioctl(4, LOOP_CLR_FD [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 432] <... ioctl resumed>) = 0 [pid 432] close(4) = 0 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 4 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... write resumed>) = 9 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] open("./bus", O_RDWR [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... open resumed>) = 5 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 426] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 432] <... mmap resumed>) = 0x20000000 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 426] <... futex resumed>) = 0 [pid 432] write(4, 0x20000f80, 9 [pid 426] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 432] <... write resumed>) = 9 [pid 426] <... futex resumed>) = 0 [pid 432] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 426] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 432] <... futex resumed>) = 0 [pid 426] <... mmap resumed>) = 0x7f70edc9c000 [pid 432] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 426] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 426] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[450], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 450 [pid 426] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 426] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 429] chdir("./file0") = 0 [pid 429] ioctl(4, LOOP_CLR_FD) = 0 [pid 429] close(4) = 0 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] open("./bus", O_RDWR) = 5 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 423] <... futex resumed>) = 0 [pid 423] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 423] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 423] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[451], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 451 [pid 423] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 423] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 429] <... futex resumed>) = 1 [pid 429] write(4, 0x20000f80, 9) = 9 [pid 429] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 429] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 451 attached ./strace-static-x86_64: Process 450 attached [pid 430] <... mount resumed>) = 0 [pid 424] <... futex resumed>) = 0 [pid 451] set_robust_list(0x7f70edcbc9e0, 24 [pid 450] set_robust_list(0x7f70edcbc9e0, 24 [pid 430] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 451] <... set_robust_list resumed>) = 0 [pid 450] <... set_robust_list resumed>) = 0 [ 20.359733][ T428] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.370760][ T432] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 20.380986][ T429] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 20.391089][ T430] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 430] <... openat resumed>) = 3 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 428] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 450] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 432] <... futex resumed>) = ? [pid 426] <... futex resumed>) = ? [pid 432] +++ killed by SIGBUS +++ [pid 450] +++ killed by SIGBUS +++ [pid 426] +++ killed by SIGBUS +++ [pid 430] chdir("./file0") = 0 [pid 430] ioctl(4, LOOP_CLR_FD) = 0 [pid 430] close(4) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=426, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 451] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] <... open resumed>) = 4 [pid 430] <... futex resumed>) = 1 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 430] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 428] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 0 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 429] <... futex resumed>) = ? [pid 423] <... futex resumed>) = ? [pid 430] <... open resumed>) = 4 [pid 429] +++ killed by SIGBUS +++ [pid 428] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] <... futex resumed>) = 0 [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] <... futex resumed>) = 0 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 0 [pid 428] <... write resumed>) = 9 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... write resumed>) = 9 [pid 428] <... futex resumed>) = 1 [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = 0 [pid 374] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] open("./bus", O_RDWR [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 430] <... futex resumed>) = 0 [pid 428] <... open resumed>) = 5 [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 430] open("./bus", O_RDWR [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 430] <... open resumed>) = 5 [pid 428] <... futex resumed>) = 0 [pid 424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... openat resumed>) = 3 [pid 430] <... futex resumed>) = 0 [pid 428] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 424] <... futex resumed>) = 0 [pid 422] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] fstat(3, [pid 451] +++ killed by SIGBUS +++ [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 424] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 423] +++ killed by SIGBUS +++ [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./1/binderfs") = 0 [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=423, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 422] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 430] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 422] <... futex resumed>) = 0 [pid 430] write(4, 0x20000f80, 9 [pid 422] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 422] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 422] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 422] <... mprotect resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 422] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 422] <... clone resumed>, parent_tid=[454], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 454 [pid 375] getdents64(3, [pid 422] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 422] <... futex resumed>) = 0 [pid 375] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 422] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./1/binderfs") = 0 [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 428] <... mmap resumed>) = 0x20000000 [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 424] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 430] <... write resumed>) = 9 [pid 424] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 454 attached [pid 430] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... mount resumed>) = 0 [pid 424] <... futex resumed>) = 1 [pid 428] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 428] write(4, 0x20000f80, 9 [pid 454] set_robust_list(0x7f70edcbc9e0, 24 [pid 430] <... futex resumed>) = 0 [pid 427] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 424] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 454] <... set_robust_list resumed>) = 0 [pid 427] <... openat resumed>) = 3 [pid 424] <... mmap resumed>) = 0x7f70edc9c000 [pid 428] <... write resumed>) = 9 [ 20.401592][ T450] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.417375][ T451] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.438623][ T427] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 430] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 428] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 427] chdir("./file0" [pid 424] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 422] <... futex resumed>) = ? [pid 428] <... futex resumed>) = 0 [pid 427] <... chdir resumed>) = 0 [pid 424] <... mprotect resumed>) = 0 [pid 428] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 430] <... futex resumed>) = ? [pid 427] ioctl(4, LOOP_CLR_FD [pid 424] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 455 attached [pid 430] +++ killed by SIGBUS +++ [pid 455] set_robust_list(0x7f70edcbc9e0, 24 [pid 424] <... clone resumed>, parent_tid=[455], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 455 [pid 455] <... set_robust_list resumed>) = 0 [pid 424] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 454] +++ killed by SIGBUS +++ [pid 422] +++ killed by SIGBUS +++ [pid 424] <... futex resumed>) = 0 [pid 424] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=422, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [pid 376] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./1/binderfs") = 0 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 455] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 428] <... futex resumed>) = ? [pid 377] rmdir("./1/file0" [pid 424] <... futex resumed>) = ? [pid 428] +++ killed by SIGBUS +++ [pid 377] <... rmdir resumed>) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./1") = 0 [pid 377] mkdir("./2", 0777) = 0 [pid 455] +++ killed by SIGBUS +++ [pid 424] +++ killed by SIGBUS +++ [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=424, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 373] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./1/binderfs") = 0 [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] <... ioctl resumed>) = 0 [ 20.450128][ T454] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.467453][ T455] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 427] close(4 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 427] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./1/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./1") = 0 [pid 421] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] mkdir("./2", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... umount2 resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 456 ./strace-static-x86_64: Process 456 attached [pid 456] set_robust_list(0x5555569495e0, 24) = 0 [pid 456] chdir("./2") = 0 [pid 456] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 427] <... futex resumed>) = 0 [pid 421] <... futex resumed>) = 1 [pid 427] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 377] <... close resumed>) = 0 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 456] setpgid(0, 0 [pid 427] <... open resumed>) = 4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 457 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] lstat("./1/file0", [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 456] <... setpgid resumed>) = 0 [pid 456] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 456] write(3, "1000", 4) = 4 [pid 456] close(3) = 0 [pid 456] symlink("/dev/binderfs", "./binderfs") = 0 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 421] <... futex resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 421] <... futex resumed>) = 0 [pid 375] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] lstat("./1/file0", [pid 427] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./1/file0", [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] <... write resumed>) = 9 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 427] <... futex resumed>) = 1 [pid 421] <... futex resumed>) = 0 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... openat resumed>) = 4 [pid 427] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 427] open("./bus", O_RDWR [pid 421] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 427] <... open resumed>) = 5 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] getdents64(4, [pid 373] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 427] <... futex resumed>) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 427] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 421] <... futex resumed>) = 0 [pid 376] fstat(4, [pid 375] getdents64(4, [pid 373] <... openat resumed>) = 4 [pid 427] <... mmap resumed>) = 0x20000000 [pid 421] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] fstat(4, [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 427] <... futex resumed>) = 0 [pid 421] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 375] <... close resumed>) = 0 [pid 427] write(4, 0x20000f80, 9 [pid 421] <... futex resumed>) = 0 [pid 373] getdents64(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] rmdir("./1/file0" [pid 427] <... write resumed>) = 9 [pid 421] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 456] <... mmap resumed>) = 0x7f70f5fbd000 [pid 427] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] getdents64(4, [pid 456] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 427] <... futex resumed>) = 0 [pid 421] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] close(4 [pid 375] getdents64(3, [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 456] <... mprotect resumed>) = 0 [pid 427] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 421] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(4 [pid 456] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 421] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] rmdir("./1/file0" [pid 375] close(3 [pid 421] <... mprotect resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 456] <... clone resumed>, parent_tid=[458], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 458 [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 421] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... rmdir resumed>) = 0 [pid 375] rmdir("./1" [pid 373] rmdir("./1/file0" [pid 456] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 421] <... clone resumed>, parent_tid=[459], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 459 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 421] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 375] mkdir("./2", 0777 [pid 373] <... rmdir resumed>) = 0 [pid 421] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 421] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(3 [pid 375] <... mkdir resumed>) = 0 [pid 373] getdents64(3, [pid 376] <... close resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 376] rmdir("./1" [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] <... openat resumed>) = 3 ./strace-static-x86_64: Process 457 attached [pid 376] <... rmdir resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 376] mkdir("./2", 0777 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] close(3 [pid 376] <... mkdir resumed>) = 0 [pid 375] close(3 [pid 373] <... close resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 375] <... close resumed>) = 0 [pid 373] rmdir("./1" [pid 376] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 457] set_robust_list(0x5555569495e0, 24 [pid 373] <... rmdir resumed>) = 0 [pid 457] <... set_robust_list resumed>) = 0 [pid 457] chdir("./2" [pid 376] ioctl(3, LOOP_CLR_FD [pid 373] mkdir("./2", 0777 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 460 [pid 457] <... chdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 376] close(3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... openat resumed>) = 3 [pid 457] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 461 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 457] setpgid(0, 0 [pid 373] close(3 [pid 457] <... setpgid resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 457] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 457] <... openat resumed>) = 3 [pid 457] write(3, "1000", 4 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 462 [pid 457] <... write resumed>) = 4 [pid 457] close(3) = 0 [pid 457] symlink("/dev/binderfs", "./binderfs") = 0 [pid 457] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 457] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 ./strace-static-x86_64: Process 460 attached [pid 457] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 460] set_robust_list(0x5555569495e0, 24) = 0 [pid 457] <... clone resumed>, parent_tid=[463], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 463 [pid 460] chdir("./2" [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 461 attached [pid 460] <... chdir resumed>) = 0 [pid 457] <... futex resumed>) = 0 ./strace-static-x86_64: Process 459 attached [pid 461] set_robust_list(0x5555569495e0, 24 [pid 460] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 462 attached [pid 461] <... set_robust_list resumed>) = 0 [pid 460] <... prctl resumed>) = 0 [pid 459] set_robust_list(0x7f70edcbc9e0, 24 [pid 461] chdir("./2" [pid 460] setpgid(0, 0 [pid 459] <... set_robust_list resumed>) = 0 [pid 462] set_robust_list(0x5555569495e0, 24 [pid 461] <... chdir resumed>) = 0 [pid 460] <... setpgid resumed>) = 0 [pid 461] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 460] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 460] write(3, "1000", 4) = 4 [pid 460] close(3) = 0 [pid 460] symlink("/dev/binderfs", "./binderfs") = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 460] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[464], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 464 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 463 attached [pid 463] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 463] memfd_create("syzkaller", 0) = 3 [pid 463] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 464 attached [pid 464] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 464] memfd_create("syzkaller", 0) = 3 [pid 464] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 462] <... set_robust_list resumed>) = 0 [pid 461] <... prctl resumed>) = 0 [pid 461] setpgid(0, 0 [pid 462] chdir("./2" [pid 461] <... setpgid resumed>) = 0 [pid 462] <... chdir resumed>) = 0 [pid 461] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 462] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 461] <... openat resumed>) = 3 [pid 462] <... prctl resumed>) = 0 [pid 461] write(3, "1000", 4 [pid 462] setpgid(0, 0 [pid 461] <... write resumed>) = 4 [pid 462] <... setpgid resumed>) = 0 [pid 461] close(3 [pid 462] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 461] <... close resumed>) = 0 [pid 462] <... openat resumed>) = 3 [pid 461] symlink("/dev/binderfs", "./binderfs" [pid 462] write(3, "1000", 4 [pid 461] <... symlink resumed>) = 0 [pid 462] <... write resumed>) = 4 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] close(3 [pid 461] <... futex resumed>) = 0 [pid 462] <... close resumed>) = 0 [pid 461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 462] symlink("/dev/binderfs", "./binderfs" [pid 461] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 461] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 462] <... symlink resumed>) = 0 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] <... clone resumed>, parent_tid=[465], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 465 [pid 462] <... futex resumed>) = 0 [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 461] <... futex resumed>) = 0 [pid 463] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 462] <... mmap resumed>) = 0x7f70f5fbd000 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 458 attached [pid 462] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 458] set_robust_list(0x7f70f5fdd9e0, 24 [pid 464] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 462] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 458] <... set_robust_list resumed>) = 0 [pid 462] <... clone resumed>, parent_tid=[466], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 466 ./strace-static-x86_64: Process 465 attached [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] memfd_create("syzkaller", 0 [pid 465] set_robust_list(0x7f70f5fdd9e0, 24 [pid 462] <... futex resumed>) = 0 [pid 458] <... memfd_create resumed>) = 3 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 465] <... set_robust_list resumed>) = 0 [pid 458] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 465] memfd_create("syzkaller", 0 [pid 458] <... mmap resumed>) = 0x7f70edbbd000 [pid 465] <... memfd_create resumed>) = 3 [pid 465] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 466 attached [pid 466] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 466] memfd_create("syzkaller", 0) = 3 [pid 466] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 463] <... write resumed>) = 1048576 [pid 463] munmap(0x7f70edbbd000, 1048576) = 0 [pid 463] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 421] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=0} [pid 463] ioctl(4, LOOP_SET_FD, 3 [pid 421] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 464] <... write resumed>) = 1048576 [pid 466] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 465] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 464] munmap(0x7f70edbbd000, 1048576) = 0 [pid 458] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 464] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 463] <... ioctl resumed>) = 0 [pid 464] <... openat resumed>) = 4 [pid 464] ioctl(4, LOOP_SET_FD, 3 [pid 463] close(3) = 0 [pid 463] mkdir("./file0", 0777) = 0 [pid 463] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 466] <... write resumed>) = 1048576 [pid 464] <... ioctl resumed>) = 0 [pid 458] <... write resumed>) = 1048576 [pid 464] close(3) = 0 [pid 464] mkdir("./file0", 0777) = 0 [pid 458] munmap(0x7f70edbbd000, 1048576 [ 20.646774][ T459] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 464] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 458] <... munmap resumed>) = 0 [pid 465] <... write resumed>) = 1048576 [pid 459] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 458] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 466] munmap(0x7f70edbbd000, 1048576) = 0 [pid 466] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 466] ioctl(4, LOOP_SET_FD, 3 [pid 465] munmap(0x7f70edbbd000, 1048576 [pid 427] <... futex resumed>) = ? [pid 465] <... munmap resumed>) = 0 [pid 427] +++ killed by SIGBUS +++ [pid 466] <... ioctl resumed>) = 0 [pid 466] close(3) = 0 [pid 466] mkdir("./file0", 0777 [pid 458] <... openat resumed>) = 4 [pid 466] <... mkdir resumed>) = 0 [pid 466] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 465] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 458] ioctl(4, LOOP_SET_FD, 3 [pid 465] <... openat resumed>) = 4 [pid 459] +++ killed by SIGBUS +++ [pid 458] <... ioctl resumed>) = 0 [pid 421] +++ killed by SIGBUS +++ [pid 458] close(3) = 0 [pid 458] mkdir("./file0", 0777) = 0 [pid 458] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 465] ioctl(4, LOOP_SET_FD, 3 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=421, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 465] <... ioctl resumed>) = 0 [pid 463] <... mount resumed>) = 0 [pid 372] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] close(3) = 0 [pid 465] mkdir("./file0", 0777) = 0 [pid 372] <... openat resumed>) = 3 [pid 372] fstat(3, [pid 465] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 463] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 463] chdir("./file0") = 0 [pid 463] ioctl(4, LOOP_CLR_FD) = 0 [pid 463] close(4) = 0 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 464] <... mount resumed>) = 0 [pid 457] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 464] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... openat resumed>) = 3 [pid 457] <... futex resumed>) = 1 [pid 372] umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 464] chdir("./file0" [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./1/binderfs" [pid 464] <... chdir resumed>) = 0 [pid 464] ioctl(4, LOOP_CLR_FD) = 0 [pid 464] close(4) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] <... futex resumed>) = 0 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 1 [pid 372] <... unlink resumed>) = 0 [pid 466] <... mount resumed>) = 0 [pid 463] <... futex resumed>) = 0 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 463] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 466] <... openat resumed>) = 3 [pid 464] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 466] chdir("./file0") = 0 [pid 463] <... open resumed>) = 4 [pid 466] ioctl(4, LOOP_CLR_FD [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... open resumed>) = 4 [pid 463] <... futex resumed>) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... write resumed>) = 9 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] open("./bus", O_RDWR [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... open resumed>) = 5 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 457] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 463] <... mmap resumed>) = 0x20000000 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 457] <... futex resumed>) = 0 [pid 463] write(4, 0x20000f80, 9 [pid 457] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 463] <... write resumed>) = 9 [pid 457] <... futex resumed>) = 0 [pid 463] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 457] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 463] <... futex resumed>) = 0 [pid 457] <... mmap resumed>) = 0x7f70edc9c000 [pid 463] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 457] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 457] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[482], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 482 [pid 457] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 457] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 482 attached [pid 482] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 20.713269][ T463] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 20.724677][ T464] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 20.738309][ T466] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 20.751419][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 460] <... futex resumed>) = 0 [pid 458] <... mount resumed>) = 0 [pid 482] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 463] <... futex resumed>) = ? [pid 457] <... futex resumed>) = ? [pid 463] +++ killed by SIGBUS +++ [pid 482] +++ killed by SIGBUS +++ [pid 457] +++ killed by SIGBUS +++ [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 1 [pid 464] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... write resumed>) = 9 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 460] <... futex resumed>) = 0 [pid 464] open("./bus", O_RDWR [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... open resumed>) = 5 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... mmap resumed>) = 0x20000000 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] write(4, 0x20000f80, 9 [pid 460] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... write resumed>) = 9 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 460] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 464] <... futex resumed>) = 0 [pid 460] <... futex resumed>) = 0 [pid 464] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 460] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 460] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 460] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[483], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 483 [pid 460] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 460] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 483 attached [pid 483] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 465] <... mount resumed>) = 0 [pid 458] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=457, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 458] <... openat resumed>) = 3 [pid 458] chdir("./file0") = 0 [pid 377] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 458] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./2/binderfs") = 0 [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 465] chdir("./file0") = 0 [pid 465] ioctl(4, LOOP_CLR_FD [pid 483] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 466] <... ioctl resumed>) = 0 [pid 458] <... ioctl resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 464] <... futex resumed>) = ? [pid 466] close(4 [pid 460] <... futex resumed>) = ? [pid 458] close(4 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] <... close resumed>) = 0 [pid 465] <... ioctl resumed>) = 0 [pid 458] <... close resumed>) = 0 [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./1/file0", [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 466] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 466] <... open resumed>) = 4 [pid 458] <... open resumed>) = 4 [pid 372] umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 4 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] fstat(4, [pid 466] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 466] <... write resumed>) = 9 [pid 458] <... write resumed>) = 9 [pid 372] getdents64(4, [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] getdents64(4, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] close(4 [pid 466] open("./bus", O_RDWR [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 458] open("./bus", O_RDWR [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 466] <... open resumed>) = 5 [pid 458] <... open resumed>) = 5 [pid 372] rmdir("./1/file0" [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 465] close(4 [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 464] +++ killed by SIGBUS +++ [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 372] close(3 [pid 483] +++ killed by SIGBUS +++ [pid 466] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 462] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 460] +++ killed by SIGBUS +++ [pid 458] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 456] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 466] <... mmap resumed>) = 0x20000000 [pid 458] <... mmap resumed>) = 0x20000000 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=460, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] rmdir("./1" [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 466] <... futex resumed>) = 1 [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = 1 [pid 456] <... futex resumed>) = 0 [pid 372] mkdir("./2", 0777 [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... mkdir resumed>) = 0 [pid 466] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 462] <... futex resumed>) = 0 [pid 458] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 456] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 466] write(4, 0x20000f80, 9 [pid 462] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 458] write(4, 0x20000f80, 9 [pid 456] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 466] <... write resumed>) = 9 [pid 462] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 458] <... write resumed>) = 9 [pid 466] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 458] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 3 [pid 466] <... futex resumed>) = 0 [pid 462] <... mmap resumed>) = 0x7f70edc9c000 [pid 458] <... futex resumed>) = 0 [pid 456] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] fstat(3, [pid 466] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 462] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 458] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 456] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 462] <... mprotect resumed>) = 0 [pid 456] <... mprotect resumed>) = 0 [pid 375] getdents64(3, [pid 462] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 456] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 462] <... clone resumed>, parent_tid=[484], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 484 [pid 456] <... clone resumed>, parent_tid=[485], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 485 [pid 375] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 462] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 456] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 462] <... futex resumed>) = 0 [pid 456] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 462] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 456] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./2/binderfs", ./strace-static-x86_64: Process 485 attached {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 485] set_robust_list(0x7f70edcbc9e0, 24 [pid 375] unlink("./2/binderfs" [pid 485] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 484 attached [pid 375] <... unlink resumed>) = 0 [ 20.754904][ T482] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.761541][ T465] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 20.781467][ T483] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 484] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 485] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 458] <... futex resumed>) = ? [pid 456] <... futex resumed>) = ? [pid 458] +++ killed by SIGBUS +++ [pid 485] +++ killed by SIGBUS +++ [pid 456] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=456, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./2/binderfs") = 0 [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 484] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 466] <... futex resumed>) = ? [pid 462] <... futex resumed>) = ? [pid 466] +++ killed by SIGBUS +++ [pid 484] +++ killed by SIGBUS +++ [pid 462] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=462, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./2/binderfs") = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./2/file0", [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 465] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 465] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 465] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 465] <... write resumed>) = 9 [pid 377] getdents64(4, [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] close(4 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] rmdir("./2/file0" [pid 465] open("./bus", O_RDWR [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 465] <... open resumed>) = 5 [pid 377] getdents64(3, [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] close(3 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 377] rmdir("./2" [pid 465] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 461] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... rmdir resumed>) = 0 [pid 465] <... mmap resumed>) = 0x20000000 [pid 377] mkdir("./3", 0777 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 465] <... futex resumed>) = 1 [pid 461] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 465] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 461] <... futex resumed>) = 0 [pid 465] write(4, 0x20000f80, 9 [pid 461] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 465] <... write resumed>) = 9 [pid 461] <... mmap resumed>) = 0x7f70edc9c000 [pid 465] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 461] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 465] <... futex resumed>) = 0 [pid 461] <... mprotect resumed>) = 0 [pid 465] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 461] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[486], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 486 [ 20.816438][ T485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 20.818002][ T484] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 461] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 461] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 486 attached [pid 486] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 486] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 465] <... futex resumed>) = ? [pid 461] <... futex resumed>) = ? [pid 465] +++ killed by SIGBUS +++ [pid 486] +++ killed by SIGBUS +++ [pid 461] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=461, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./2/binderfs") = 0 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] close(3 [pid 375] lstat("./2/file0", [pid 377] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 487 [pid 375] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./2/file0"./strace-static-x86_64: Process 487 attached ) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./2") = 0 [pid 375] mkdir("./3", 0777 [pid 487] set_robust_list(0x5555569495e0, 24 [pid 375] <... mkdir resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 487] <... set_robust_list resumed>) = 0 [pid 487] chdir("./3") = 0 [pid 487] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 487] setpgid(0, 0) = 0 [pid 487] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 487] write(3, "1000", 4) = 4 [pid 487] close(3) = 0 [pid 487] symlink("/dev/binderfs", "./binderfs") = 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 487] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 487] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 488 attached , parent_tid=[488], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 488 [pid 488] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 488] memfd_create("syzkaller", 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 488] <... memfd_create resumed>) = 3 [pid 488] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 488] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 488] munmap(0x7f70edbbd000, 1048576) = 0 [pid 488] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./2/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./2") = 0 [pid 373] mkdir("./3", 0777) = 0 [ 20.867340][ T486] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... openat resumed>) = 3 [pid 374] <... umount2 resumed>) = 0 [pid 372] close(3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] <... close resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] close(3) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 489 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 490 [pid 488] <... openat resumed>) = 4 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 488] ioctl(4, LOOP_SET_FD, 3 [pid 374] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 490 attached [pid 374] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 490] set_robust_list(0x5555569495e0, 24 [pid 374] <... openat resumed>) = 4 [pid 490] <... set_robust_list resumed>) = 0 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 490] chdir("./3" [pid 374] close(4 [pid 490] <... chdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 490] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] rmdir("./2/file0" [pid 490] <... prctl resumed>) = 0 [pid 490] setpgid(0, 0) = 0 [pid 490] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 374] <... rmdir resumed>) = 0 [pid 490] <... openat resumed>) = 3 [pid 374] getdents64(3, [pid 490] write(3, "1000", 4./strace-static-x86_64: Process 489 attached [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 490] <... write resumed>) = 4 [pid 374] rmdir("./2" [pid 490] close(3) = 0 [pid 490] symlink("/dev/binderfs", "./binderfs") = 0 [pid 374] <... rmdir resumed>) = 0 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./3", 0777 [pid 490] <... futex resumed>) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 490] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 490] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... mkdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 491 attached [pid 491] set_robust_list(0x7f70f5fdd9e0, 24 [pid 490] <... clone resumed>, parent_tid=[491], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 491 [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] set_robust_list(0x5555569495e0, 24 [pid 490] <... futex resumed>) = 0 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 491] <... set_robust_list resumed>) = 0 [pid 489] <... set_robust_list resumed>) = 0 [pid 489] chdir("./2" [pid 491] memfd_create("syzkaller", 0 [pid 489] <... chdir resumed>) = 0 [pid 489] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 489] setpgid(0, 0) = 0 [pid 489] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 489] write(3, "1000", 4) = 4 [pid 489] close(3) = 0 [pid 489] symlink("/dev/binderfs", "./binderfs") = 0 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 489] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 489] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 492 attached [pid 491] <... memfd_create resumed>) = 3 [pid 489] <... clone resumed>, parent_tid=[492], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 492 [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 492] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 492] memfd_create("syzkaller", 0 [pid 491] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 492] <... memfd_create resumed>) = 3 [pid 492] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 491] <... mmap resumed>) = 0x7f70edbbd000 [pid 491] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 492] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 491] <... write resumed>) = 1048576 [pid 491] munmap(0x7f70edbbd000, 1048576) = 0 [pid 491] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 492] <... write resumed>) = 1048576 [pid 492] munmap(0x7f70edbbd000, 1048576) = 0 [pid 492] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 373] <... openat resumed>) = 3 [pid 492] <... openat resumed>) = 4 [pid 492] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 492] close(3) = 0 [pid 492] mkdir("./file0", 0777) = 0 [pid 492] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] ioctl(3, LOOP_CLR_FD [pid 488] <... ioctl resumed>) = 0 [pid 491] <... openat resumed>) = 4 [pid 488] close(3 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 488] <... close resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] close(3 [pid 488] mkdir("./file0", 0777 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 [pid 488] <... mkdir resumed>) = 0 [pid 374] close(3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 488] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 495 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 496 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./2/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./2") = 0 [pid 376] mkdir("./3", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 491] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3./strace-static-x86_64: Process 496 attached [pid 492] <... mount resumed>) = 0 ./strace-static-x86_64: Process 495 attached [pid 496] set_robust_list(0x5555569495e0, 24 [pid 492] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 491] <... ioctl resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 491] close(3 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 491] <... close resumed>) = 0 [pid 491] mkdir("./file0", 0777 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 500 [pid 491] <... mkdir resumed>) = 0 [pid 491] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 500 attached [pid 500] set_robust_list(0x5555569495e0, 24) = 0 [pid 500] chdir("./3") = 0 [pid 500] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 500] setpgid(0, 0) = 0 [pid 500] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 500] write(3, "1000", 4) = 4 [pid 500] close(3 [pid 495] set_robust_list(0x5555569495e0, 24 [pid 492] <... openat resumed>) = 3 [pid 492] chdir("./file0") = 0 [pid 500] <... close resumed>) = 0 [pid 500] symlink("/dev/binderfs", "./binderfs") = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 495] <... set_robust_list resumed>) = 0 [pid 492] ioctl(4, LOOP_CLR_FD) = 0 [pid 495] chdir("./3" [pid 492] close(4 [pid 500] <... mmap resumed>) = 0x7f70f5fbd000 [pid 500] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[502], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 502 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... set_robust_list resumed>) = 0 [pid 495] <... chdir resumed>) = 0 [pid 492] <... close resumed>) = 0 [pid 495] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] chdir("./3" [pid 495] <... prctl resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 ./strace-static-x86_64: Process 502 attached [pid 500] <... futex resumed>) = 0 [pid 496] <... chdir resumed>) = 0 [pid 495] setpgid(0, 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] set_robust_list(0x7f70f5fdd9e0, 24 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 496] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 495] <... setpgid resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 502] <... set_robust_list resumed>) = 0 [pid 496] <... prctl resumed>) = 0 [pid 495] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 492] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] memfd_create("syzkaller", 0 [pid 496] setpgid(0, 0 [pid 495] <... openat resumed>) = 3 [pid 492] <... open resumed>) = 4 [pid 502] <... memfd_create resumed>) = 3 [pid 496] <... setpgid resumed>) = 0 [pid 495] write(3, "1000", 4 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 496] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 495] <... write resumed>) = 4 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 [pid 502] <... mmap resumed>) = 0x7f70edbbd000 [pid 496] <... openat resumed>) = 3 [pid 495] close(3 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 496] write(3, "1000", 4 [pid 495] <... close resumed>) = 0 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 496] <... write resumed>) = 4 [pid 495] symlink("/dev/binderfs", "./binderfs" [pid 492] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 496] close(3 [pid 495] <... symlink resumed>) = 0 [pid 492] <... write resumed>) = 9 [pid 496] <... close resumed>) = 0 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] symlink("/dev/binderfs", "./binderfs" [pid 495] <... futex resumed>) = 0 [pid 492] <... futex resumed>) = 1 [pid 489] <... futex resumed>) = 0 [pid 496] <... symlink resumed>) = 0 [pid 495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... mmap resumed>) = 0x7f70f5fbd000 [pid 492] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 489] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 495] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 492] open("./bus", O_RDWR [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... write resumed>) = 1048576 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 495] <... mprotect resumed>) = 0 [pid 492] <... open resumed>) = 5 [pid 491] <... mount resumed>) = 0 [pid 502] munmap(0x7f70edbbd000, 1048576 [pid 496] <... mmap resumed>) = 0x7f70f5fbd000 [pid 495] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 502] <... munmap resumed>) = 0 [pid 496] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 495] <... clone resumed>, parent_tid=[506], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 506 [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 506 attached [pid 506] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 506] memfd_create("syzkaller", 0) = 3 [pid 506] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 492] <... futex resumed>) = 1 [pid 502] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] <... mprotect resumed>) = 0 [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 491] <... openat resumed>) = 3 [pid 489] <... futex resumed>) = 0 [pid 488] <... mount resumed>) = 0 [pid 502] <... openat resumed>) = 4 [pid 502] ioctl(4, LOOP_SET_FD, 3 [pid 496] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 491] chdir("./file0" [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 491] <... chdir resumed>) = 0 [pid 492] <... futex resumed>) = 0 [pid 489] <... futex resumed>) = 1 [pid 502] <... ioctl resumed>) = 0 [pid 492] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 496] <... clone resumed>, parent_tid=[508], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 508 [pid 491] ioctl(4, LOOP_CLR_FD [pid 489] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 492] <... mmap resumed>) = 0x20000000 [pid 491] <... ioctl resumed>) = 0 [pid 502] close(3 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] <... futex resumed>) = 0 [pid 491] close(4 [pid 502] <... close resumed>) = 0 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 492] <... futex resumed>) = 1 [pid 491] <... close resumed>) = 0 [pid 489] <... futex resumed>) = 0 [pid 488] <... openat resumed>) = 3 [pid 502] mkdir("./file0", 0777 [pid 506] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 508 attached [pid 508] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 508] memfd_create("syzkaller", 0) = 3 [pid 489] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 492] write(4, 0x20000f80, 9 [pid 502] <... mkdir resumed>) = 0 [pid 489] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = 1 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] <... futex resumed>) = 0 [pid 489] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 502] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 492] <... write resumed>) = 9 [pid 489] <... futex resumed>) = 0 [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 492] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 489] <... mmap resumed>) = 0x7f70edc9c000 [pid 488] chdir("./file0" [pid 492] <... futex resumed>) = 0 [pid 489] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 492] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 488] <... chdir resumed>) = 0 [pid 489] <... mprotect resumed>) = 0 [pid 491] <... futex resumed>) = 0 [pid 490] <... futex resumed>) = 1 [pid 489] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 488] ioctl(4, LOOP_CLR_FD [pid 491] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... ioctl resumed>) = 0 [pid 489] <... clone resumed>, parent_tid=[509], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 509 [pid 488] close(4 [pid 489] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 489] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... open resumed>) = 4 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 491] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... write resumed>) = 9 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 ./strace-static-x86_64: Process 509 attached [pid 508] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... mmap resumed>) = 0x7f70edbbd000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 488] <... close resumed>) = 0 [pid 506] <... write resumed>) = 1048576 [pid 491] open("./bus", O_RDWR [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 509] set_robust_list(0x7f70edcbc9e0, 24 [pid 491] <... open resumed>) = 5 [pid 509] <... set_robust_list resumed>) = 0 [pid 506] munmap(0x7f70edbbd000, 1048576 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = 1 [pid 490] <... futex resumed>) = 0 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [ 21.041888][ T492] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 21.070244][ T491] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.083205][ T488] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] <... futex resumed>) = 0 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 488] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 508] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 491] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 490] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 491] <... mmap resumed>) = 0x20000000 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 490] <... futex resumed>) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 490] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 491] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 490] <... futex resumed>) = 0 [pid 491] write(4, 0x20000f80, 9 [pid 490] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 490] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 490] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 506] <... munmap resumed>) = 0 [pid 490] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[511], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 511 [pid 506] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 490] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... openat resumed>) = 4 [pid 490] <... futex resumed>) = 0 [pid 506] ioctl(4, LOOP_SET_FD, 3 [pid 490] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 511 attached [pid 511] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 509] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... write resumed>) = 1048576 [pid 508] munmap(0x7f70edbbd000, 1048576) = 0 [pid 508] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 492] <... futex resumed>) = ? [pid 489] <... futex resumed>) = ? [pid 492] +++ killed by SIGBUS +++ [pid 509] +++ killed by SIGBUS +++ [pid 489] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=489, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 488] <... open resumed>) = 4 [pid 372] <... restart_syscall resumed>) = 0 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./2/binderfs") = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 491] <... write resumed>) = 9 [pid 491] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 491] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 511] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... openat resumed>) = 4 [pid 506] <... ioctl resumed>) = 0 [pid 487] <... futex resumed>) = 0 [pid 508] ioctl(4, LOOP_SET_FD, 3 [pid 506] close(3 [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... close resumed>) = 0 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = 1 [pid 506] mkdir("./file0", 0777 [pid 488] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 506] <... mkdir resumed>) = 0 [pid 506] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 491] <... futex resumed>) = ? [pid 490] <... futex resumed>) = ? [pid 491] +++ killed by SIGBUS +++ [pid 511] +++ killed by SIGBUS +++ [pid 490] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=490, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 488] <... write resumed>) = 9 [pid 375] fstat(3, [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 488] <... futex resumed>) = 1 [pid 487] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 502] <... mount resumed>) = 0 [pid 488] open("./bus", O_RDWR [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 508] <... ioctl resumed>) = 0 [pid 502] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 502] chdir("./file0") = 0 [pid 502] ioctl(4, LOOP_CLR_FD) = 0 [pid 502] close(4) = 0 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] <... futex resumed>) = 0 [pid 508] close(3 [pid 500] <... futex resumed>) = 0 [pid 488] <... open resumed>) = 5 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] open("./bus", O_RDWR) = 5 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 500] <... futex resumed>) = 0 [pid 500] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 500] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 500] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[515], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 515 [pid 500] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 500] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 502] <... futex resumed>) = 1 [pid 502] write(4, 0x20000f80, 9) = 9 [pid 502] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 502] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... close resumed>) = 0 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 508] mkdir("./file0", 0777 [pid 488] <... futex resumed>) = 0 [pid 487] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 508] <... mkdir resumed>) = 0 [pid 488] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./3/binderfs", [pid 508] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 488] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 487] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 487] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 488] <... mmap resumed>) = 0x20000000 [pid 375] unlink("./3/binderfs" [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 487] <... futex resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 487] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 488] write(4, 0x20000f80, 9 [pid 487] <... futex resumed>) = 0 [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 487] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 488] <... write resumed>) = 9 [pid 488] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 487] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 488] <... futex resumed>) = 0 [pid 487] <... mmap resumed>) = 0x7f70edc9c000 [pid 488] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 487] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 487] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[516], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 516 [pid 487] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 487] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 516 attached [pid 516] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 515 attached [ 21.119360][ T509] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.125814][ T511] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.144418][ T502] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 515] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 516] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 488] <... futex resumed>) = ? [pid 487] <... futex resumed>) = ? [pid 488] +++ killed by SIGBUS +++ [pid 516] +++ killed by SIGBUS +++ [pid 487] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=487, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./3/binderfs") = 0 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 515] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 502] <... futex resumed>) = ? [pid 500] <... futex resumed>) = ? [pid 502] +++ killed by SIGBUS +++ [pid 515] +++ killed by SIGBUS +++ [pid 500] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=500, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./3/binderfs") = 0 [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] <... mount resumed>) = 0 [pid 372] umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 506] chdir("./file0") = 0 [pid 506] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./2/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./2") = 0 [pid 372] mkdir("./3", 0777) = 0 [ 21.168694][ T516] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.170500][ T515] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.199290][ T506] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 508] <... mount resumed>) = 0 [pid 508] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 508] chdir("./file0") = 0 [ 21.218792][ T508] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 508] ioctl(4, LOOP_CLR_FD [pid 372] <... openat resumed>) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3 [pid 506] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 521 ./strace-static-x86_64: Process 521 attached [pid 521] set_robust_list(0x5555569495e0, 24) = 0 [pid 506] close(4 [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 376] lstat("./3/file0", [pid 375] lstat("./3/file0", [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./3/file0", [pid 376] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 506] <... open resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... openat resumed>) = 4 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] fstat(4, [pid 375] <... openat resumed>) = 4 [pid 506] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] fstat(4, [pid 521] chdir("./3" [pid 506] <... write resumed>) = 9 [pid 377] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] getdents64(4, [pid 375] getdents64(4, [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(4 [pid 375] getdents64(4, [pid 506] open("./bus", O_RDWR [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 521] <... chdir resumed>) = 0 [pid 521] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 521] setpgid(0, 0) = 0 [pid 521] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 506] <... open resumed>) = 5 [pid 521] <... openat resumed>) = 3 [pid 521] write(3, "1000", 4) = 4 [pid 521] close(3) = 0 [pid 521] symlink("/dev/binderfs", "./binderfs") = 0 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 521] <... futex resumed>) = 0 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./3/file0" [pid 375] close(4 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 508] <... ioctl resumed>) = 0 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 521] <... mmap resumed>) = 0x7f70f5fbd000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 521] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 506] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 495] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] getdents64(3, [pid 375] rmdir("./3/file0" [pid 521] <... mprotect resumed>) = 0 [pid 506] <... mmap resumed>) = 0x20000000 [pid 377] close(4 [pid 521] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 506] <... futex resumed>) = 1 [pid 495] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 521] <... clone resumed>, parent_tid=[522], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 522 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 495] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 506] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 495] <... futex resumed>) = 0 [pid 377] rmdir("./3/file0" [pid 376] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 521] <... futex resumed>) = 0 [pid 506] write(4, 0x20000f80, 9 [pid 495] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] rmdir("./3" [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 495] <... futex resumed>) = 0 [pid 508] close(4) = 0 [pid 506] <... write resumed>) = 9 [pid 495] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] close(3 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 508] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 506] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] <... rmdir resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 506] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 495] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... rmdir resumed>) = 0 [pid 376] mkdir("./4", 0777 [pid 375] rmdir("./3" [pid 508] <... open resumed>) = 4 [pid 506] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... mprotect resumed>) = 0 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 508] <... futex resumed>) = 1 [pid 496] <... futex resumed>) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 508] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 496] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 495] <... clone resumed>, parent_tid=[523], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 523 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] mkdir("./4", 0777 [pid 495] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 376] <... openat resumed>) = 3 [pid 508] <... write resumed>) = 9 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 496] <... futex resumed>) = 0 [pid 508] open("./bus", O_RDWR [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 495] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 508] <... open resumed>) = 5 [pid 496] <... futex resumed>) = 0 [pid 495] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] rmdir("./3" [pid 376] close(3 [pid 375] <... openat resumed>) = 3 [pid 508] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... mmap resumed>) = 0x20000000 [pid 496] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] mkdir("./4", 0777 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 508] <... futex resumed>) = 0 [pid 496] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 508] write(4, 0x20000f80, 9 [pid 496] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 496] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 508] <... write resumed>) = 9 [pid 496] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 375] close(3 [pid 508] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 496] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 508] <... futex resumed>) = 0 [pid 496] <... mmap resumed>) = 0x7f70edc9c000 [pid 508] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 496] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] <... close resumed>) = 0 [pid 496] <... mprotect resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 524 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 496] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] ioctl(3, LOOP_CLR_FD [pid 496] <... clone resumed>, parent_tid=[525], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 525 [pid 496] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 496] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 526 [pid 496] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 524 attached [pid 524] set_robust_list(0x5555569495e0, 24) = 0 [pid 524] chdir("./4") = 0 [pid 524] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 524] setpgid(0, 0) = 0 [pid 524] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 527 [pid 524] <... openat resumed>) = 3 [pid 524] write(3, "1000", 4) = 4 [pid 524] close(3) = 0 [pid 524] symlink("/dev/binderfs", "./binderfs") = 0 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 524] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 524] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[528], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 528 [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 528 attached [pid 528] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 528] memfd_create("syzkaller", 0) = 3 [pid 528] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 526 attached ./strace-static-x86_64: Process 527 attached [pid 526] set_robust_list(0x5555569495e0, 24 [pid 527] set_robust_list(0x5555569495e0, 24 [pid 526] <... set_robust_list resumed>) = 0 [pid 527] <... set_robust_list resumed>) = 0 [pid 526] chdir("./4" [pid 527] chdir("./4"./strace-static-x86_64: Process 523 attached [pid 526] <... chdir resumed>) = 0 [pid 523] set_robust_list(0x7f70edcbc9e0, 24 [pid 526] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 527] <... chdir resumed>) = 0 [pid 523] <... set_robust_list resumed>) = 0 [pid 526] <... prctl resumed>) = 0 [pid 527] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 526] setpgid(0, 0 [pid 528] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 528] munmap(0x7f70edbbd000, 1048576) = 0 [pid 528] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 528] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 528] close(3) = 0 [pid 528] mkdir("./file0", 0777) = 0 [pid 528] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 522 attached [pid 522] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 522] memfd_create("syzkaller", 0) = 3 [pid 522] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 526] <... setpgid resumed>) = 0 ./strace-static-x86_64: Process 525 attached [pid 527] <... prctl resumed>) = 0 [pid 526] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 527] setpgid(0, 0 [pid 525] set_robust_list(0x7f70edcbc9e0, 24 [pid 527] <... setpgid resumed>) = 0 [pid 526] <... openat resumed>) = 3 [pid 527] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 526] write(3, "1000", 4 [pid 525] <... set_robust_list resumed>) = 0 [pid 527] <... openat resumed>) = 3 [pid 526] <... write resumed>) = 4 [pid 527] write(3, "1000", 4 [pid 522] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 522] munmap(0x7f70edbbd000, 1048576) = 0 [pid 522] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 522] ioctl(4, LOOP_SET_FD, 3 [pid 523] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 526] close(3) = 0 [pid 526] symlink("/dev/binderfs", "./binderfs" [pid 506] <... futex resumed>) = ? [pid 527] <... write resumed>) = 4 [pid 495] <... futex resumed>) = ? [pid 527] close(3) = 0 [pid 527] symlink("/dev/binderfs", "./binderfs" [pid 506] +++ killed by SIGBUS +++ [pid 527] <... symlink resumed>) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 522] close(3 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 522] <... close resumed>) = 0 [pid 527] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 522] mkdir("./file0", 0777 [pid 527] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 522] <... mkdir resumed>) = 0 [pid 522] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 527] <... clone resumed>, parent_tid=[532], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 532 [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 523] +++ killed by SIGBUS +++ [pid 495] +++ killed by SIGBUS +++ [pid 525] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 508] <... futex resumed>) = ? [pid 496] <... futex resumed>) = ? [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=495, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 525] +++ killed by SIGBUS +++ [pid 508] +++ killed by SIGBUS +++ [pid 496] +++ killed by SIGBUS +++ [pid 373] <... restart_syscall resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=496, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 526] <... symlink resumed>) = 0 [pid 374] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 373] fstat(3, [pid 374] fstat(3, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./3/binderfs", [pid 373] lstat("./3/binderfs", [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./3/binderfs" [pid 373] unlink("./3/binderfs" [pid 526] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... unlink resumed>) = 0 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... unlink resumed>) = 0 [pid 526] <... mmap resumed>) = 0x7f70f5fbd000 [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 526] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 526] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 532 attached ./strace-static-x86_64: Process 534 attached [pid 534] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] <... clone resumed>, parent_tid=[534], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 534 [ 21.375126][ T523] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.393383][ T525] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.415549][ T528] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 532] set_robust_list(0x7f70f5fdd9e0, 24 [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 534] <... futex resumed>) = 0 [pid 534] memfd_create("syzkaller", 0) = 3 [pid 532] <... set_robust_list resumed>) = 0 [pid 534] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 532] memfd_create("syzkaller", 0) = 3 [pid 532] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 528] <... mount resumed>) = 0 [pid 532] <... mmap resumed>) = 0x7f70edbbd000 [pid 528] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 532] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 534] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 528] <... openat resumed>) = 3 [pid 528] chdir("./file0") = 0 [pid 528] ioctl(4, LOOP_CLR_FD [pid 522] <... mount resumed>) = 0 [pid 522] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 522] chdir("./file0") = 0 [pid 522] ioctl(4, LOOP_CLR_FD [pid 534] <... write resumed>) = 1048576 [pid 534] munmap(0x7f70edbbd000, 1048576) = 0 [pid 534] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 532] <... write resumed>) = 1048576 [pid 532] munmap(0x7f70edbbd000, 1048576) = 0 [pid 532] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./3/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./3") = 0 [pid 374] mkdir("./4", 0777) = 0 [ 21.426445][ T522] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 534] <... openat resumed>) = 4 [pid 532] <... openat resumed>) = 4 [pid 528] <... ioctl resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 522] <... ioctl resumed>) = 0 [pid 522] close(4) = 0 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 534] ioctl(4, LOOP_SET_FD, 3 [pid 532] ioctl(4, LOOP_SET_FD, 3 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 528] close(4) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 524] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 4 [pid 532] <... ioctl resumed>) = 0 [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = 0 [pid 521] <... futex resumed>) = 1 [pid 373] fstat(4, [pid 532] close(3 [pid 528] <... futex resumed>) = 0 [pid 524] <... futex resumed>) = 1 [pid 522] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 532] <... close resumed>) = 0 [pid 528] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 532] mkdir("./file0", 0777 [pid 528] <... open resumed>) = 4 [pid 522] <... open resumed>) = 4 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 532] <... mkdir resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 532] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./3/file0" [pid 528] <... write resumed>) = 9 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 521] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 534] <... ioctl resumed>) = 0 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] open("./bus", O_RDWR [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] rmdir("./3" [pid 528] <... open resumed>) = 5 [pid 373] <... rmdir resumed>) = 0 [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] mkdir("./4", 0777 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 534] close(3 [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 374] close(3 [pid 373] <... openat resumed>) = 3 [pid 528] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 524] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] ioctl(3, LOOP_CLR_FD [pid 528] <... mmap resumed>) = 0x20000000 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 528] <... futex resumed>) = 1 [pid 524] <... futex resumed>) = 0 [pid 534] <... close resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 528] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 524] <... futex resumed>) = 0 [pid 528] write(4, 0x20000f80, 9 [pid 524] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 539 [pid 534] mkdir("./file0", 0777 [pid 528] <... write resumed>) = 9 [pid 524] <... futex resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 528] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] <... write resumed>) = 9 [pid 534] <... mkdir resumed>) = 0 [pid 528] <... futex resumed>) = 0 [pid 524] <... mmap resumed>) = 0x7f70edc9c000 [pid 528] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 524] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 534] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 524] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 540 [pid 524] <... clone resumed>, parent_tid=[541], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 541 [pid 524] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 524] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 540 attached [pid 522] <... futex resumed>) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] open("./bus", O_RDWR [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] set_robust_list(0x5555569495e0, 24) = 0 [pid 540] chdir("./4") = 0 [pid 540] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 540] setpgid(0, 0) = 0 [pid 540] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 540] write(3, "1000", 4) = 4 [pid 540] close(3) = 0 [pid 540] symlink("/dev/binderfs", "./binderfs") = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 540] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 540] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 521] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... clone resumed>, parent_tid=[542], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 542 [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 522] <... open resumed>) = 5 ./strace-static-x86_64: Process 539 attached [pid 539] set_robust_list(0x5555569495e0, 24) = 0 [pid 539] chdir("./4") = 0 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 521] <... futex resumed>) = 0 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 539] setpgid(0, 0) = 0 [pid 539] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 522] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 521] <... futex resumed>) = 0 [pid 522] <... mmap resumed>) = 0x20000000 [pid 521] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 522] <... futex resumed>) = 0 [pid 521] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] write(4, 0x20000f80, 9 [pid 521] <... futex resumed>) = 0 [pid 522] <... write resumed>) = 9 [pid 521] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = 0 [pid 522] <... futex resumed>) = 0 [pid 521] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 522] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 521] <... mmap resumed>) = 0x7f70edc9c000 [pid 521] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 521] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 539] write(3, "1000", 4 [pid 521] <... clone resumed>, parent_tid=[544], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 544 [pid 521] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 521] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... write resumed>) = 4 [pid 539] close(3) = 0 [pid 539] symlink("/dev/binderfs", "./binderfs") = 0 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 539] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 539] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[546], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 546 [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 541 attached ./strace-static-x86_64: Process 542 attached ./strace-static-x86_64: Process 546 attached [pid 546] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 546] memfd_create("syzkaller", 0) = 3 [pid 546] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 544 attached [pid 544] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 546] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 542] set_robust_list(0x7f70f5fdd9e0, 24 [pid 541] set_robust_list(0x7f70edcbc9e0, 24 [pid 534] <... mount resumed>) = 0 [pid 532] <... mount resumed>) = 0 [pid 546] <... write resumed>) = 1048576 [pid 542] <... set_robust_list resumed>) = 0 [pid 541] <... set_robust_list resumed>) = 0 [pid 534] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 546] munmap(0x7f70edbbd000, 1048576 [pid 544] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 542] memfd_create("syzkaller", 0 [pid 534] <... openat resumed>) = 3 [pid 532] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 524] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 542] <... memfd_create resumed>) = 3 [pid 534] chdir("./file0" [pid 542] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 534] <... chdir resumed>) = 0 [pid 542] <... mmap resumed>) = 0x7f70edbbd000 [pid 534] ioctl(4, LOOP_CLR_FD) = 0 [pid 534] close(4) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 534] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... open resumed>) = 4 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 534] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... write resumed>) = 9 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... munmap resumed>) = 0 [pid 534] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 546] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 546] <... openat resumed>) = 4 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 546] ioctl(4, LOOP_SET_FD, 3 [pid 534] open("./bus", O_RDWR [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 534] <... open resumed>) = 5 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 526] <... futex resumed>) = 0 [pid 546] <... ioctl resumed>) = 0 [pid 541] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 521] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 546] close(3 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 528] <... futex resumed>) = ? [pid 526] <... futex resumed>) = 0 [pid 546] <... close resumed>) = 0 [pid 534] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 528] +++ killed by SIGBUS +++ [pid 526] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] mkdir("./file0", 0777 [pid 541] +++ killed by SIGBUS +++ [pid 534] <... mmap resumed>) = 0x20000000 [pid 524] +++ killed by SIGBUS +++ [pid 546] <... mkdir resumed>) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=524, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 546] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 534] <... futex resumed>) = 1 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 534] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 526] <... futex resumed>) = 0 [pid 542] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 534] write(4, 0x20000f80, 9 [pid 532] <... openat resumed>) = 3 [pid 526] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 522] <... futex resumed>) = ? [pid 534] <... write resumed>) = 9 [pid 526] <... futex resumed>) = 0 [pid 534] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 526] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 534] <... futex resumed>) = 0 [pid 526] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 534] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 526] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 526] <... mprotect resumed>) = 0 [pid 376] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 526] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... openat resumed>) = 3 [pid 376] fstat(3, [pid 526] <... clone resumed>, parent_tid=[551], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 551 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 526] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 526] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 532] chdir("./file0" [pid 526] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 522] +++ killed by SIGBUS +++ [pid 376] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 532] <... chdir resumed>) = 0 [pid 376] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 532] ioctl(4, LOOP_CLR_FD [pid 376] unlink("./4/binderfs") = 0 [pid 544] +++ killed by SIGBUS +++ [pid 532] <... ioctl resumed>) = 0 [pid 521] +++ killed by SIGBUS +++ [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 551 attached [pid 542] <... write resumed>) = 1048576 [pid 532] close(4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=521, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=5} --- [ 21.550157][ T534] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.550214][ T532] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 21.563051][ T544] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.580979][ T541] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 551] set_robust_list(0x7f70edcbc9e0, 24 [pid 542] munmap(0x7f70edbbd000, 1048576 [pid 372] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 551] <... set_robust_list resumed>) = 0 [pid 542] <... munmap resumed>) = 0 [pid 542] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 372] <... openat resumed>) = 3 [pid 551] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 534] <... futex resumed>) = ? [pid 526] <... futex resumed>) = ? [pid 534] +++ killed by SIGBUS +++ [pid 551] +++ killed by SIGBUS +++ [pid 526] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=526, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./4/binderfs") = 0 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./3/binderfs") = 0 [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 546] <... mount resumed>) = 0 [pid 546] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 546] chdir("./file0") = 0 [pid 546] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./4/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./4") = 0 [pid 376] mkdir("./5", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 553 ./strace-static-x86_64: Process 553 attached [pid 553] set_robust_list(0x5555569495e0, 24) = 0 [pid 553] chdir("./5") = 0 [pid 553] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 553] setpgid(0, 0) = 0 [pid 553] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 553] write(3, "1000", 4) = 4 [pid 553] close(3) = 0 [pid 553] symlink("/dev/binderfs", "./binderfs" [pid 542] <... openat resumed>) = 4 [pid 553] <... symlink resumed>) = 0 [pid 542] ioctl(4, LOOP_SET_FD, 3 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 553] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 553] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[554], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 554 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 554 attached ) = 0 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 554] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 554] memfd_create("syzkaller", 0) = 3 [pid 554] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 554] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 554] munmap(0x7f70edbbd000, 1048576) = 0 [ 21.616360][ T551] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.616701][ T546] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 554] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 546] <... ioctl resumed>) = 0 [pid 532] <... close resumed>) = 0 [pid 546] close(4 [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... openat resumed>) = 4 [pid 546] <... close resumed>) = 0 [pid 542] <... ioctl resumed>) = 0 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 554] ioctl(4, LOOP_SET_FD, 3 [pid 542] close(3 [pid 539] <... futex resumed>) = 0 [pid 532] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] <... futex resumed>) = 0 [pid 546] <... futex resumed>) = 0 [pid 542] <... close resumed>) = 0 [pid 539] <... futex resumed>) = 1 [pid 532] <... open resumed>) = 4 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 546] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 542] mkdir("./file0", 0777 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 542] <... mkdir resumed>) = 0 [pid 546] <... open resumed>) = 4 [pid 542] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] lstat("./4/file0", [pid 372] lstat("./3/file0", [pid 554] <... ioctl resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] close(3 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] <... close resumed>) = 0 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 554] mkdir("./file0", 0777 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... write resumed>) = 9 [pid 375] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 554] <... mkdir resumed>) = 0 [pid 546] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 372] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 554] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 546] <... write resumed>) = 9 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 372] <... openat resumed>) = 4 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] fstat(4, [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] open("./bus", O_RDWR [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... open resumed>) = 5 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 546] open("./bus", O_RDWR [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 372] getdents64(4, [pid 546] <... open resumed>) = 5 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 527] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(4 [pid 372] getdents64(4, [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... mmap resumed>) = 0x20000000 [pid 375] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 546] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 539] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./4/file0" [pid 372] close(4 [pid 546] <... mmap resumed>) = 0x20000000 [pid 532] <... futex resumed>) = 1 [pid 527] <... futex resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 546] <... futex resumed>) = 1 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 527] <... futex resumed>) = 0 [pid 375] getdents64(3, [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] write(4, 0x20000f80, 9 [pid 527] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./3/file0" [pid 546] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 539] <... futex resumed>) = 0 [pid 532] <... write resumed>) = 9 [pid 527] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 546] write(4, 0x20000f80, 9 [pid 539] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 532] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 546] <... write resumed>) = 9 [pid 539] <... futex resumed>) = 0 [pid 532] <... futex resumed>) = 0 [pid 527] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] close(3 [pid 372] <... rmdir resumed>) = 0 [pid 546] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 539] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 532] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 527] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... close resumed>) = 0 [pid 372] getdents64(3, [pid 546] <... futex resumed>) = 0 [pid 539] <... mmap resumed>) = 0x7f70edc9c000 [pid 527] <... mprotect resumed>) = 0 [pid 375] rmdir("./4" [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 546] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 539] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 527] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 539] <... mprotect resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 372] close(3 [pid 539] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 527] <... clone resumed>, parent_tid=[559], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 559 [pid 375] mkdir("./5", 0777./strace-static-x86_64: Process 560 attached [pid 527] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... close resumed>) = 0 [pid 539] <... clone resumed>, parent_tid=[560], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 560 [pid 527] <... futex resumed>) = 0 [pid 539] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 527] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 539] <... futex resumed>) = 0 [pid 539] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 559 attached [pid 559] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 560] set_robust_list(0x7f70edcbc9e0, 24 [pid 542] <... mount resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 372] rmdir("./3" [pid 559] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 532] <... futex resumed>) = ? [pid 527] <... futex resumed>) = ? [pid 532] +++ killed by SIGBUS +++ [pid 559] +++ killed by SIGBUS +++ [pid 527] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=527, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 560] <... set_robust_list resumed>) = 0 [pid 554] <... mount resumed>) = 0 [pid 542] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] <... restart_syscall resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 372] <... rmdir resumed>) = 0 [pid 542] <... openat resumed>) = 3 [pid 375] <... openat resumed>) = 3 [pid 372] mkdir("./4", 0777 [pid 542] chdir("./file0" [pid 375] ioctl(3, LOOP_CLR_FD [pid 372] <... mkdir resumed>) = 0 [pid 542] <... chdir resumed>) = 0 [pid 377] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 542] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] close(3 [pid 372] <... openat resumed>) = 3 [pid 542] <... ioctl resumed>) = 0 [pid 377] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... close resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 542] close(4 [pid 377] <... openat resumed>) = 3 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 542] <... close resumed>) = 0 [pid 377] fstat(3, [pid 372] close(3 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 563 [pid 372] <... close resumed>) = 0 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 542] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 540] <... futex resumed>) = 0 [pid 377] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 564 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 ./strace-static-x86_64: Process 564 attached ./strace-static-x86_64: Process 563 attached [pid 560] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 554] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 542] <... open resumed>) = 4 [pid 377] unlink("./4/binderfs" [pid 554] <... openat resumed>) = 3 [pid 546] <... futex resumed>) = ? [pid 539] <... futex resumed>) = ? [pid 564] set_robust_list(0x5555569495e0, 24 [pid 563] set_robust_list(0x5555569495e0, 24 [pid 554] chdir("./file0" [pid 546] +++ killed by SIGBUS +++ [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 554] <... chdir resumed>) = 0 [pid 560] +++ killed by SIGBUS +++ [pid 539] +++ killed by SIGBUS +++ [pid 554] ioctl(4, LOOP_CLR_FD) = 0 [pid 554] close(4 [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=539, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 540] <... futex resumed>) = 0 [pid 554] <... close resumed>) = 0 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... write resumed>) = 9 [pid 373] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 553] <... futex resumed>) = 0 [pid 554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 554] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 542] open("./bus", O_RDWR [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 542] <... open resumed>) = 5 [pid 540] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 554] <... open resumed>) = 4 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = 0 [pid 540] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(3, [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 554] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 553] <... futex resumed>) = 0 [pid 542] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 540] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... set_robust_list resumed>) = 0 [pid 563] chdir("./5" [pid 554] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 542] <... mmap resumed>) = 0x20000000 [pid 373] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 542] <... futex resumed>) = 1 [pid 540] <... futex resumed>) = 0 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./4/binderfs", [pid 542] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 540] <... futex resumed>) = 0 [pid 542] write(4, 0x20000f80, 9 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 540] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... chdir resumed>) = 0 [pid 542] <... write resumed>) = 9 [pid 373] unlink("./4/binderfs" [pid 554] <... write resumed>) = 9 [pid 542] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] <... futex resumed>) = 0 [pid 563] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] <... unlink resumed>) = 0 [pid 542] <... futex resumed>) = 0 [pid 540] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 542] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 540] <... mmap resumed>) = 0x7f70edc9c000 [pid 563] <... prctl resumed>) = 0 [pid 540] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 563] setpgid(0, 0 [pid 553] <... futex resumed>) = 0 [pid 540] <... mprotect resumed>) = 0 [pid 554] <... futex resumed>) = 1 [pid 563] <... setpgid resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 540] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 563] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 553] <... futex resumed>) = 0 [pid 554] open("./bus", O_RDWR [pid 563] <... openat resumed>) = 3 [pid 563] write(3, "1000", 4) = 4 [pid 563] close(3 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 540] <... clone resumed>, parent_tid=[565], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 565 [pid 540] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... close resumed>) = 0 [pid 540] <... futex resumed>) = 0 [pid 563] symlink("/dev/binderfs", "./binderfs" [pid 540] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] <... symlink resumed>) = 0 [pid 554] <... open resumed>) = 5 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 563] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 563] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[566], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 566 [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] <... mmap resumed>) = 0x20000000 [pid 563] <... futex resumed>) = 0 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 566 attached [pid 566] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 566] memfd_create("syzkaller", 0) = 3 [pid 566] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 565 attached [pid 554] <... futex resumed>) = 1 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 554] write(4, 0x20000f80, 9 [pid 553] <... futex resumed>) = 0 [pid 553] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 554] <... write resumed>) = 9 [pid 553] <... mmap resumed>) = 0x7f70edc9c000 [pid 554] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 553] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 554] <... futex resumed>) = 0 [pid 553] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 554] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 553] <... clone resumed>, parent_tid=[567], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 567 [pid 553] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 553] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 564] chdir("./4" [pid 565] set_robust_list(0x7f70edcbc9e0, 24 [pid 564] <... chdir resumed>) = 0 [pid 565] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 567 attached [pid 564] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 564] setpgid(0, 0) = 0 [ 21.733630][ T542] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 21.734253][ T559] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.748716][ T554] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 21.760720][ T560] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 564] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 566] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 566] munmap(0x7f70edbbd000, 1048576) = 0 [pid 566] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 567] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 564] write(3, "1000", 4) = 4 [pid 564] close(3) = 0 [pid 564] symlink("/dev/binderfs", "./binderfs") = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 564] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 564] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[568], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 568 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 568 attached [pid 568] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 568] memfd_create("syzkaller", 0) = 3 [pid 568] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 568] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 568] munmap(0x7f70edbbd000, 1048576) = 0 [pid 568] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 565] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 540] <... futex resumed>) = ? [pid 542] <... futex resumed>) = ? [pid 542] +++ killed by SIGBUS +++ [pid 565] +++ killed by SIGBUS +++ [pid 540] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=540, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./4/binderfs") = 0 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 567] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 554] <... futex resumed>) = 230 [pid 553] <... futex resumed>) = ? [pid 554] +++ killed by SIGBUS +++ [pid 567] +++ killed by SIGBUS +++ [pid 553] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=553, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] lstat("./4/file0", [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./5/binderfs" [pid 377] <... openat resumed>) = 4 [pid 376] <... unlink resumed>) = 0 [pid 377] fstat(4, [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./4/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./4") = 0 [pid 377] mkdir("./5", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 568] <... openat resumed>) = 4 [pid 566] <... openat resumed>) = 4 [pid 568] ioctl(4, LOOP_SET_FD, 3 [pid 566] ioctl(4, LOOP_SET_FD, 3 [pid 568] <... ioctl resumed>) = 0 [pid 568] close(3) = 0 [pid 568] mkdir("./file0", 0777) = 0 [ 21.795998][ T565] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 21.810935][ T567] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 568] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./4/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./4") = 0 [pid 373] mkdir("./5", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 566] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 377] close(3 [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 566] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] mkdir("./file0", 0777 [pid 376] getdents64(4, [pid 566] <... mkdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] close(4 [pid 374] lstat("./4/file0", [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./5/file0") = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 374] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./5" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... rmdir resumed>) = 0 [pid 376] mkdir("./6", 0777 [pid 374] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./4/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./4") = 0 [pid 374] mkdir("./5", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 568] <... mount resumed>) = 0 [pid 568] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 568] chdir("./file0") = 0 [pid 568] ioctl(4, LOOP_CLR_FD [pid 376] <... openat resumed>) = 3 [pid 568] <... ioctl resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 568] close(4 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] ioctl(3, LOOP_CLR_FD [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] ioctl(3, LOOP_CLR_FD [pid 568] <... close resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] close(3 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... close resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 574 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(3 [pid 373] close(3 [pid 564] <... futex resumed>) = 1 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 573 [pid 376] <... close resumed>) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 576 ./strace-static-x86_64: Process 576 attached [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 577 [pid 576] set_robust_list(0x5555569495e0, 24) = 0 [pid 576] chdir("./6") = 0 [pid 576] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 576] setpgid(0, 0) = 0 [pid 576] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 576] write(3, "1000", 4) = 4 [pid 576] close(3 [pid 568] <... futex resumed>) = 0 [pid 568] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 576] <... close resumed>) = 0 [pid 576] symlink("/dev/binderfs", "./binderfs") = 0 [pid 568] <... open resumed>) = 4 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... mmap resumed>) = 0x7f70f5fbd000 [pid 576] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 573 attached ) = 0 [pid 568] <... write resumed>) = 9 [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 577 attached [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [ 21.930783][ T568] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue ./strace-static-x86_64: Process 579 attached ./strace-static-x86_64: Process 574 attached [pid 577] set_robust_list(0x5555569495e0, 24 [pid 573] set_robust_list(0x5555569495e0, 24 [pid 568] open("./bus", O_RDWR [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... set_robust_list resumed>) = 0 [pid 568] <... open resumed>) = 5 [pid 577] chdir("./5" [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... chdir resumed>) = 0 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 577] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... prctl resumed>) = 0 [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 577] setpgid(0, 0 [pid 568] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 564] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... setpgid resumed>) = 0 [pid 568] <... mmap resumed>) = 0x20000000 [pid 577] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... openat resumed>) = 3 [pid 568] <... futex resumed>) = 1 [pid 564] <... futex resumed>) = 0 [pid 577] write(3, "1000", 4 [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 564] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... write resumed>) = 4 [pid 568] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 564] <... futex resumed>) = 0 [pid 577] close(3 [pid 568] write(4, 0x20000f80, 9 [pid 564] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... close resumed>) = 0 [pid 564] <... futex resumed>) = 0 [pid 577] symlink("/dev/binderfs", "./binderfs" [pid 564] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 577] <... symlink resumed>) = 0 [pid 564] <... mmap resumed>) = 0x7f70edc9c000 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 564] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 577] <... futex resumed>) = 0 [pid 564] <... mprotect resumed>) = 0 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 564] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 577] <... mmap resumed>) = 0x7f70f5fbd000 [pid 577] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 564] <... clone resumed>, parent_tid=[580], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 580 [pid 577] <... mprotect resumed>) = 0 [pid 564] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 564] <... futex resumed>) = 0 [pid 564] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 577] <... clone resumed>, parent_tid=[581], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 581 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 580 attached [pid 580] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 581 attached [pid 579] set_robust_list(0x7f70f5fdd9e0, 24 [pid 576] <... clone resumed>, parent_tid=[579], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 579 [pid 574] set_robust_list(0x5555569495e0, 24 [pid 573] <... set_robust_list resumed>) = 0 [pid 568] <... write resumed>) = 9 [pid 566] <... mount resumed>) = 0 [pid 579] <... set_robust_list resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... set_robust_list resumed>) = 0 [pid 573] chdir("./5" [pid 568] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] memfd_create("syzkaller", 0 [pid 576] <... futex resumed>) = 0 [pid 574] chdir("./5" [pid 573] <... chdir resumed>) = 0 [pid 568] <... futex resumed>) = 0 [pid 579] <... memfd_create resumed>) = 3 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 574] <... chdir resumed>) = 0 [pid 573] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 568] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 574] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 573] <... prctl resumed>) = 0 [pid 579] <... mmap resumed>) = 0x7f70edbbd000 [pid 574] <... prctl resumed>) = 0 [pid 573] setpgid(0, 0 [pid 579] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 574] setpgid(0, 0 [pid 573] <... setpgid resumed>) = 0 [pid 574] <... setpgid resumed>) = 0 [pid 573] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 574] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 573] <... openat resumed>) = 3 [pid 574] <... openat resumed>) = 3 [pid 573] write(3, "1000", 4 [pid 574] write(3, "1000", 4 [pid 573] <... write resumed>) = 4 [pid 574] <... write resumed>) = 4 [pid 573] close(3 [pid 574] close(3 [pid 573] <... close resumed>) = 0 [pid 574] <... close resumed>) = 0 [pid 573] symlink("/dev/binderfs", "./binderfs" [pid 581] set_robust_list(0x7f70f5fdd9e0, 24 [pid 574] symlink("/dev/binderfs", "./binderfs" [pid 573] <... symlink resumed>) = 0 [pid 566] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 581] <... set_robust_list resumed>) = 0 [pid 580] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 574] <... symlink resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... openat resumed>) = 3 [pid 581] memfd_create("syzkaller", 0 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 568] <... futex resumed>) = ? [pid 566] chdir("./file0" [pid 564] <... futex resumed>) = ? [pid 581] <... memfd_create resumed>) = 3 [pid 574] <... futex resumed>) = 0 [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 568] +++ killed by SIGBUS +++ [pid 566] <... chdir resumed>) = 0 [pid 581] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 579] <... write resumed>) = 1048576 [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] <... mmap resumed>) = 0x7f70f5fbd000 [pid 566] ioctl(4, LOOP_CLR_FD [pid 581] <... mmap resumed>) = 0x7f70edbbd000 [pid 574] <... mmap resumed>) = 0x7f70f5fbd000 [pid 580] +++ killed by SIGBUS +++ [pid 573] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 566] <... ioctl resumed>) = 0 [pid 564] +++ killed by SIGBUS +++ [pid 581] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 579] munmap(0x7f70edbbd000, 1048576 [pid 574] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 573] <... mprotect resumed>) = 0 [pid 566] close(4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=564, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 579] <... munmap resumed>) = 0 [pid 574] <... mprotect resumed>) = 0 [pid 573] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 566] <... close resumed>) = 0 [pid 579] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 574] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 579] <... openat resumed>) = 4 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 579] ioctl(4, LOOP_SET_FD, 3 [pid 574] <... clone resumed>, parent_tid=[583], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 583 [pid 573] <... clone resumed>, parent_tid=[582], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 582 [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] <... futex resumed>) = 0 [pid 563] <... futex resumed>) = 0 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] <... futex resumed>) = 0 ./strace-static-x86_64: Process 582 attached [pid 582] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 582] memfd_create("syzkaller", 0) = 3 [pid 582] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 579] <... ioctl resumed>) = 0 [pid 579] close(3) = 0 [pid 579] mkdir("./file0", 0777) = 0 [pid 566] <... open resumed>) = 4 [pid 372] umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... openat resumed>) = 3 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 372] fstat(3, [pid 566] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 579] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 566] <... write resumed>) = 9 [pid 372] getdents64(3, [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 566] open("./bus", O_RDWR [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 583 attached [pid 583] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 583] memfd_create("syzkaller", 0) = 3 [pid 583] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 566] <... open resumed>) = 5 [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./4/binderfs", [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 566] <... futex resumed>) = 1 [pid 563] <... futex resumed>) = 0 [pid 372] unlink("./4/binderfs" [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 566] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 563] <... futex resumed>) = 0 [pid 372] <... unlink resumed>) = 0 [pid 566] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 563] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 566] <... mmap resumed>) = 0x20000000 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 563] <... futex resumed>) = 0 [pid 566] write(4, 0x20000f80, 9 [pid 563] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 566] <... write resumed>) = 9 [pid 563] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 566] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 563] <... mmap resumed>) = 0x7f70edc9c000 [pid 566] <... futex resumed>) = 0 [pid 563] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 566] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 563] <... mprotect resumed>) = 0 [pid 563] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[587], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 587 [pid 563] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 563] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 583] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 587 attached [pid 587] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 21.979716][ T566] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 21.983740][ T580] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 582] <... write resumed>) = 1048576 [pid 583] <... write resumed>) = 1048576 [pid 582] munmap(0x7f70edbbd000, 1048576) = 0 [pid 582] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 583] munmap(0x7f70edbbd000, 1048576) = 0 [pid 583] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 587] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 581] <... write resumed>) = 1048576 [pid 581] munmap(0x7f70edbbd000, 1048576) = 0 [pid 581] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 566] <... futex resumed>) = ? [pid 563] <... futex resumed>) = ? [pid 566] +++ killed by SIGBUS +++ [pid 587] +++ killed by SIGBUS +++ [pid 563] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=563, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./5/binderfs", [pid 579] <... mount resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./5/binderfs" [pid 579] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... unlink resumed>) = 0 [pid 579] <... openat resumed>) = 3 [pid 579] chdir("./file0") = 0 [pid 579] ioctl(4, LOOP_CLR_FD [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 583] <... openat resumed>) = 4 [pid 582] <... openat resumed>) = 4 [pid 581] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = 0 [pid 583] ioctl(4, LOOP_SET_FD, 3 [pid 582] ioctl(4, LOOP_SET_FD, 3 [pid 581] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./4/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./4") = 0 [pid 372] mkdir("./5", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 583] <... ioctl resumed>) = 0 [pid 583] close(3) = 0 [pid 583] mkdir("./file0", 0777) = 0 [pid 583] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 579] <... ioctl resumed>) = 0 [pid 579] close(4 [pid 581] <... ioctl resumed>) = 0 [pid 581] close(3) = 0 [pid 581] mkdir("./file0", 0777) = 0 [pid 581] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 582] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 582] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 582] <... close resumed>) = 0 [pid 582] mkdir("./file0", 0777) = 0 [ 22.035531][ T587] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.040472][ T579] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 582] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 579] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 579] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 579] <... open resumed>) = 4 ./strace-static-x86_64: Process 593 attached [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 593 [pid 593] set_robust_list(0x5555569495e0, 24 [pid 579] <... futex resumed>) = 1 [pid 576] <... futex resumed>) = 0 [pid 593] <... set_robust_list resumed>) = 0 [pid 579] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] chdir("./5") = 0 [pid 593] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 593] setpgid(0, 0) = 0 [pid 593] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 593] write(3, "1000", 4) = 4 [pid 593] close(3) = 0 [pid 593] symlink("/dev/binderfs", "./binderfs" [pid 576] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 579] <... write resumed>) = 9 [pid 593] <... symlink resumed>) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 593] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[596], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 596 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 576] <... futex resumed>) = 0 [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./5/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./5") = 0 [pid 375] mkdir("./6", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 579] open("./bus", O_RDWR [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... open resumed>) = 5 [pid 576] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 598 ./strace-static-x86_64: Process 598 attached ./strace-static-x86_64: Process 596 attached [pid 582] <... mount resumed>) = 0 [pid 581] <... mount resumed>) = 0 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] set_robust_list(0x7f70f5fdd9e0, 24 [pid 582] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 581] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 579] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] set_robust_list(0x5555569495e0, 24 [pid 596] <... set_robust_list resumed>) = 0 [pid 582] <... openat resumed>) = 3 [pid 581] <... openat resumed>) = 3 [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... set_robust_list resumed>) = 0 [pid 596] memfd_create("syzkaller", 0 [pid 582] chdir("./file0" [pid 581] chdir("./file0" [pid 579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 576] <... futex resumed>) = 0 [pid 598] chdir("./6" [pid 596] <... memfd_create resumed>) = 3 [pid 582] <... chdir resumed>) = 0 [pid 579] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 576] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... chdir resumed>) = 0 [pid 596] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 582] ioctl(4, LOOP_CLR_FD [pid 581] <... chdir resumed>) = 0 [pid 579] <... mmap resumed>) = 0x20000000 [pid 598] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 596] <... mmap resumed>) = 0x7f70edbbd000 [pid 582] <... ioctl resumed>) = 0 [pid 581] ioctl(4, LOOP_CLR_FD [pid 598] <... prctl resumed>) = 0 [pid 596] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 582] close(4 [pid 581] <... ioctl resumed>) = 0 [pid 598] setpgid(0, 0 [pid 582] <... close resumed>) = 0 [pid 581] close(4 [pid 598] <... setpgid resumed>) = 0 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... close resumed>) = 0 [pid 598] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 582] <... futex resumed>) = 1 [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... openat resumed>) = 3 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 598] write(3, "1000", 4 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... write resumed>) = 4 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 598] close(3 [pid 581] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... close resumed>) = 0 [pid 581] <... open resumed>) = 4 [pid 598] symlink("/dev/binderfs", "./binderfs" [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... symlink resumed>) = 0 [pid 581] <... futex resumed>) = 1 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] <... write resumed>) = 1048576 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] <... futex resumed>) = 1 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... futex resumed>) = 0 [pid 596] munmap(0x7f70edbbd000, 1048576 [pid 582] <... futex resumed>) = 0 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... futex resumed>) = 0 [pid 576] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 1 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 582] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 581] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 579] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 576] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] <... mmap resumed>) = 0x7f70f5fbd000 [pid 582] <... open resumed>) = 4 [pid 579] write(4, 0x20000f80, 9 [pid 576] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... write resumed>) = 9 [pid 576] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 576] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] <... futex resumed>) = 0 [pid 598] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 579] <... write resumed>) = 9 [pid 576] <... mmap resumed>) = 0x7f70edc9c000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... mprotect resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... futex resumed>) = 1 [pid 579] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 576] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 573] <... futex resumed>) = 0 [pid 598] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 596] <... munmap resumed>) = 0 [pid 582] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 579] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] <... mprotect resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 582] <... write resumed>) = 9 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 579] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] <... futex resumed>) = 0 [pid 576] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 598] <... clone resumed>, parent_tid=[600], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 600 [pid 596] <... openat resumed>) = 4 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] open("./bus", O_RDWR [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] ioctl(4, LOOP_SET_FD, 3 [pid 582] <... futex resumed>) = 1 [pid 581] <... open resumed>) = 5 [pid 576] <... clone resumed>, parent_tid=[601], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 601 [pid 573] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 576] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 582] open("./bus", O_RDWR [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 576] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... open resumed>) = 5 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 577] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... futex resumed>) = 1 [pid 573] <... futex resumed>) = 0 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 581] <... mmap resumed>) = 0x20000000 [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] <... futex resumed>) = 0 [pid 582] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 581] <... futex resumed>) = 1 [pid 577] <... futex resumed>) = 0 [pid 573] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 582] <... mmap resumed>) = 0x20000000 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 577] <... futex resumed>) = 0 [pid 582] <... futex resumed>) = 1 [pid 581] write(4, 0x20000f80, 9 [pid 573] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 573] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mount resumed>) = 0 [pid 582] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 581] <... write resumed>) = 9 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 583] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 582] write(4, 0x20000f80, 9 [pid 581] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 573] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... openat resumed>) = 3 [pid 582] <... write resumed>) = 9 [pid 581] <... futex resumed>) = 0 [pid 577] <... mmap resumed>) = 0x7f70edc9c000 [pid 573] <... futex resumed>) = 0 [pid 583] chdir("./file0" [pid 582] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 573] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 583] <... chdir resumed>) = 0 [pid 582] <... futex resumed>) = 0 [pid 577] <... mprotect resumed>) = 0 [pid 573] <... mmap resumed>) = 0x7f70edc9c000 [pid 583] ioctl(4, LOOP_CLR_FD [pid 582] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 577] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 573] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 573] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 577] <... clone resumed>, parent_tid=[603], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 603 [pid 573] <... clone resumed>, parent_tid=[604], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 604 [pid 577] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 573] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 577] <... futex resumed>) = 0 [pid 573] <... futex resumed>) = 0 [pid 577] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 573] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... ioctl resumed>) = 0 [pid 583] <... ioctl resumed>) = 0 [pid 596] close(3) = 0 [pid 583] close(4 [ 22.136281][ T581] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 22.145859][ T582] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 22.159168][ T583] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 596] mkdir("./file0", 0777) = 0 [pid 583] <... close resumed>) = 0 [pid 596] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 583] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 603 attached [pid 603] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 604 attached ./strace-static-x86_64: Process 601 attached ./strace-static-x86_64: Process 600 attached [pid 574] <... futex resumed>) = 0 [pid 601] set_robust_list(0x7f70edcbc9e0, 24 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 601] <... set_robust_list resumed>) = 0 [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 1 [pid 604] set_robust_list(0x7f70edcbc9e0, 24 [pid 603] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] set_robust_list(0x7f70f5fdd9e0, 24 [pid 583] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 600] <... set_robust_list resumed>) = 0 [pid 600] memfd_create("syzkaller", 0) = 3 [pid 604] <... set_robust_list resumed>) = 0 [pid 601] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 583] <... open resumed>) = 4 [pid 581] <... futex resumed>) = ? [pid 577] <... futex resumed>) = ? [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... mmap resumed>) = 0x7f70edbbd000 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 581] +++ killed by SIGBUS +++ [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 603] +++ killed by SIGBUS +++ [pid 583] <... futex resumed>) = 0 [pid 577] +++ killed by SIGBUS +++ [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 574] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=577, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 583] <... write resumed>) = 9 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 574] <... futex resumed>) = 0 [pid 583] open("./bus", O_RDWR [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... open resumed>) = 5 [pid 574] <... futex resumed>) = 0 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 583] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... mmap resumed>) = 0x20000000 [pid 574] <... futex resumed>) = 0 [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW [pid 583] write(4, 0x20000f80, 9 [pid 574] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 583] <... write resumed>) = 9 [pid 574] <... futex resumed>) = 0 [pid 373] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 583] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 574] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 3 [pid 583] <... futex resumed>) = 0 [pid 574] <... futex resumed>) = 0 [pid 373] fstat(3, [pid 583] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 574] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 574] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 373] getdents64(3, [pid 574] <... mprotect resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 574] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 574] <... clone resumed>, parent_tid=[606], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 606 [pid 373] lstat("./5/binderfs", [pid 574] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 574] <... futex resumed>) = 0 [pid 373] unlink("./5/binderfs" [pid 574] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... unlink resumed>) = 0 [pid 600] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 576] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 22.182599][ T603] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.194466][ T601] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.198758][ T604] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 606 attached [pid 604] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] <... write resumed>) = 1048576 [pid 596] <... mount resumed>) = 0 [pid 579] <... futex resumed>) = ? [pid 573] <... futex resumed>) = 0 [pid 606] set_robust_list(0x7f70edcbc9e0, 24 [pid 600] munmap(0x7f70edbbd000, 1048576 [pid 582] <... futex resumed>) = ? [pid 606] <... set_robust_list resumed>) = 0 [pid 600] <... munmap resumed>) = 0 [pid 582] +++ killed by SIGBUS +++ [pid 579] +++ killed by SIGBUS +++ [pid 601] +++ killed by SIGBUS +++ [pid 596] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 576] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=576, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 596] <... openat resumed>) = 3 [pid 596] chdir("./file0" [pid 376] <... restart_syscall resumed>) = 0 [pid 376] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./6/binderfs") = 0 [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 604] +++ killed by SIGBUS +++ [pid 600] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 596] <... chdir resumed>) = 0 [pid 573] +++ killed by SIGBUS +++ [pid 600] <... openat resumed>) = 4 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=573, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 600] ioctl(4, LOOP_SET_FD, 3 [pid 377] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 596] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./5/binderfs") = 0 [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 600] <... ioctl resumed>) = 0 [pid 596] <... ioctl resumed>) = 0 [pid 596] close(4 [pid 600] close(3 [pid 596] <... close resumed>) = 0 [pid 606] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 600] <... close resumed>) = 0 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] <... futex resumed>) = ? [pid 574] <... futex resumed>) = ? [pid 596] <... futex resumed>) = 1 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 600] mkdir("./file0", 0777 [pid 596] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 600] <... mkdir resumed>) = 0 [pid 600] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 596] <... open resumed>) = 4 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 583] +++ killed by SIGBUS +++ [pid 596] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 593] <... futex resumed>) = 0 [pid 596] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] <... write resumed>) = 9 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] open("./bus", O_RDWR [pid 593] <... futex resumed>) = 0 [pid 596] <... open resumed>) = 5 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 596] <... futex resumed>) = 0 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 596] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 593] <... futex resumed>) = 0 [pid 596] <... mmap resumed>) = 0x20000000 [pid 593] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 593] <... futex resumed>) = 0 [pid 596] write(4, 0x20000f80, 9 [pid 593] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] <... write resumed>) = 9 [pid 593] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 596] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 593] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 596] <... futex resumed>) = 0 [pid 596] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 593] <... mmap resumed>) = 0x7f70edc9c000 [pid 593] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 593] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 609 attached , parent_tid=[609], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 609 [pid 609] set_robust_list(0x7f70edcbc9e0, 24 [pid 593] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 609] <... set_robust_list resumed>) = 0 [pid 593] <... futex resumed>) = 0 [pid 606] +++ killed by SIGBUS +++ [pid 593] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 574] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=574, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./5/binderfs") = 0 [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 609] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 596] <... futex resumed>) = ? [pid 593] <... futex resumed>) = ? [pid 596] +++ killed by SIGBUS +++ [pid 609] +++ killed by SIGBUS +++ [pid 593] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=593, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = 0 [pid 372] lstat("./5/binderfs", [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./5/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./5") = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] mkdir("./6", 0777) = 0 [pid 372] unlink("./5/binderfs" [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 372] <... unlink resumed>) = 0 [ 22.231342][ T596] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 22.241425][ T606] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.267703][ T609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 600] <... mount resumed>) = 0 [pid 600] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 600] chdir("./file0") = 0 [pid 600] ioctl(4, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] close(3 [pid 377] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 600] <... ioctl resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 600] close(4 [pid 376] lstat("./6/file0", [pid 374] lstat("./5/file0", [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 612 attached [pid 600] <... close resumed>) = 0 [pid 377] close(4 [pid 376] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] set_robust_list(0x5555569495e0, 24 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 612 [pid 372] lstat("./5/file0", [pid 612] <... set_robust_list resumed>) = 0 [pid 600] <... futex resumed>) = 1 [pid 598] <... futex resumed>) = 0 [pid 377] rmdir("./5/file0" [pid 376] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 612] chdir("./6" [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... rmdir resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 4 [pid 372] umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 612] <... chdir resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 376] fstat(4, [pid 374] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 612] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 600] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 612] <... prctl resumed>) = 0 [pid 377] close(3 [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 372] <... openat resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] fstat(4, [pid 612] setpgid(0, 0 [pid 600] <... open resumed>) = 4 [pid 377] rmdir("./5" [pid 376] getdents64(4, [pid 374] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 376] close(4 [pid 374] close(4 [pid 376] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] rmdir("./6/file0" [pid 374] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 612] <... setpgid resumed>) = 0 [pid 612] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... rmdir resumed>) = 0 [pid 374] rmdir("./5/file0" [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 612] <... openat resumed>) = 3 [pid 374] <... rmdir resumed>) = 0 [pid 377] mkdir("./6", 0777 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] getdents64(3, [pid 372] close(4 [pid 376] close(3 [pid 612] write(3, "1000", 4 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 376] rmdir("./6" [pid 374] close(3 [pid 372] rmdir("./5/file0" [pid 612] <... write resumed>) = 4 [pid 612] close(3) = 0 [pid 612] symlink("/dev/binderfs", "./binderfs" [pid 376] <... rmdir resumed>) = 0 [pid 612] <... symlink resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 376] mkdir("./7", 0777 [pid 374] rmdir("./5" [pid 372] getdents64(3, [pid 612] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 612] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 376] <... mkdir resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 612] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... rmdir resumed>) = 0 [pid 372] close(3 [pid 612] <... clone resumed>, parent_tid=[613], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 613 [pid 376] <... openat resumed>) = 3 [pid 374] mkdir("./6", 0777 [pid 372] <... close resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 372] rmdir("./5" [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR./strace-static-x86_64: Process 613 attached [pid 613] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 600] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = 1 [pid 600] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] close(3 [pid 374] <... openat resumed>) = 3 [pid 372] mkdir("./6", 0777 [pid 613] memfd_create("syzkaller", 0 [pid 600] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 3 [pid 376] <... close resumed>) = 0 [pid 613] <... memfd_create resumed>) = 3 [pid 613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... mkdir resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] open("./bus", O_RDWR [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 600] <... open resumed>) = 5 [pid 598] <... futex resumed>) = 0 [pid 374] close(3./strace-static-x86_64: Process 614 attached [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 614 [pid 372] <... openat resumed>) = 3 [pid 600] <... futex resumed>) = 0 [pid 598] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... close resumed>) = 0 [ 22.398497][ T600] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 372] ioctl(3, LOOP_CLR_FD [pid 613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] close(3 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 600] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 598] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 600] <... mmap resumed>) = 0x20000000 [pid 377] close(3 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 615 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 598] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 616 [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 600] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 598] <... futex resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 600] write(4, 0x20000f80, 9 [pid 598] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 600] <... write resumed>) = 9 [pid 598] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 617 [pid 600] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 598] <... mmap resumed>) = 0x7f70edc9c000 [pid 600] <... futex resumed>) = 0 [pid 598] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 600] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 598] <... mprotect resumed>) = 0 [pid 598] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[618], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 618 [pid 598] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 598] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 615 attached [pid 615] set_robust_list(0x5555569495e0, 24) = 0 [pid 615] chdir("./6") = 0 [pid 615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 615] setpgid(0, 0 [pid 614] set_robust_list(0x5555569495e0, 24 [pid 615] <... setpgid resumed>) = 0 [pid 614] <... set_robust_list resumed>) = 0 [pid 614] chdir("./7") = 0 [pid 614] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 615] write(3, "1000", 4 [pid 613] <... write resumed>) = 1048576 [pid 614] <... prctl resumed>) = 0 ./strace-static-x86_64: Process 616 attached ./strace-static-x86_64: Process 618 attached ./strace-static-x86_64: Process 617 attached [pid 614] setpgid(0, 0 [pid 615] <... write resumed>) = 4 [pid 615] close(3 [pid 618] set_robust_list(0x7f70edcbc9e0, 24 [pid 617] set_robust_list(0x5555569495e0, 24 [pid 616] set_robust_list(0x5555569495e0, 24 [pid 614] <... setpgid resumed>) = 0 [pid 618] <... set_robust_list resumed>) = 0 [pid 617] <... set_robust_list resumed>) = 0 [pid 616] <... set_robust_list resumed>) = 0 [pid 614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 617] chdir("./6" [pid 616] chdir("./6" [pid 615] <... close resumed>) = 0 [pid 615] symlink("/dev/binderfs", "./binderfs") = 0 [pid 613] munmap(0x7f70edbbd000, 1048576) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 613] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 613] <... openat resumed>) = 4 [pid 615] <... mmap resumed>) = 0x7f70f5fbd000 [pid 615] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 613] ioctl(4, LOOP_SET_FD, 3 [pid 615] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[619], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 619 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 619 attached [pid 619] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 619] memfd_create("syzkaller", 0) = 3 [pid 619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 619] munmap(0x7f70edbbd000, 1048576 [pid 617] <... chdir resumed>) = 0 [pid 616] <... chdir resumed>) = 0 [pid 614] write(3, "1000", 4 [pid 613] <... ioctl resumed>) = 0 [pid 613] close(3) = 0 [pid 613] mkdir("./file0", 0777 [pid 614] <... write resumed>) = 4 [pid 613] <... mkdir resumed>) = 0 [pid 613] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 614] close(3) = 0 [pid 614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 619] <... munmap resumed>) = 0 [pid 617] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 616] <... prctl resumed>) = 0 [pid 614] <... futex resumed>) = 0 [pid 619] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 617] <... prctl resumed>) = 0 [pid 616] setpgid(0, 0 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 617] setpgid(0, 0 [pid 619] <... openat resumed>) = 4 [pid 614] <... mmap resumed>) = 0x7f70f5fbd000 [pid 617] <... setpgid resumed>) = 0 [pid 616] <... setpgid resumed>) = 0 [pid 614] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 619] ioctl(4, LOOP_SET_FD, 3 [pid 617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 614] <... mprotect resumed>) = 0 [pid 616] <... openat resumed>) = 3 [pid 614] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 619] <... ioctl resumed>) = 0 [pid 617] <... openat resumed>) = 3 [pid 619] close(3 [pid 617] write(3, "1000", 4 [pid 616] write(3, "1000", 4./strace-static-x86_64: Process 623 attached [pid 623] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 617] <... write resumed>) = 4 [pid 619] <... close resumed>) = 0 [pid 616] <... write resumed>) = 4 [pid 619] mkdir("./file0", 0777 [pid 617] close(3 [pid 616] close(3 [pid 614] <... clone resumed>, parent_tid=[623], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 623 [pid 617] <... close resumed>) = 0 [pid 616] <... close resumed>) = 0 [pid 619] <... mkdir resumed>) = 0 [pid 617] symlink("/dev/binderfs", "./binderfs" [pid 616] symlink("/dev/binderfs", "./binderfs" [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... symlink resumed>) = 0 [pid 617] <... symlink resumed>) = 0 [pid 619] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 617] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 1 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... futex resumed>) = 0 [pid 617] <... futex resumed>) = 0 [pid 617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 617] <... mmap resumed>) = 0x7f70f5fbd000 [pid 616] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 617] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 616] <... mprotect resumed>) = 0 [pid 617] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 616] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 625 attached [pid 625] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 617] <... clone resumed>, parent_tid=[625], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 625 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] <... clone resumed>, parent_tid=[626], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 626 [pid 625] memfd_create("syzkaller", 0) = 3 ./strace-static-x86_64: Process 626 attached [pid 617] <... futex resumed>) = 0 [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 0 [pid 618] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] set_robust_list(0x7f70f5fdd9e0, 24 [pid 623] memfd_create("syzkaller", 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 616] <... futex resumed>) = 0 [pid 600] <... futex resumed>) = ? [pid 598] <... futex resumed>) = ? [pid 626] <... set_robust_list resumed>) = 0 [pid 625] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 623] <... memfd_create resumed>) = 3 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 600] +++ killed by SIGBUS +++ [pid 618] +++ killed by SIGBUS +++ [pid 598] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=598, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 613] <... mount resumed>) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./6/binderfs") = 0 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 613] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 613] chdir("./file0") = 0 [pid 613] ioctl(4, LOOP_CLR_FD [pid 625] <... mmap resumed>) = 0x7f70edbbd000 [pid 626] memfd_create("syzkaller", 0) = 3 [pid 626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 623] munmap(0x7f70edbbd000, 1048576) = 0 [ 22.475417][ T618] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.503906][ T613] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [pid 623] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 626] munmap(0x7f70edbbd000, 1048576) = 0 [pid 626] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 625] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 625] munmap(0x7f70edbbd000, 1048576 [pid 626] <... openat resumed>) = 4 [pid 623] <... openat resumed>) = 4 [pid 619] <... mount resumed>) = 0 [pid 613] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 626] ioctl(4, LOOP_SET_FD, 3 [pid 623] ioctl(4, LOOP_SET_FD, 3 [pid 613] close(4 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 619] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 623] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./6/file0", [pid 623] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 625] <... munmap resumed>) = 0 [pid 625] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 619] <... openat resumed>) = 3 [pid 619] chdir("./file0") = 0 [pid 619] ioctl(4, LOOP_CLR_FD [pid 623] <... close resumed>) = 0 [pid 623] mkdir("./file0", 0777) = 0 [pid 623] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 626] <... ioctl resumed>) = 0 [pid 626] close(3 [pid 613] <... close resumed>) = 0 [pid 375] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 626] <... close resumed>) = 0 [pid 625] <... openat resumed>) = 4 [pid 619] <... ioctl resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 626] mkdir("./file0", 0777 [pid 613] <... futex resumed>) = 1 [pid 612] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 626] <... mkdir resumed>) = 0 [pid 613] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 4 [pid 626] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 613] <... open resumed>) = 4 [pid 612] <... futex resumed>) = 0 [pid 375] fstat(4, [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] getdents64(4, [pid 613] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 625] ioctl(4, LOOP_SET_FD, 3 [pid 619] close(4 [pid 612] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 613] <... write resumed>) = 9 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 613] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 613] open("./bus", O_RDWR [pid 612] <... futex resumed>) = 0 [pid 375] rmdir("./6/file0" [pid 613] <... open resumed>) = 5 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... ioctl resumed>) = 0 [pid 625] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] <... close resumed>) = 0 [pid 613] <... futex resumed>) = 1 [pid 375] getdents64(3, [pid 612] <... futex resumed>) = 0 [pid 613] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 613] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 625] mkdir("./file0", 0777) = 0 [pid 625] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 612] <... futex resumed>) = 0 [pid 613] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 375] close(3 [pid 613] <... mmap resumed>) = 0x20000000 [pid 612] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] rmdir("./6" [pid 613] write(4, 0x20000f80, 9 [pid 612] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... close resumed>) = 0 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] <... rmdir resumed>) = 0 [pid 615] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = 1 [pid 613] <... write resumed>) = 9 [pid 612] <... futex resumed>) = 0 [pid 375] mkdir("./7", 0777 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 612] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 612] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 612] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[632], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 632 [pid 612] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 612] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 613] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 613] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 619] <... futex resumed>) = 0 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 634 [pid 619] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000./strace-static-x86_64: Process 634 attached ) = 4 [pid 634] set_robust_list(0x5555569495e0, 24 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... set_robust_list resumed>) = 0 [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 634] chdir("./7" [pid 619] <... write resumed>) = 9 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 615] <... futex resumed>) = 0 [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] open("./bus", O_RDWR [pid 615] <... futex resumed>) = 0 [pid 634] <... chdir resumed>) = 0 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 619] <... open resumed>) = 5 [pid 634] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 634] setpgid(0, 0) = 0 [pid 634] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] write(3, "1000", 4 [pid 619] <... futex resumed>) = 1 [pid 615] <... futex resumed>) = 0 [pid 619] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] <... write resumed>) = 4 [pid 634] close(3) = 0 [pid 619] <... mmap resumed>) = 0x20000000 [pid 615] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 632 attached [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 615] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] <... mount resumed>) = 0 [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 626] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 619] write(4, 0x20000f80, 9 [pid 615] <... futex resumed>) = 0 [pid 626] <... openat resumed>) = 3 [pid 634] symlink("/dev/binderfs", "./binderfs" [pid 626] chdir("./file0" [pid 619] <... write resumed>) = 9 [pid 615] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 619] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = 0 [pid 626] <... chdir resumed>) = 0 [pid 619] <... futex resumed>) = 0 [pid 626] ioctl(4, LOOP_CLR_FD [pid 619] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 626] <... ioctl resumed>) = 0 [pid 615] <... mmap resumed>) = 0x7f70edc9c000 [pid 626] close(4 [pid 615] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 634] <... symlink resumed>) = 0 [pid 626] <... close resumed>) = 0 [pid 615] <... mprotect resumed>) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 634] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = 1 [ 22.529198][ T619] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 22.564575][ T626] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 632] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] <... futex resumed>) = 0 [pid 634] <... mmap resumed>) = 0x7f70f5fbd000 [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... clone resumed>, parent_tid=[638], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 638 [pid 634] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 626] <... futex resumed>) = 0 [pid 616] <... futex resumed>) = 1 [pid 615] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] <... mprotect resumed>) = 0 [pid 626] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 615] <... futex resumed>) = 0 [pid 634] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 632] <... set_robust_list resumed>) = 0 [pid 626] <... open resumed>) = 4 [pid 615] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 641 attached ./strace-static-x86_64: Process 638 attached [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... mount resumed>) = 0 [pid 641] set_robust_list(0x7f70f5fdd9e0, 24 [pid 634] <... clone resumed>, parent_tid=[641], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 641 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 641] <... set_robust_list resumed>) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] memfd_create("syzkaller", 0 [pid 634] <... futex resumed>) = 0 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 616] <... futex resumed>) = 0 [pid 641] <... memfd_create resumed>) = 3 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 626] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 638] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] <... write resumed>) = 9 [pid 641] <... mmap resumed>) = 0x7f70edbbd000 [pid 638] <... set_robust_list resumed>) = 0 [ 22.576168][ T623] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 22.586967][ T632] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.602400][ T625] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 22.608682][ T638] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 612] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 623] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 623] chdir("./file0") = 0 [pid 623] ioctl(4, LOOP_CLR_FD) = 0 [pid 623] close(4) = 0 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... futex resumed>) = 1 [pid 623] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 625] <... mount resumed>) = 0 [pid 625] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 625] chdir("./file0") = 0 [pid 625] ioctl(4, LOOP_CLR_FD) = 0 [pid 625] close(4) = 0 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] open("./bus", O_RDWR) = 5 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 617] <... futex resumed>) = 0 [pid 617] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 617] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 617] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[642], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 642 [pid 617] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 617] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 625] <... futex resumed>) = 1 [pid 625] write(4, 0x20000f80, 9) = 9 [pid 625] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 625] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 642 attached [pid 642] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 641] <... write resumed>) = 1048576 [pid 638] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 632] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 615] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 641] munmap(0x7f70edbbd000, 1048576 [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 616] <... futex resumed>) = 0 [pid 641] <... munmap resumed>) = 0 [pid 626] open("./bus", O_RDWR [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 626] <... open resumed>) = 5 [pid 641] <... openat resumed>) = 4 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] ioctl(4, LOOP_SET_FD, 3 [pid 626] <... futex resumed>) = 1 [pid 616] <... futex resumed>) = 0 [pid 626] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 626] <... mmap resumed>) = 0x20000000 [pid 616] <... futex resumed>) = 0 [pid 616] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... open resumed>) = 4 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 642] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 626] <... futex resumed>) = 1 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 617] <... futex resumed>) = ? [pid 625] <... futex resumed>) = -1 (errno 18446744073709551414) [pid 616] <... futex resumed>) = 0 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 619] <... futex resumed>) = ? [pid 613] <... futex resumed>) = ? [pid 626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 625] +++ killed by SIGBUS +++ [pid 623] <... futex resumed>) = 1 [pid 619] +++ killed by SIGBUS +++ [pid 616] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 613] +++ killed by SIGBUS +++ [pid 641] <... ioctl resumed>) = 0 [pid 626] write(4, 0x20000f80, 9 [pid 623] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 616] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 616] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] <... futex resumed>) = 0 [pid 616] <... futex resumed>) = 0 [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 616] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 616] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 616] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[644], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 644 [pid 616] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 616] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 623] <... write resumed>) = 9 [pid 641] close(3 [pid 626] <... write resumed>) = 9 ./strace-static-x86_64: Process 644 attached [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 644] set_robust_list(0x7f70edcbc9e0, 24 [pid 641] <... close resumed>) = 0 [pid 626] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 642] +++ killed by SIGBUS +++ [pid 617] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=617, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] restart_syscall(<... resuming interrupted clone ...> [pid 644] <... set_robust_list resumed>) = 0 [pid 641] mkdir("./file0", 0777 [pid 638] +++ killed by SIGBUS +++ [pid 626] <... futex resumed>) = 0 [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 615] +++ killed by SIGBUS +++ [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... restart_syscall resumed>) = 0 [pid 641] <... mkdir resumed>) = 0 [pid 626] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=615, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 641] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 623] open("./bus", O_RDWR [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 623] <... open resumed>) = 5 [pid 377] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 377] fstat(3, [pid 374] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] getdents64(3, [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 632] +++ killed by SIGBUS +++ [pid 623] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 614] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 612] +++ killed by SIGBUS +++ [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 623] <... mmap resumed>) = 0x20000000 [pid 377] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 623] <... futex resumed>) = 1 [pid 614] <... futex resumed>) = 0 [pid 377] lstat("./6/binderfs", [pid 374] <... openat resumed>) = 3 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=612, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] fstat(3, [pid 623] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 614] <... futex resumed>) = 0 [pid 377] unlink("./6/binderfs" [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 623] write(4, 0x20000f80, 9 [pid 614] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] <... write resumed>) = 9 [pid 614] <... futex resumed>) = 0 [pid 374] getdents64(3, [pid 373] <... restart_syscall resumed>) = 0 [pid 623] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 623] <... futex resumed>) = 0 [pid 614] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 623] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 614] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW [pid 614] <... mprotect resumed>) = 0 [pid 374] lstat("./6/binderfs", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 614] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] unlink("./6/binderfs" [pid 373] <... openat resumed>) = 3 [pid 614] <... clone resumed>, parent_tid=[645], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 645 [pid 374] <... unlink resumed>) = 0 [pid 373] fstat(3, [pid 614] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 614] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 614] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./6/binderfs") = 0 [ 22.617854][ T642] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.655138][ T644] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 645 attached [pid 644] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 645] set_robust_list(0x7f70edcbc9e0, 24 [pid 626] <... futex resumed>) = ? [pid 616] <... futex resumed>) = ? [pid 645] <... set_robust_list resumed>) = 0 [pid 626] +++ killed by SIGBUS +++ [pid 644] +++ killed by SIGBUS +++ [pid 616] +++ killed by SIGBUS +++ [pid 645] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 623] <... futex resumed>) = ? [pid 614] <... futex resumed>) = ? [pid 623] +++ killed by SIGBUS +++ [pid 645] +++ killed by SIGBUS +++ [pid 614] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=614, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./7/binderfs") = 0 [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=616, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 372] umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./6/binderfs") = 0 [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... mount resumed>) = 0 [pid 641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 641] chdir("./file0") = 0 [ 22.671190][ T645] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.687966][ T641] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 641] ioctl(4, LOOP_CLR_FD) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 641] close(4) = 0 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 372] <... umount2 resumed>) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./6/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./6") = 0 [pid 377] mkdir("./7", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3 [pid 634] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 648 ./strace-static-x86_64: Process 648 attached [pid 648] set_robust_list(0x5555569495e0, 24) = 0 [pid 648] chdir("./7") = 0 [pid 648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 648] setpgid(0, 0) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 648] write(3, "1000", 4) = 4 [pid 648] close(3 [pid 634] <... futex resumed>) = 1 [pid 641] <... futex resumed>) = 0 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 648] <... close resumed>) = 0 [pid 648] symlink("/dev/binderfs", "./binderfs") = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 648] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 648] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[649], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 649 [pid 641] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 649 attached [pid 649] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 649] memfd_create("syzkaller", 0) = 3 [pid 649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 641] <... open resumed>) = 4 [pid 374] lstat("./6/file0", [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] lstat("./6/file0", [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] lstat("./6/file0", [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] <... write resumed>) = 9 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 641] open("./bus", O_RDWR [pid 374] <... openat resumed>) = 4 [pid 373] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] <... open resumed>) = 5 [pid 376] lstat("./7/file0", [pid 374] fstat(4, [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 4 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 634] <... futex resumed>) = 0 [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] fstat(4, [pid 372] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 634] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 641] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 634] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] getdents64(4, [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 4 [pid 641] <... mmap resumed>) = 0x20000000 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] getdents64(4, [pid 373] getdents64(4, [pid 372] fstat(4, [pid 641] <... futex resumed>) = 1 [pid 634] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 641] write(4, 0x20000f80, 9 [pid 634] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 634] <... futex resumed>) = 0 [pid 634] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 641] <... write resumed>) = 9 [pid 374] close(4 [pid 634] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, [pid 641] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 634] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] getdents64(4, [pid 641] <... futex resumed>) = 0 [pid 634] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 641] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 634] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] rmdir("./6/file0" [pid 373] close(4 [pid 634] <... mprotect resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... rmdir resumed>) = 0 [pid 634] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] getdents64(3, [pid 373] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 634] <... clone resumed>, parent_tid=[650], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 650 [pid 376] fstat(4, [pid 373] rmdir("./6/file0" [pid 374] close(3 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 634] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 634] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 374] rmdir("./6" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(4 [pid 374] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 372] <... close resumed>) = 0 [pid 376] getdents64(4, [pid 374] mkdir("./7", 0777 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] rmdir("./6/file0" [pid 374] <... mkdir resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 376] getdents64(4, [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 373] close(3 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3 [pid 374] <... openat resumed>) = 3 [pid 372] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 372] rmdir("./6"./strace-static-x86_64: Process 650 attached [pid 374] ioctl(3, LOOP_CLR_FD [pid 373] rmdir("./6" [pid 372] <... rmdir resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./7/file0" [pid 374] close(3 [pid 373] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] mkdir("./7", 0777) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./7") = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 376] mkdir("./8", 0777) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 651 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 652 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] mkdir("./7", 0777) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 653 [pid 649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 650] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 650] <... set_robust_list resumed>) = 0 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 654 ./strace-static-x86_64: Process 654 attached [pid 654] set_robust_list(0x5555569495e0, 24) = 0 [pid 654] chdir("./7" [pid 649] <... write resumed>) = 1048576 [pid 654] <... chdir resumed>) = 0 [pid 654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 654] setpgid(0, 0) = 0 [pid 654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 649] munmap(0x7f70edbbd000, 1048576) = 0 ./strace-static-x86_64: Process 651 attached [pid 654] write(3, "1000", 4) = 4 [pid 651] set_robust_list(0x5555569495e0, 24 [pid 654] close(3) = 0 [pid 654] symlink("/dev/binderfs", "./binderfs") = 0 [pid 651] <... set_robust_list resumed>) = 0 [pid 651] chdir("./7" [pid 649] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 649] ioctl(4, LOOP_SET_FD, 3 [pid 651] <... chdir resumed>) = 0 [pid 651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 651] setpgid(0, 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 651] <... setpgid resumed>) = 0 [pid 654] <... mmap resumed>) = 0x7f70f5fbd000 [pid 651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 654] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 651] <... openat resumed>) = 3 [pid 651] write(3, "1000", 4) = 4 [pid 651] close(3) = 0 [pid 651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 654] <... clone resumed>, parent_tid=[656], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 656 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 651] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 651] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 651] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[657], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 657 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 649] <... ioctl resumed>) = 0 [pid 649] close(3) = 0 [pid 649] mkdir("./file0", 0777) = 0 [pid 649] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 656 attached ./strace-static-x86_64: Process 653 attached ./strace-static-x86_64: Process 652 attached [pid 656] set_robust_list(0x7f70f5fdd9e0, 24 [pid 653] set_robust_list(0x5555569495e0, 24 [pid 656] <... set_robust_list resumed>) = 0 [pid 653] <... set_robust_list resumed>) = 0 [pid 652] set_robust_list(0x5555569495e0, 24 [pid 656] memfd_create("syzkaller", 0 [pid 653] chdir("./7" [pid 652] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 657 attached [pid 656] <... memfd_create resumed>) = 3 [pid 650] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 641] <... futex resumed>) = ? [pid 634] <... futex resumed>) = ? [pid 657] set_robust_list(0x7f70f5fdd9e0, 24 [pid 652] chdir("./8" [pid 656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 653] <... chdir resumed>) = 0 [pid 656] <... mmap resumed>) = 0x7f70edbbd000 [pid 653] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 652] <... chdir resumed>) = 0 [pid 657] <... set_robust_list resumed>) = 0 [pid 657] memfd_create("syzkaller", 0) = 3 [pid 657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 653] <... prctl resumed>) = 0 [pid 652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 653] setpgid(0, 0 [pid 652] setpgid(0, 0 [pid 653] <... setpgid resumed>) = 0 [pid 652] <... setpgid resumed>) = 0 [pid 653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 653] <... openat resumed>) = 3 [pid 652] write(3, "1000", 4 [pid 653] write(3, "1000", 4 [pid 652] <... write resumed>) = 4 [pid 653] <... write resumed>) = 4 [pid 652] close(3 [pid 653] close(3 [pid 652] <... close resumed>) = 0 [pid 653] <... close resumed>) = 0 [pid 652] symlink("/dev/binderfs", "./binderfs" [pid 641] +++ killed by SIGBUS +++ [pid 653] symlink("/dev/binderfs", "./binderfs" [pid 652] <... symlink resumed>) = 0 [pid 653] <... symlink resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 652] <... mmap resumed>) = 0x7f70f5fbd000 [pid 653] <... mmap resumed>) = 0x7f70f5fbd000 [pid 652] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 653] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 652] <... mprotect resumed>) = 0 [pid 653] <... mprotect resumed>) = 0 [pid 652] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 653] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 652] <... clone resumed>, parent_tid=[658], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 658 ./strace-static-x86_64: Process 659 attached ./strace-static-x86_64: Process 658 attached [pid 657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 656] <... write resumed>) = 1048576 [pid 653] <... clone resumed>, parent_tid=[659], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 659 [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] set_robust_list(0x7f70f5fdd9e0, 24 [pid 658] set_robust_list(0x7f70f5fdd9e0, 24 [pid 656] munmap(0x7f70edbbd000, 1048576 [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 650] +++ killed by SIGBUS +++ [pid 649] <... mount resumed>) = 0 [pid 634] +++ killed by SIGBUS +++ [pid 656] <... munmap resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 656] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=634, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 659] <... set_robust_list resumed>) = 0 [pid 658] <... set_robust_list resumed>) = 0 [pid 657] <... write resumed>) = 1048576 [pid 656] <... openat resumed>) = 4 [pid 649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 656] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, [pid 658] memfd_create("syzkaller", 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 659] memfd_create("syzkaller", 0 [pid 658] <... memfd_create resumed>) = 3 [pid 657] munmap(0x7f70edbbd000, 1048576 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 649] <... openat resumed>) = 3 [pid 659] <... memfd_create resumed>) = 3 [pid 658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 657] <... munmap resumed>) = 0 [pid 656] <... ioctl resumed>) = 0 [pid 649] chdir("./file0" [pid 375] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 658] <... mmap resumed>) = 0x7f70edbbd000 [pid 657] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 659] <... mmap resumed>) = 0x7f70edbbd000 [pid 657] <... openat resumed>) = 4 [pid 656] close(3 [pid 649] <... chdir resumed>) = 0 [pid 375] lstat("./7/binderfs", [pid 658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 658] munmap(0x7f70edbbd000, 1048576) = 0 [pid 658] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 656] <... close resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 658] close(3) = 0 [pid 658] mkdir("./file0", 0777) = 0 [pid 657] ioctl(4, LOOP_SET_FD, 3 [pid 656] mkdir("./file0", 0777 [pid 375] unlink("./7/binderfs" [pid 658] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 656] <... mkdir resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 656] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 649] ioctl(4, LOOP_CLR_FD [pid 657] <... ioctl resumed>) = 0 [pid 657] close(3) = 0 [pid 657] mkdir("./file0", 0777) = 0 [pid 659] <... write resumed>) = 1048576 [pid 659] munmap(0x7f70edbbd000, 1048576) = 0 [pid 659] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 659] ioctl(4, LOOP_SET_FD, 3 [pid 657] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 659] <... ioctl resumed>) = 0 [pid 649] <... ioctl resumed>) = 0 [pid 649] close(4 [pid 659] close(3) = 0 [pid 659] mkdir("./file0", 0777) = 0 [ 22.929249][ T650] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 22.968829][ T649] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 659] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 658] <... mount resumed>) = 0 [pid 658] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 658] chdir("./file0") = 0 [pid 658] ioctl(4, LOOP_CLR_FD [pid 656] <... mount resumed>) = 0 [pid 656] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 656] chdir("./file0") = 0 [pid 656] ioctl(4, LOOP_CLR_FD [pid 657] <... mount resumed>) = 0 [pid 656] <... ioctl resumed>) = 0 [pid 649] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 656] close(4 [pid 657] <... openat resumed>) = 3 [pid 658] <... ioctl resumed>) = 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] close(4 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] <... close resumed>) = 0 [pid 649] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 0 [pid 656] <... close resumed>) = 0 [pid 657] chdir("./file0" [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... open resumed>) = 4 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... open resumed>) = 4 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = 1 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] <... futex resumed>) = 0 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... chdir resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 656] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 657] ioctl(4, LOOP_CLR_FD) = 0 [pid 657] close(4 [pid 648] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... futex resumed>) = 1 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] <... futex resumed>) = 0 [pid 657] <... close resumed>) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] <... futex resumed>) = 1 [pid 657] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 651] <... futex resumed>) = 0 [pid 649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 658] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... write resumed>) = 9 [pid 649] <... write resumed>) = 9 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] lstat("./7/file0", [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 658] open("./bus", O_RDWR [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] open("./bus", O_RDWR [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 658] <... open resumed>) = 5 [pid 649] <... open resumed>) = 5 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 375] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 658] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 652] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 648] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 658] <... mmap resumed>) = 0x20000000 [pid 649] <... mmap resumed>) = 0x20000000 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = 1 [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = 1 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] <... futex resumed>) = 0 [pid 649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 648] <... futex resumed>) = 0 [pid 658] write(4, 0x20000f80, 9 [pid 652] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 649] write(4, 0x20000f80, 9 [pid 648] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 658] <... write resumed>) = 9 [pid 652] <... futex resumed>) = 0 [pid 649] <... write resumed>) = 9 [pid 648] <... futex resumed>) = 0 [pid 658] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 649] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 4 [pid 658] <... futex resumed>) = 0 [pid 657] <... futex resumed>) = 1 [pid 652] <... mmap resumed>) = 0x7f70edc9c000 [pid 649] <... futex resumed>) = 0 [pid 648] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] fstat(4, [pid 658] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 657] open("./bus", O_RDWR [pid 652] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 649] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 648] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 657] <... open resumed>) = 5 [pid 652] <... mprotect resumed>) = 0 [pid 648] <... mprotect resumed>) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 652] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 648] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 657] <... futex resumed>) = 1 [pid 651] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 657] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 652] <... clone resumed>, parent_tid=[673], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 673 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 648] <... clone resumed>, parent_tid=[674], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 674 [pid 657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 652] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 648] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 657] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 652] <... futex resumed>) = 0 [pid 651] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 657] <... mmap resumed>) = 0x20000000 [pid 652] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 648] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 657] <... futex resumed>) = 1 [pid 656] <... open resumed>) = 4 [pid 651] <... futex resumed>) = 0 [pid 375] close(4 [pid 657] write(4, 0x20000f80, 9 [pid 651] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 657] <... write resumed>) = 9 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 657] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./7/file0" [pid 657] <... futex resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 651] <... futex resumed>) = 0 [pid 657] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 656] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] <... rmdir resumed>) = 0 [pid 654] <... futex resumed>) = 0 [pid 651] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] getdents64(3, [pid 656] <... write resumed>) = 9 [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 651] <... mprotect resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 ./strace-static-x86_64: Process 674 attached ./strace-static-x86_64: Process 673 attached [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] close(3 [pid 674] set_robust_list(0x7f70edcbc9e0, 24 [ 23.005743][ T658] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.017027][ T656] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.017323][ T657] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 673] set_robust_list(0x7f70edcbc9e0, 24 [pid 674] <... set_robust_list resumed>) = 0 [pid 673] <... set_robust_list resumed>) = 0 [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 651] <... clone resumed>, parent_tid=[676], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 676 [pid 375] <... close resumed>) = 0 ./strace-static-x86_64: Process 676 attached [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 651] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./7" [pid 676] set_robust_list(0x7f70edcbc9e0, 24 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 676] <... set_robust_list resumed>) = 0 [pid 656] open("./bus", O_RDWR [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] mkdir("./8", 0777 [pid 656] <... open resumed>) = 5 [pid 375] <... mkdir resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 656] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 654] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] close(3 [pid 656] <... mmap resumed>) = 0x20000000 [pid 375] <... close resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 656] <... futex resumed>) = 1 [pid 654] <... futex resumed>) = 0 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 677 [pid 656] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 654] <... futex resumed>) = 0 [pid 656] write(4, 0x20000f80, 9 [pid 654] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 656] <... write resumed>) = 9 [pid 654] <... futex resumed>) = 0 [pid 656] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 654] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 656] <... futex resumed>) = 0 [pid 654] <... mmap resumed>) = 0x7f70edc9c000 [pid 656] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 654] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 654] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[678], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 678 [pid 654] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 654] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 678 attached ./strace-static-x86_64: Process 677 attached [pid 674] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 673] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 651] <... futex resumed>) = 0 [pid 678] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 23.064423][ T673] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.078151][ T674] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.082304][ T676] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 677] set_robust_list(0x5555569495e0, 24 [pid 676] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 658] <... futex resumed>) = ? [pid 652] <... futex resumed>) = ? [pid 651] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 649] <... futex resumed>) = ? [pid 648] <... futex resumed>) = ? [pid 677] <... set_robust_list resumed>) = 0 [pid 658] +++ killed by SIGBUS +++ [pid 677] chdir("./8" [pid 673] +++ killed by SIGBUS +++ [pid 657] <... futex resumed>) = ? [pid 652] +++ killed by SIGBUS +++ [pid 651] <... futex resumed>) = ? [pid 677] <... chdir resumed>) = 0 [pid 657] +++ killed by SIGBUS +++ [pid 677] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=652, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 677] <... prctl resumed>) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 677] setpgid(0, 0 [pid 376] <... restart_syscall resumed>) = 0 [pid 677] <... setpgid resumed>) = 0 [pid 677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 376] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] write(3, "1000", 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... write resumed>) = 4 [pid 376] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 677] close(3 [pid 676] +++ killed by SIGBUS +++ [pid 651] +++ killed by SIGBUS +++ [pid 376] <... openat resumed>) = 3 [pid 677] <... close resumed>) = 0 [pid 376] fstat(3, [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=651, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 677] symlink("/dev/binderfs", "./binderfs" [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 677] <... symlink resumed>) = 0 [pid 376] getdents64(3, [pid 677] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... restart_syscall resumed>) = 0 [pid 677] <... futex resumed>) = 0 [pid 376] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... mmap resumed>) = 0x7f70f5fbd000 [pid 376] lstat("./8/binderfs", [pid 372] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW [pid 677] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 677] <... mprotect resumed>) = 0 [pid 376] unlink("./8/binderfs" [pid 372] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 677] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... unlink resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] fstat(3, [pid 677] <... clone resumed>, parent_tid=[679], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 679 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 677] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 372] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./7/binderfs") = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 679 attached [pid 679] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 679] memfd_create("syzkaller", 0) = 3 [pid 679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 679] munmap(0x7f70edbbd000, 1048576) = 0 [pid 679] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 679] close(3) = 0 [pid 679] mkdir("./file0", 0777) = 0 [pid 679] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 678] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 649] +++ killed by SIGBUS +++ [pid 654] <... futex resumed>) = ? [pid 656] <... futex resumed>) = ? [pid 656] +++ killed by SIGBUS +++ [pid 678] +++ killed by SIGBUS +++ [pid 654] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=654, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 659] <... mount resumed>) = 0 [pid 674] +++ killed by SIGBUS +++ [pid 659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 648] +++ killed by SIGBUS +++ [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 659] <... openat resumed>) = 3 [pid 659] chdir("./file0") = 0 [pid 659] ioctl(4, LOOP_CLR_FD [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=648, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./7/binderfs") = 0 [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... restart_syscall resumed>) = 0 [pid 373] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./7/binderfs") = 0 [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 679] <... mount resumed>) = 0 [pid 679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 679] chdir("./file0") = 0 [pid 679] ioctl(4, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./7/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./7") = 0 [pid 372] mkdir("./8", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 659] <... ioctl resumed>) = 0 [ 23.095650][ T678] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.123957][ T659] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.139860][ T679] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 659] close(4 [pid 679] <... ioctl resumed>) = 0 [pid 679] close(4) = 0 [pid 659] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./7/file0", [pid 376] lstat("./8/file0", [pid 373] lstat("./7/file0", [pid 372] close(3 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 679] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 679] <... open resumed>) = 4 [pid 659] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 683 [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 376] fstat(4, [pid 373] fstat(4, [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 679] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 373] getdents64(4, ./strace-static-x86_64: Process 683 attached [pid 679] <... write resumed>) = 9 [pid 659] <... write resumed>) = 9 [pid 683] set_robust_list(0x5555569495e0, 24 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 373] getdents64(4, [pid 683] <... set_robust_list resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 377] close(4 [pid 376] close(4 [pid 373] close(4 [pid 683] chdir("./8" [pid 679] open("./bus", O_RDWR [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] open("./bus", O_RDWR [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 683] <... chdir resumed>) = 0 [pid 679] <... open resumed>) = 5 [pid 659] <... open resumed>) = 5 [pid 377] rmdir("./7/file0" [pid 376] rmdir("./8/file0" [pid 373] rmdir("./7/file0" [pid 683] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... prctl resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 683] setpgid(0, 0) = 0 [pid 683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 376] <... rmdir resumed>) = 0 [pid 683] <... openat resumed>) = 3 [pid 683] write(3, "1000", 4 [pid 373] <... rmdir resumed>) = 0 [pid 679] <... futex resumed>) = 1 [pid 659] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 653] <... futex resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] getdents64(3, [pid 376] getdents64(3, [pid 373] getdents64(3, [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 653] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 683] <... write resumed>) = 4 [pid 679] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 677] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 659] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 653] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 376] close(3 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 683] close(3 [pid 679] <... mmap resumed>) = 0x20000000 [pid 659] <... mmap resumed>) = 0x20000000 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] close(3 [pid 683] <... close resumed>) = 0 [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./7" [pid 376] rmdir("./8" [pid 373] <... close resumed>) = 0 [pid 683] symlink("/dev/binderfs", "./binderfs" [pid 679] <... futex resumed>) = 1 [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = 1 [pid 653] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 683] <... symlink resumed>) = 0 [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] mkdir("./8", 0777 [pid 376] <... rmdir resumed>) = 0 [pid 373] rmdir("./7" [pid 683] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 679] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 677] <... futex resumed>) = 0 [pid 659] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 653] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 679] write(4, 0x20000f80, 9 [pid 677] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 659] write(4, 0x20000f80, 9 [pid 653] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 376] mkdir("./9", 0777 [pid 683] <... mmap resumed>) = 0x7f70f5fbd000 [pid 677] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 679] <... write resumed>) = 9 [pid 677] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 659] <... write resumed>) = 9 [pid 653] <... futex resumed>) = 0 [pid 373] mkdir("./8", 0777 [pid 683] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 679] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 677] <... mmap resumed>) = 0x7f70edc9c000 [pid 659] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... mkdir resumed>) = 0 [pid 683] <... mprotect resumed>) = 0 [pid 679] <... futex resumed>) = 0 [pid 677] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 659] <... futex resumed>) = 0 [pid 653] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 373] <... mkdir resumed>) = 0 [pid 683] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 679] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 677] <... mprotect resumed>) = 0 [pid 659] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 653] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... openat resumed>) = 3 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 677] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 653] <... mprotect resumed>) = 0 [pid 377] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 683] <... clone resumed>, parent_tid=[684], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 684 [pid 373] <... openat resumed>) = 3 ./strace-static-x86_64: Process 684 attached [pid 653] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 677] <... clone resumed>, parent_tid=[685], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 685 [pid 373] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 685 attached [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... close resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 677] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] close(3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 677] <... futex resumed>) = 0 [pid 653] <... clone resumed>, parent_tid=[686], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 686 [pid 684] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 376] <... close resumed>) = 0 [pid 677] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 653] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 687 [pid 684] memfd_create("syzkaller", 0) = 3 [pid 684] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 687 attached [pid 687] set_robust_list(0x5555569495e0, 24) = 0 [pid 687] chdir("./8") = 0 [pid 373] <... close resumed>) = 0 [pid 687] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 687] <... prctl resumed>) = 0 [pid 687] setpgid(0, 0) = 0 [pid 687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 687] write(3, "1000", 4) = 4 [pid 687] close(3) = 0 [pid 653] <... futex resumed>) = 0 [pid 653] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 688 [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 689 [pid 687] symlink("/dev/binderfs", "./binderfs") = 0 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 687] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 687] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[690], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 690 [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 688 attached [pid 688] set_robust_list(0x5555569495e0, 24) = 0 [pid 688] chdir("./9") = 0 [pid 688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 688] setpgid(0, 0) = 0 [pid 688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 685] set_robust_list(0x7f70edcbc9e0, 24 [pid 688] write(3, "1000", 4) = 4 [pid 688] close(3) = 0 [pid 688] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 689 attached ./strace-static-x86_64: Process 686 attached [pid 685] <... set_robust_list resumed>) = 0 [pid 688] <... symlink resumed>) = 0 [pid 684] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 688] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 688] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[691], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 691 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 690 attached [pid 690] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 690] memfd_create("syzkaller", 0) = 3 [pid 690] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 691 attached [pid 691] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 691] memfd_create("syzkaller", 0) = 3 [pid 691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 684] <... write resumed>) = 1048576 [pid 684] munmap(0x7f70edbbd000, 1048576) = 0 [pid 684] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 684] ioctl(4, LOOP_SET_FD, 3 [pid 690] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 689] set_robust_list(0x5555569495e0, 24 [pid 686] set_robust_list(0x7f70edcbc9e0, 24 [pid 689] <... set_robust_list resumed>) = 0 [pid 686] <... set_robust_list resumed>) = 0 [pid 685] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 689] chdir("./8" [pid 684] <... ioctl resumed>) = 0 [pid 684] close(3) = 0 [pid 684] mkdir("./file0", 0777) = 0 [pid 684] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 689] <... chdir resumed>) = 0 [pid 689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 679] <... futex resumed>) = ? [pid 677] <... futex resumed>) = ? [pid 689] setpgid(0, 0) = 0 [pid 689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 689] write(3, "1000", 4) = 4 [pid 679] +++ killed by SIGBUS +++ [pid 689] close(3) = 0 [pid 686] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 689] symlink("/dev/binderfs", "./binderfs" [pid 685] +++ killed by SIGBUS +++ [pid 677] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=677, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 689] <... symlink resumed>) = 0 [pid 375] <... restart_syscall resumed>) = 0 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 689] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./8/binderfs") = 0 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 690] <... write resumed>) = 1048576 [pid 690] munmap(0x7f70edbbd000, 1048576) = 0 [pid 690] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 690] ioctl(4, LOOP_SET_FD, 3 [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 689] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 659] <... futex resumed>) = ? [pid 653] <... futex resumed>) = ? [pid 689] <... mprotect resumed>) = 0 [pid 689] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[695], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 695 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 691] <... write resumed>) = 1048576 [pid 691] munmap(0x7f70edbbd000, 1048576) = 0 [pid 691] openat(AT_FDCWD, "/dev/loop4", O_RDWR./strace-static-x86_64: Process 695 attached [pid 695] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 695] memfd_create("syzkaller", 0) = 3 [pid 695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 659] +++ killed by SIGBUS +++ [pid 690] <... ioctl resumed>) = 0 [pid 690] close(3) = 0 [pid 690] mkdir("./file0", 0777) = 0 [pid 690] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] <... openat resumed>) = 4 [pid 686] +++ killed by SIGBUS +++ [pid 653] +++ killed by SIGBUS +++ [pid 691] ioctl(4, LOOP_SET_FD, 3 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=653, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 374] umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./7/binderfs") = 0 [ 23.303327][ T685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.319416][ T686] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 691] <... ioctl resumed>) = 0 [pid 691] close(3) = 0 [pid 691] mkdir("./file0", 0777) = 0 [pid 691] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 684] <... mount resumed>) = 0 [pid 684] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 684] chdir("./file0") = 0 [pid 684] ioctl(4, LOOP_CLR_FD [pid 695] <... write resumed>) = 1048576 [pid 695] munmap(0x7f70edbbd000, 1048576) = 0 [pid 695] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./7/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [ 23.353885][ T684] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [pid 374] rmdir("./7") = 0 [pid 374] mkdir("./8", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 691] <... mount resumed>) = 0 [pid 690] <... mount resumed>) = 0 [pid 690] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 690] chdir("./file0") = 0 [pid 690] ioctl(4, LOOP_CLR_FD) = 0 [pid 690] close(4 [pid 684] <... ioctl resumed>) = 0 [pid 684] close(4) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 683] <... futex resumed>) = 0 [pid 684] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = 0 [pid 695] <... openat resumed>) = 4 [pid 374] <... openat resumed>) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 702 [pid 691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 691] chdir("./file0") = 0 [pid 691] ioctl(4, LOOP_CLR_FD) = 0 [pid 691] close(4) = 0 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL./strace-static-x86_64: Process 702 attached [pid 695] ioctl(4, LOOP_SET_FD, 3 [pid 690] <... close resumed>) = 0 [pid 688] <... futex resumed>) = 0 [pid 684] <... open resumed>) = 4 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 690] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 375] lstat("./8/file0", [pid 702] set_robust_list(0x5555569495e0, 24 [pid 691] <... futex resumed>) = 0 [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... set_robust_list resumed>) = 0 [pid 702] chdir("./8" [pid 691] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 687] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... chdir resumed>) = 0 [pid 702] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 690] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 684] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 702] <... prctl resumed>) = 0 [pid 702] setpgid(0, 0) = 0 [pid 702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 702] <... openat resumed>) = 3 [pid 375] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 684] <... write resumed>) = 9 [pid 375] fstat(4, [pid 702] write(3, "1000", 4 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] <... open resumed>) = 4 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 702] <... write resumed>) = 4 [pid 702] close(3) = 0 [pid 375] getdents64(4, [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 702] symlink("/dev/binderfs", "./binderfs" [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 684] open("./bus", O_RDWR [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] <... open resumed>) = 5 [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 690] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] close(4 [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... futex resumed>) = 0 [pid 684] <... futex resumed>) = 0 [pid 683] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 690] <... write resumed>) = 9 [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 683] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] rmdir("./8/file0" [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... mmap resumed>) = 0x20000000 [pid 375] <... rmdir resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(3, [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 1 [pid 683] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 690] open("./bus", O_RDWR [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 684] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 683] <... futex resumed>) = 0 [pid 375] close(3 [pid 690] <... open resumed>) = 5 [pid 684] write(4, 0x20000f80, 9 [pid 683] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 702] <... symlink resumed>) = 0 [pid 684] <... write resumed>) = 9 [pid 683] <... futex resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] rmdir("./8" [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 684] <... futex resumed>) = 0 [pid 683] <... mmap resumed>) = 0x7f70edc9c000 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 684] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 683] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... rmdir resumed>) = 0 [pid 690] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 687] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] <... mmap resumed>) = 0x20000000 [pid 683] <... mprotect resumed>) = 0 [pid 375] mkdir("./9", 0777 [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 702] <... mmap resumed>) = 0x7f70f5fbd000 [pid 702] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 702] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... mkdir resumed>) = 0 [pid 690] <... futex resumed>) = 1 [pid 687] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... clone resumed>, parent_tid=[704], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 704 [pid 690] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 687] <... futex resumed>) = 0 [pid 683] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... clone resumed>, parent_tid=[705], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 705 [pid 690] write(4, 0x20000f80, 9 [pid 687] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 683] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 687] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 690] <... write resumed>) = 9 [pid 687] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 683] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 690] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 687] <... mmap resumed>) = 0x7f70edc9c000 ./strace-static-x86_64: Process 704 attached [pid 690] <... futex resumed>) = 0 [pid 687] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 690] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 687] <... mprotect resumed>) = 0 [pid 687] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[706], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 706 [pid 687] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 704] set_robust_list(0x7f70edcbc9e0, 24 [pid 687] <... futex resumed>) = 0 [pid 704] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 706 attached ./strace-static-x86_64: Process 705 attached [pid 695] <... ioctl resumed>) = 0 [pid 691] <... open resumed>) = 4 [pid 687] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 706] set_robust_list(0x7f70edcbc9e0, 24 [pid 695] close(3 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 706] <... set_robust_list resumed>) = 0 [pid 695] <... close resumed>) = 0 [pid 691] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 0 [pid 695] mkdir("./file0", 0777 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... mkdir resumed>) = 0 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] <... futex resumed>) = 0 [pid 705] set_robust_list(0x7f70f5fdd9e0, 24 [pid 695] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 691] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... set_robust_list resumed>) = 0 [pid 691] <... write resumed>) = 9 [pid 705] memfd_create("syzkaller", 0 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... memfd_create resumed>) = 3 [pid 691] <... futex resumed>) = 1 [pid 688] <... futex resumed>) = 0 [pid 375] <... openat resumed>) = 3 [pid 705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... mmap resumed>) = 0x7f70edbbd000 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] <... futex resumed>) = 0 [pid 691] open("./bus", O_RDWR [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] <... open resumed>) = 5 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [ 23.418675][ T691] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 23.424957][ T690] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 23.453488][ T704] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 704] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] ioctl(3, LOOP_CLR_FD [pid 705] <... write resumed>) = 1048576 [pid 684] <... futex resumed>) = ? [pid 683] <... futex resumed>) = ? [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 684] +++ killed by SIGBUS +++ [pid 375] close(3 [pid 704] +++ killed by SIGBUS +++ [pid 683] +++ killed by SIGBUS +++ [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 707 [pid 705] munmap(0x7f70edbbd000, 1048576) = 0 [pid 705] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 705] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 707 attached [pid 707] set_robust_list(0x5555569495e0, 24) = 0 [pid 707] chdir("./9") = 0 [pid 707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 707] setpgid(0, 0) = 0 [pid 707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 707] write(3, "1000", 4) = 4 [pid 707] close(3) = 0 [pid 707] symlink("/dev/binderfs", "./binderfs") = 0 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 691] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 688] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 691] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=683, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 707] <... futex resumed>) = 0 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 691] <... mmap resumed>) = 0x20000000 [pid 707] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 688] <... futex resumed>) = 0 [pid 691] write(4, 0x20000f80, 9 [pid 688] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 688] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 691] <... write resumed>) = 9 [pid 691] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 688] <... futex resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 691] <... futex resumed>) = 0 [pid 688] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 691] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 688] <... mmap resumed>) = 0x7f70edc9c000 [pid 688] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 707] <... mprotect resumed>) = 0 [pid 688] <... mprotect resumed>) = 0 [pid 372] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 688] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 688] <... clone resumed>, parent_tid=[709], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 709 [pid 372] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 688] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... openat resumed>) = 3 [pid 688] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 707] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 707] <... clone resumed>, parent_tid=[710], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 710 [pid 372] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./8/binderfs" [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 710 attached ./strace-static-x86_64: Process 709 attached [pid 706] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 372] <... unlink resumed>) = 0 [pid 690] <... futex resumed>) = ? [pid 687] <... futex resumed>) = ? [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 709] set_robust_list(0x7f70edcbc9e0, 24 [pid 705] <... ioctl resumed>) = 0 [pid 690] +++ killed by SIGBUS +++ [pid 710] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 705] close(3 [pid 710] memfd_create("syzkaller", 0) = 3 [pid 710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 709] <... set_robust_list resumed>) = 0 [pid 706] +++ killed by SIGBUS +++ [pid 705] <... close resumed>) = 0 [pid 687] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=687, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./8/binderfs") = 0 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 710] <... write resumed>) = 1048576 [pid 710] munmap(0x7f70edbbd000, 1048576) = 0 [pid 710] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 705] mkdir("./file0", 0777 [pid 695] <... mount resumed>) = 0 [pid 705] <... mkdir resumed>) = 0 [pid 705] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 695] chdir("./file0") = 0 [pid 695] ioctl(4, LOOP_CLR_FD [pid 709] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 691] <... futex resumed>) = ? [pid 688] <... futex resumed>) = ? [pid 691] +++ killed by SIGBUS +++ [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, [pid 709] +++ killed by SIGBUS +++ [pid 688] +++ killed by SIGBUS +++ [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=688, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] getdents64(4, [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4 [pid 376] <... restart_syscall resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./8/file0" [pid 376] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] <... rmdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] getdents64(3, [pid 376] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] fstat(3, [pid 372] close(3 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... close resumed>) = 0 [pid 376] getdents64(3, [pid 372] rmdir("./8" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... rmdir resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] mkdir("./9", 0777 [pid 376] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [ 23.475589][ T706] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.502117][ T695] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.510747][ T709] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 376] unlink("./9/binderfs" [pid 372] <... mkdir resumed>) = 0 [pid 705] <... mount resumed>) = 0 [pid 376] <... unlink resumed>) = 0 [pid 705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... openat resumed>) = 3 [pid 705] chdir("./file0") = 0 [pid 705] ioctl(4, LOOP_CLR_FD [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 695] <... ioctl resumed>) = 0 [pid 695] close(4) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 689] <... futex resumed>) = 0 [pid 695] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... open resumed>) = 4 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... write resumed>) = 9 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] open("./bus", O_RDWR [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... open resumed>) = 5 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... mmap resumed>) = 0x20000000 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 695] write(4, 0x20000f80, 9 [pid 689] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... write resumed>) = 9 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 689] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 695] <... futex resumed>) = 0 [pid 689] <... futex resumed>) = 0 [pid 695] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 689] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 689] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 689] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[715], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 715 [pid 689] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 689] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 715 attached [pid 710] <... openat resumed>) = 4 [pid 710] ioctl(4, LOOP_SET_FD, 3 [pid 715] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 715] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 695] <... futex resumed>) = ? [pid 689] <... futex resumed>) = ? [pid 695] +++ killed by SIGBUS +++ [pid 715] +++ killed by SIGBUS +++ [pid 689] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=689, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./8/binderfs") = 0 [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 705] close(4 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./8/file0", [pid 373] lstat("./8/file0", [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] <... openat resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 373] fstat(4, [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./8/file0" [pid 373] rmdir("./8/file0" [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 373] getdents64(3, [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3 [pid 373] close(3 [pid 377] <... close resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./8" [pid 373] rmdir("./8" [pid 377] <... rmdir resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] mkdir("./9", 0777 [pid 373] mkdir("./9", 0777 [pid 377] <... mkdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 710] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 710] close(3 [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 710] <... close resumed>) = 0 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 710] mkdir("./file0", 0777 [pid 376] lstat("./9/file0", [pid 710] <... mkdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 710] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 705] <... close resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] close(3 [pid 705] <... futex resumed>) = 1 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... openat resumed>) = 4 [pid 372] <... close resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] close(3 [pid 376] fstat(4, [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... close resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] getdents64(4, [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 717 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 718 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 702] <... futex resumed>) = 0 [pid 376] rmdir("./9/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./9") = 0 [pid 376] mkdir("./10", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 719 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 705] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [pid 705] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 705] <... write resumed>) = 9 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] <... futex resumed>) = 0 [ 23.539427][ T705] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 23.555762][ T715] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 705] open("./bus", O_RDWR [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 719 attached ./strace-static-x86_64: Process 718 attached ./strace-static-x86_64: Process 717 attached [pid 705] <... open resumed>) = 5 [pid 719] set_robust_list(0x5555569495e0, 24 [pid 718] set_robust_list(0x5555569495e0, 24 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... mount resumed>) = 0 [pid 717] set_robust_list(0x5555569495e0, 24 [pid 718] <... set_robust_list resumed>) = 0 [pid 717] <... set_robust_list resumed>) = 0 [pid 718] chdir("./9" [pid 705] <... futex resumed>) = 1 [pid 702] <... futex resumed>) = 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... set_robust_list resumed>) = 0 [pid 705] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 702] <... futex resumed>) = 0 [pid 719] chdir("./10" [pid 717] chdir("./9" [pid 705] <... mmap resumed>) = 0x20000000 [pid 702] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] <... chdir resumed>) = 0 [pid 718] <... chdir resumed>) = 0 [pid 717] <... chdir resumed>) = 0 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 719] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 718] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 717] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 705] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] write(4, 0x20000f80, 9 [pid 719] <... prctl resumed>) = 0 [pid 718] <... prctl resumed>) = 0 [pid 717] <... prctl resumed>) = 0 [pid 702] <... futex resumed>) = 0 [pid 719] setpgid(0, 0 [pid 718] setpgid(0, 0 [pid 717] setpgid(0, 0 [pid 705] <... write resumed>) = 9 [pid 702] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 719] <... setpgid resumed>) = 0 [pid 718] <... setpgid resumed>) = 0 [pid 717] <... setpgid resumed>) = 0 [pid 705] <... futex resumed>) = 0 [pid 702] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 705] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 702] <... mmap resumed>) = 0x7f70edc9c000 [pid 719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 702] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 719] <... openat resumed>) = 3 [pid 718] <... openat resumed>) = 3 [pid 717] <... openat resumed>) = 3 [pid 710] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 702] <... mprotect resumed>) = 0 [pid 719] write(3, "1000", 4 [pid 718] write(3, "1000", 4 [pid 717] write(3, "1000", 4 [pid 719] <... write resumed>) = 4 [pid 718] <... write resumed>) = 4 [pid 717] <... write resumed>) = 4 [pid 702] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 719] close(3 [pid 718] close(3 [pid 717] close(3 [pid 719] <... close resumed>) = 0 [pid 718] <... close resumed>) = 0 [pid 717] <... close resumed>) = 0 [pid 719] symlink("/dev/binderfs", "./binderfs" [pid 718] symlink("/dev/binderfs", "./binderfs" [pid 717] symlink("/dev/binderfs", "./binderfs" [pid 702] <... clone resumed>, parent_tid=[722], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 722 [pid 719] <... symlink resumed>) = 0 [pid 718] <... symlink resumed>) = 0 [pid 717] <... symlink resumed>) = 0 [pid 710] <... openat resumed>) = 3 [pid 702] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] <... futex resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 702] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 718] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 719] <... mmap resumed>) = 0x7f70f5fbd000 [pid 718] <... mmap resumed>) = 0x7f70f5fbd000 [pid 717] <... mmap resumed>) = 0x7f70f5fbd000 [pid 719] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 718] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 717] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 719] <... mprotect resumed>) = 0 [pid 718] <... mprotect resumed>) = 0 [pid 717] <... mprotect resumed>) = 0 [pid 719] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 718] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 717] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 719] <... clone resumed>, parent_tid=[723], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 723 [pid 718] <... clone resumed>, parent_tid=[724], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 724 [pid 717] <... clone resumed>, parent_tid=[725], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 725 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 723 attached ./strace-static-x86_64: Process 722 attached [pid 710] chdir("./file0" [pid 722] set_robust_list(0x7f70edcbc9e0, 24 [pid 710] <... chdir resumed>) = 0 [pid 722] <... set_robust_list resumed>) = 0 [pid 710] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 724 attached ./strace-static-x86_64: Process 725 attached [pid 724] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] set_robust_list(0x7f70f5fdd9e0, 24 [pid 722] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 724] <... set_robust_list resumed>) = 0 [pid 725] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] <... set_robust_list resumed>) = 0 [pid 724] memfd_create("syzkaller", 0 [pid 723] memfd_create("syzkaller", 0 [pid 725] <... set_robust_list resumed>) = 0 [pid 725] memfd_create("syzkaller", 0 [pid 723] <... memfd_create resumed>) = 3 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 726 [pid 725] <... memfd_create resumed>) = 3 [pid 724] <... memfd_create resumed>) = 3 [pid 723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 723] <... mmap resumed>) = 0x7f70edbbd000 [pid 724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] <... mmap resumed>) = 0x7f70edbbd000 [pid 724] <... mmap resumed>) = 0x7f70edbbd000 [pid 710] <... ioctl resumed>) = 0 [pid 710] close(4) = 0 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... open resumed>) = 4 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... write resumed>) = 9 ./strace-static-x86_64: Process 726 attached [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 705] <... futex resumed>) = ? [pid 702] <... futex resumed>) = ? [pid 726] set_robust_list(0x5555569495e0, 24 [pid 710] <... futex resumed>) = 1 [pid 707] <... futex resumed>) = 0 [pid 705] +++ killed by SIGBUS +++ [pid 726] <... set_robust_list resumed>) = 0 [pid 722] +++ killed by SIGBUS +++ [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 702] +++ killed by SIGBUS +++ [pid 726] chdir("./9" [pid 725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=702, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 726] <... chdir resumed>) = 0 [pid 710] open("./bus", O_RDWR [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 710] <... open resumed>) = 5 [pid 726] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 707] <... futex resumed>) = 0 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 710] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 707] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 726] <... prctl resumed>) = 0 [pid 710] <... mmap resumed>) = 0x20000000 [pid 726] setpgid(0, 0 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... setpgid resumed>) = 0 [pid 710] <... futex resumed>) = 1 [pid 707] <... futex resumed>) = 0 [pid 726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW [pid 726] <... openat resumed>) = 3 [pid 710] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 707] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 726] write(3, "1000", 4 [pid 710] write(4, 0x20000f80, 9 [pid 707] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 726] <... write resumed>) = 4 [pid 710] <... write resumed>) = 9 [pid 707] <... futex resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 726] close(3 [pid 724] <... write resumed>) = 1048576 [pid 723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 710] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 707] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] fstat(3, [pid 710] <... futex resumed>) = 0 [pid 707] <... mmap resumed>) = 0x7f70edc9c000 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 726] <... close resumed>) = 0 [pid 724] munmap(0x7f70edbbd000, 1048576 [pid 710] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 707] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 374] getdents64(3, [pid 726] symlink("/dev/binderfs", "./binderfs" [pid 724] <... munmap resumed>) = 0 [pid 707] <... mprotect resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 707] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 726] <... symlink resumed>) = 0 [pid 707] <... clone resumed>, parent_tid=[727], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 727 [pid 374] lstat("./8/binderfs", [pid 707] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 707] <... futex resumed>) = 0 [pid 374] unlink("./8/binderfs"./strace-static-x86_64: Process 727 attached [pid 726] <... futex resumed>) = 0 [pid 725] <... write resumed>) = 1048576 [pid 724] <... openat resumed>) = 4 [pid 707] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] <... unlink resumed>) = 0 [pid 727] set_robust_list(0x7f70edcbc9e0, 24 [pid 726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 725] munmap(0x7f70edbbd000, 1048576 [pid 724] ioctl(4, LOOP_SET_FD, 3 [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 727] <... set_robust_list resumed>) = 0 [pid 726] <... mmap resumed>) = 0x7f70f5fbd000 [ 23.609717][ T710] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 23.626955][ T722] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 725] <... munmap resumed>) = 0 [pid 723] <... write resumed>) = 1048576 [pid 724] <... ioctl resumed>) = 0 [pid 723] munmap(0x7f70edbbd000, 1048576) = 0 [pid 723] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 723] ioctl(4, LOOP_SET_FD, 3 [pid 726] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 726] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[729], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 729 [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 725] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 724] close(3) = 0 [pid 724] mkdir("./file0", 0777) = 0 [pid 724] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue"./strace-static-x86_64: Process 729 attached [pid 727] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 729] set_robust_list(0x7f70f5fdd9e0, 24 [pid 723] <... ioctl resumed>) = 0 [pid 729] <... set_robust_list resumed>) = 0 [pid 710] <... futex resumed>) = ? [pid 707] <... futex resumed>) = ? [pid 729] memfd_create("syzkaller", 0 [pid 723] close(3 [pid 710] +++ killed by SIGBUS +++ [pid 729] <... memfd_create resumed>) = 3 [pid 729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 725] <... openat resumed>) = 4 [pid 723] <... close resumed>) = 0 [pid 729] <... mmap resumed>) = 0x7f70edbbd000 [pid 725] ioctl(4, LOOP_SET_FD, 3 [pid 723] mkdir("./file0", 0777) = 0 [pid 723] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 727] +++ killed by SIGBUS +++ [pid 707] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=707, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 375] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./9/binderfs") = 0 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 729] <... write resumed>) = 1048576 [pid 729] munmap(0x7f70edbbd000, 1048576) = 0 [pid 729] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 724] <... mount resumed>) = 0 [pid 724] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 724] chdir("./file0") = 0 [pid 724] ioctl(4, LOOP_CLR_FD [pid 725] <... ioctl resumed>) = 0 [pid 725] close(3) = 0 [pid 725] mkdir("./file0", 0777) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 729] <... openat resumed>) = 4 [pid 724] <... ioctl resumed>) = 0 [pid 729] ioctl(4, LOOP_SET_FD, 3 [pid 724] close(4 [pid 725] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./8/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./8") = 0 [pid 374] mkdir("./9", 0777) = 0 [ 23.677882][ T727] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.700724][ T724] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 23.719586][ T723] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 723] <... mount resumed>) = 0 [pid 723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... umount2 resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] ioctl(3, LOOP_CLR_FD [pid 724] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] lstat("./9/file0", [pid 374] close(3 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./9/file0" [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 729] <... ioctl resumed>) = 0 [pid 375] getdents64(3, [pid 724] <... futex resumed>) = 1 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./9") = 0 [pid 718] <... futex resumed>) = 0 [pid 375] mkdir("./10", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 737 [pid 723] <... openat resumed>) = 3 [pid 723] chdir("./file0") = 0 [pid 723] ioctl(4, LOOP_CLR_FD) = 0 [pid 723] close(4) = 0 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... futex resumed>) = 1 [pid 723] open("./bus", O_RDWR) = 5 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] close(3 [pid 724] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 718] <... futex resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 1 [pid 719] <... futex resumed>) = 0 [pid 723] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 719] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] <... mmap resumed>) = 0x20000000 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 719] <... futex resumed>) = 0 [pid 723] write(4, 0x20000f80, 9 [pid 719] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... close resumed>) = 0 [pid 723] <... write resumed>) = 9 [pid 719] <... futex resumed>) = 0 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 724] <... open resumed>) = 4 [pid 723] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 719] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 723] <... futex resumed>) = 0 [pid 719] <... futex resumed>) = 0 [pid 723] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 719] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 719] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 719] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[739], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 739 [pid 719] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 719] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 740 attached ./strace-static-x86_64: Process 739 attached ./strace-static-x86_64: Process 737 attached [pid 729] mkdir("./file0", 0777 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] set_robust_list(0x5555569495e0, 24 [pid 739] set_robust_list(0x7f70edcbc9e0, 24 [pid 737] set_robust_list(0x5555569495e0, 24 [pid 729] <... mkdir resumed>) = 0 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 740 [pid 740] <... set_robust_list resumed>) = 0 [pid 739] <... set_robust_list resumed>) = 0 [pid 737] <... set_robust_list resumed>) = 0 [pid 729] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 724] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] chdir("./9") = 0 [pid 740] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 740] setpgid(0, 0) = 0 [pid 740] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 740] write(3, "1000", 4) = 4 [pid 740] close(3) = 0 [pid 740] symlink("/dev/binderfs", "./binderfs") = 0 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 740] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 740] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[742], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 742 [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 718] <... futex resumed>) = 0 [pid 739] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 723] <... futex resumed>) = ? [pid 719] <... futex resumed>) = ? [pid 724] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 723] +++ killed by SIGBUS +++ ./strace-static-x86_64: Process 742 attached [pid 737] chdir("./10" [pid 725] <... mount resumed>) = 0 [pid 724] <... write resumed>) = 9 [pid 742] set_robust_list(0x7f70f5fdd9e0, 24 [pid 737] <... chdir resumed>) = 0 [pid 725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... set_robust_list resumed>) = 0 [pid 737] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 725] <... openat resumed>) = 3 [pid 742] memfd_create("syzkaller", 0 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 737] <... prctl resumed>) = 0 [pid 724] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] setpgid(0, 0 [pid 725] chdir("./file0" [pid 724] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 718] <... futex resumed>) = 0 [pid 737] <... setpgid resumed>) = 0 [pid 724] open("./bus", O_RDWR [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 725] <... chdir resumed>) = 0 [pid 742] <... memfd_create resumed>) = 3 [pid 742] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 725] ioctl(4, LOOP_CLR_FD [pid 724] <... open resumed>) = 5 [pid 742] <... mmap resumed>) = 0x7f70edbbd000 [pid 737] <... openat resumed>) = 3 [pid 725] <... ioctl resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] write(3, "1000", 4 [pid 724] <... futex resumed>) = 1 [pid 718] <... futex resumed>) = 0 [pid 737] <... write resumed>) = 4 [pid 724] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] close(4 [pid 737] close(3 [pid 724] <... mmap resumed>) = 0x20000000 [pid 718] <... futex resumed>) = 0 [pid 737] <... close resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 737] symlink("/dev/binderfs", "./binderfs" [pid 724] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] <... symlink resumed>) = 0 [pid 724] write(4, 0x20000f80, 9 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 724] <... write resumed>) = 9 [pid 718] <... futex resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 724] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 718] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 724] <... futex resumed>) = 0 [pid 718] <... futex resumed>) = 0 [pid 742] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 739] +++ killed by SIGBUS +++ [pid 737] <... mmap resumed>) = 0x7f70f5fbd000 [pid 725] <... close resumed>) = 0 [pid 719] +++ killed by SIGBUS +++ [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 717] <... futex resumed>) = 0 [pid 725] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 742] <... write resumed>) = 1048576 [pid 742] munmap(0x7f70edbbd000, 1048576) = 0 [pid 742] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 742] ioctl(4, LOOP_SET_FD, 3 [pid 718] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=719, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 737] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 725] <... open resumed>) = 4 [pid 376] <... restart_syscall resumed>) = 0 [pid 724] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 718] <... futex resumed>) = ? [pid 737] <... mprotect resumed>) = 0 [pid 737] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 376] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 717] <... futex resumed>) = 0 [pid 737] <... clone resumed>, parent_tid=[746], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 746 [pid 725] <... write resumed>) = 9 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 742] <... ioctl resumed>) = 0 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 737] <... futex resumed>) = 0 [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... openat resumed>) = 3 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(3, [pid 742] close(3 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 717] <... futex resumed>) = 1 [pid 725] <... futex resumed>) = 0 [pid 725] open("./bus", O_RDWR) = 5 [pid 742] <... close resumed>) = 0 [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 742] mkdir("./file0", 0777 [pid 717] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] getdents64(3, [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 1 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 725] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 717] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 725] <... mmap resumed>) = 0x20000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 742] <... mkdir resumed>) = 0 [pid 376] lstat("./10/binderfs", [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 717] <... futex resumed>) = 0 [pid 725] write(4, 0x20000f80, 9 [pid 717] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 725] <... write resumed>) = 9 [pid 717] <... futex resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 725] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 717] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] unlink("./10/binderfs" [pid 725] <... futex resumed>) = 0 [pid 717] <... futex resumed>) = 0 [pid 725] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 717] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] <... unlink resumed>) = 0 [pid 717] <... mmap resumed>) = 0x7f70edc9c000 [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 717] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 717] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[747], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 747 [pid 717] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 717] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 724] +++ killed by SIGBUS +++ [pid 718] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=718, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./9/binderfs") = 0 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 747 attached ./strace-static-x86_64: Process 746 attached [pid 746] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [ 23.752746][ T725] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 23.760300][ T739] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.782644][ T724] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 746] memfd_create("syzkaller", 0) = 3 [pid 746] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 747] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 746] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 729] <... mount resumed>) = 0 [pid 729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 729] chdir("./file0") = 0 [pid 729] ioctl(4, LOOP_CLR_FD [pid 746] <... write resumed>) = 1048576 [pid 746] munmap(0x7f70edbbd000, 1048576) = 0 [pid 746] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 747] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 725] <... futex resumed>) = ? [pid 717] <... futex resumed>) = ? [pid 725] +++ killed by SIGBUS +++ [pid 747] +++ killed by SIGBUS +++ [pid 717] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=717, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 742] <... mount resumed>) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 746] <... openat resumed>) = 4 [pid 729] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 372] unlink("./9/binderfs" [pid 746] ioctl(4, LOOP_SET_FD, 3 [pid 729] close(4 [pid 372] <... unlink resumed>) = 0 [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./10/file0" [pid 742] <... openat resumed>) = 3 [pid 376] <... rmdir resumed>) = 0 [pid 742] chdir("./file0") = 0 [pid 742] ioctl(4, LOOP_CLR_FD [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./10") = 0 [pid 376] mkdir("./11", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 729] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 746] <... ioctl resumed>) = 0 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... openat resumed>) = 3 [pid 746] close(3 [pid 729] <... futex resumed>) = 1 [pid 726] <... futex resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... close resumed>) = 0 [pid 729] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 726] <... futex resumed>) = 0 [pid 377] lstat("./9/file0", [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] mkdir("./file0", 0777 [pid 377] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 729] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 746] <... mkdir resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 729] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 4 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] open("./bus", O_RDWR [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... open resumed>) = 5 [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 726] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 729] <... mmap resumed>) = 0x20000000 [pid 377] fstat(4, [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 726] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 729] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 726] <... futex resumed>) = 0 [pid 729] write(4, 0x20000f80, 9 [pid 726] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 729] <... write resumed>) = 9 [pid 726] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] getdents64(4, [pid 729] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 726] <... mmap resumed>) = 0x7f70edc9c000 [pid 729] <... futex resumed>) = 0 [pid 726] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 729] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 726] <... mprotect resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 726] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] getdents64(4, [pid 726] <... clone resumed>, parent_tid=[751], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 751 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 726] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] close(4 [pid 726] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... close resumed>) = 0 [pid 377] rmdir("./9/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./9") = 0 [pid 377] mkdir("./10", 0777) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR./strace-static-x86_64: Process 751 attached [pid 751] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 23.808611][ T729] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.812435][ T747] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.834869][ T742] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [pid 751] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 729] <... futex resumed>) = ? [pid 726] <... futex resumed>) = ? [pid 751] +++ killed by SIGBUS +++ [pid 729] +++ killed by SIGBUS +++ [pid 726] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=726, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./9/binderfs") = 0 [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] <... ioctl resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 742] close(4) = 0 [pid 377] <... openat resumed>) = 3 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] <... futex resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] close(3 [pid 372] <... umount2 resumed>) = 0 [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] <... close resumed>) = 0 [pid 742] <... futex resumed>) = 0 [pid 740] <... futex resumed>) = 1 [pid 377] close(3 [pid 742] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 742] <... open resumed>) = 4 [pid 377] <... close resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) ./strace-static-x86_64: Process 753 attached [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 753 [pid 372] lstat("./9/file0", [pid 753] set_robust_list(0x5555569495e0, 24 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 753] <... set_robust_list resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 755 [pid 372] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 753] chdir("./11" [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 753] <... chdir resumed>) = 0 [pid 742] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 753] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 742] <... write resumed>) = 9 [pid 372] <... openat resumed>) = 4 [pid 753] <... prctl resumed>) = 0 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] fstat(4, [pid 753] setpgid(0, 0 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 753] <... setpgid resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 753] <... openat resumed>) = 3 [pid 742] open("./bus", O_RDWR [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(4, [pid 753] write(3, "1000", 4 [pid 742] <... open resumed>) = 5 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 753] <... write resumed>) = 4 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(4 [pid 753] close(3 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 753] <... close resumed>) = 0 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./9/file0" [pid 753] symlink("/dev/binderfs", "./binderfs" [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 753] <... symlink resumed>) = 0 [pid 746] <... mount resumed>) = 0 [pid 742] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 740] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] getdents64(3, [pid 753] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] <... mmap resumed>) = 0x20000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 753] <... futex resumed>) = 0 [pid 746] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 742] <... futex resumed>) = 1 [pid 740] <... futex resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 753] <... mmap resumed>) = 0x7f70f5fbd000 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] rmdir("./9" [pid 753] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 742] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 740] <... futex resumed>) = 0 [pid 746] <... openat resumed>) = 3 [pid 372] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 755 attached [pid 753] <... mprotect resumed>) = 0 [pid 746] chdir("./file0" [pid 742] write(4, 0x20000f80, 9 [pid 740] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] mkdir("./10", 0777 [pid 755] set_robust_list(0x5555569495e0, 24 [pid 753] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 746] <... chdir resumed>) = 0 [pid 742] <... write resumed>) = 9 [pid 740] <... futex resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 ./strace-static-x86_64: Process 756 attached [pid 755] <... set_robust_list resumed>) = 0 [pid 742] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 740] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 756] set_robust_list(0x7f70f5fdd9e0, 24 [pid 753] <... clone resumed>, parent_tid=[756], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 756 [pid 746] ioctl(4, LOOP_CLR_FD [pid 742] <... futex resumed>) = 0 [pid 740] <... mmap resumed>) = 0x7f70edc9c000 [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 742] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 740] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 753] <... futex resumed>) = 0 [pid 740] <... mprotect resumed>) = 0 [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 740] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[757], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 757 [pid 740] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 740] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 755] chdir("./10" [pid 756] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 757 attached [pid 755] <... chdir resumed>) = 0 [pid 756] memfd_create("syzkaller", 0) = 3 [pid 756] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 755] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 757] set_robust_list(0x7f70edcbc9e0, 24 [pid 756] <... mmap resumed>) = 0x7f70edbbd000 [pid 757] <... set_robust_list resumed>) = 0 [pid 755] <... prctl resumed>) = 0 [ 23.867872][ T751] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.901562][ T746] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [pid 755] setpgid(0, 0 [pid 756] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 756] munmap(0x7f70edbbd000, 1048576) = 0 [pid 756] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 755] <... setpgid resumed>) = 0 [pid 755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 755] write(3, "1000", 4) = 4 [pid 755] close(3) = 0 [pid 755] symlink("/dev/binderfs", "./binderfs") = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 755] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 755] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[758], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 758 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 758 attached [pid 758] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 758] memfd_create("syzkaller", 0) = 3 [pid 758] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 757] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 742] <... futex resumed>) = ? [pid 740] <... futex resumed>) = ? [pid 742] +++ killed by SIGBUS +++ [pid 757] +++ killed by SIGBUS +++ [pid 740] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=740, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./9/binderfs") = 0 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 746] <... ioctl resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 746] close(4) = 0 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 759 attached [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 759] set_robust_list(0x5555569495e0, 24 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... umount2 resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 759 [pid 759] <... set_robust_list resumed>) = 0 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 737] <... futex resumed>) = 0 [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 746] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 746] <... open resumed>) = 4 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./9/file0", [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 373] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 737] <... futex resumed>) = 0 [pid 746] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 746] <... write resumed>) = 9 [pid 373] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... openat resumed>) = 4 [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 746] open("./bus", O_RDWR [pid 373] fstat(4, [pid 737] <... futex resumed>) = 0 [pid 746] <... open resumed>) = 5 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 746] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 737] <... futex resumed>) = 0 [pid 746] <... mmap resumed>) = 0x20000000 [pid 737] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 746] <... futex resumed>) = 1 [pid 737] <... futex resumed>) = 0 [pid 373] close(4 [pid 746] write(4, 0x20000f80, 9 [pid 737] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... close resumed>) = 0 [pid 737] <... futex resumed>) = 0 [pid 737] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 746] <... write resumed>) = 9 [pid 373] rmdir("./9/file0" [pid 737] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 746] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... rmdir resumed>) = 0 [pid 737] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 746] <... futex resumed>) = 0 [pid 746] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 737] <... mprotect resumed>) = 0 [pid 373] getdents64(3, [pid 737] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 737] <... clone resumed>, parent_tid=[760], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 760 [pid 373] close(3 [pid 737] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 737] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... close resumed>) = 0 [pid 373] rmdir("./9") = 0 [pid 373] mkdir("./10", 0777 [pid 759] chdir("./10"./strace-static-x86_64: Process 760 attached [pid 373] <... mkdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 759] <... chdir resumed>) = 0 [pid 760] set_robust_list(0x7f70edcbc9e0, 24 [pid 759] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 760] <... set_robust_list resumed>) = 0 [pid 759] <... prctl resumed>) = 0 [pid 759] setpgid(0, 0) = 0 [pid 759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 758] <... write resumed>) = 1048576 [pid 758] munmap(0x7f70edbbd000, 1048576) = 0 [pid 758] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 759] <... openat resumed>) = 3 [pid 759] write(3, "1000", 4) = 4 [pid 759] close(3) = 0 [pid 759] symlink("/dev/binderfs", "./binderfs") = 0 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 759] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 759] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[761], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 761 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 761 attached [pid 761] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 761] memfd_create("syzkaller", 0) = 3 [pid 761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 23.917910][ T757] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 761] munmap(0x7f70edbbd000, 1048576) = 0 [pid 761] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 760] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 737] <... futex resumed>) = ? [pid 746] <... futex resumed>) = ? [pid 756] <... openat resumed>) = 4 [pid 756] ioctl(4, LOOP_SET_FD, 3 [pid 746] +++ killed by SIGBUS +++ [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] <... openat resumed>) = 4 [pid 756] <... ioctl resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD [pid 374] lstat("./9/file0", [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] close(3 [pid 374] umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 758] ioctl(4, LOOP_SET_FD, 3 [pid 756] close(3 [pid 374] <... openat resumed>) = 4 [pid 374] fstat(4, [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 763 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, [pid 758] <... ioctl resumed>) = 0 [pid 756] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 758] close(3 [pid 756] mkdir("./file0", 0777 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4 [pid 758] <... close resumed>) = 0 [pid 756] <... mkdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 758] mkdir("./file0", 0777 [pid 756] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] rmdir("./9/file0" [pid 758] <... mkdir resumed>) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 758] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./9") = 0 [pid 374] mkdir("./10", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [ 23.956070][ T760] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 761] <... openat resumed>) = 4 [pid 761] ioctl(4, LOOP_SET_FD, 3 [pid 760] +++ killed by SIGBUS +++ [pid 737] +++ killed by SIGBUS +++ [pid 761] <... ioctl resumed>) = 0 [pid 761] close(3) = 0 [pid 761] mkdir("./file0", 0777 [pid 374] close(3 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=737, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] <... close resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 758] <... mount resumed>) = 0 [pid 375] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 770 [pid 375] <... openat resumed>) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 758] <... openat resumed>) = 3 [pid 375] getdents64(3, [pid 758] chdir("./file0" [pid 761] <... mkdir resumed>) = 0 [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 761] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 758] <... chdir resumed>) = 0 [pid 375] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 758] ioctl(4, LOOP_CLR_FD [pid 375] unlink("./10/binderfs" [pid 758] <... ioctl resumed>) = 0 [pid 375] <... unlink resumed>) = 0 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 758] close(4) = 0 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000) = 4 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9) = 9 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 758] open("./bus", O_RDWR./strace-static-x86_64: Process 763 attached [pid 763] set_robust_list(0x5555569495e0, 24) = 0 [pid 763] chdir("./10") = 0 [pid 763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 763] setpgid(0, 0) = 0 [pid 756] <... mount resumed>) = 0 [pid 756] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 756] chdir("./file0") = 0 [pid 756] ioctl(4, LOOP_CLR_FD [pid 763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 763] write(3, "1000", 4) = 4 [pid 763] close(3) = 0 [pid 763] symlink("/dev/binderfs", "./binderfs" [pid 758] <... open resumed>) = 5 [pid 763] <... symlink resumed>) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 763] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 763] <... clone resumed>, parent_tid=[771], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 771 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 770 attached [pid 770] set_robust_list(0x5555569495e0, 24) = 0 [pid 770] chdir("./10") = 0 [pid 770] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 770] setpgid(0, 0) = 0 [pid 770] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 758] <... futex resumed>) = 1 [pid 755] <... futex resumed>) = 0 [pid 770] write(3, "1000", 4 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... write resumed>) = 4 [pid 755] <... futex resumed>) = 0 [pid 770] close(3 [pid 755] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 770] <... close resumed>) = 0 [pid 770] symlink("/dev/binderfs", "./binderfs") = 0 [pid 758] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 770] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 770] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 758] <... mmap resumed>) = 0x20000000 [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... mprotect resumed>) = 0 [pid 755] <... futex resumed>) = 0 [pid 758] <... futex resumed>) = 1 [pid 755] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] write(4, 0x20000f80, 9 [pid 755] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 755] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 770] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] <... write resumed>) = 9 [pid 755] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 773 attached [pid 758] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 755] <... mprotect resumed>) = 0 [pid 770] <... clone resumed>, parent_tid=[773], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 773 [pid 755] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 758] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 758] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 755] <... clone resumed>, parent_tid=[774], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 774 [pid 770] <... futex resumed>) = 0 [pid 755] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 755] <... futex resumed>) = 0 ./strace-static-x86_64: Process 774 attached [pid 773] set_robust_list(0x7f70f5fdd9e0, 24 [pid 761] <... mount resumed>) = 0 [pid 755] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 761] chdir("./file0") = 0 [pid 761] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 771 attached [pid 771] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 771] memfd_create("syzkaller", 0) = 3 [pid 771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 774] set_robust_list(0x7f70edcbc9e0, 24 [pid 773] <... set_robust_list resumed>) = 0 [pid 773] memfd_create("syzkaller", 0 [pid 774] <... set_robust_list resumed>) = 0 [pid 773] <... memfd_create resumed>) = 3 [pid 773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 23.989468][ T758] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [pid 771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 375] <... umount2 resumed>) = 0 [pid 761] <... ioctl resumed>) = 0 [pid 756] <... ioctl resumed>) = 0 [pid 761] close(4 [pid 756] close(4 [pid 761] <... close resumed>) = 0 [pid 756] <... close resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 1 [pid 759] <... futex resumed>) = 0 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 761] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... open resumed>) = 4 [pid 759] <... futex resumed>) = 0 [pid 753] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... write resumed>) = 9 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] open("./bus", O_RDWR [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... open resumed>) = 5 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... mmap resumed>) = 0x20000000 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 761] write(4, 0x20000f80, 9 [pid 759] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... write resumed>) = 9 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 759] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 761] <... futex resumed>) = 0 [pid 759] <... futex resumed>) = 0 [pid 761] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 759] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 759] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 759] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 756] <... open resumed>) = 4 [pid 759] <... clone resumed>, parent_tid=[776], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 776 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 774] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 759] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 759] <... futex resumed>) = 0 [pid 756] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] lstat("./10/file0", [pid 759] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 756] <... write resumed>) = 9 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] open("./bus", O_RDWR [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... open resumed>) = 5 [pid 773] <... write resumed>) = 1048576 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] munmap(0x7f70edbbd000, 1048576 [pid 756] <... futex resumed>) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 753] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 756] <... mmap resumed>) = 0x20000000 [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 753] <... futex resumed>) = 0 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 756] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 753] <... futex resumed>) = 0 [pid 756] write(4, 0x20000f80, 9 [pid 753] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] <... munmap resumed>) = 0 [pid 756] <... write resumed>) = 9 [pid 753] <... futex resumed>) = 0 [pid 375] rmdir("./10/file0" [pid 773] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 756] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 753] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... rmdir resumed>) = 0 [pid 773] <... openat resumed>) = 4 [pid 756] <... futex resumed>) = 0 [pid 753] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] getdents64(3, [pid 773] ioctl(4, LOOP_SET_FD, 3 [pid 756] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 753] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 753] <... mprotect resumed>) = 0 [pid 375] close(3 [pid 773] <... ioctl resumed>) = 0 [pid 753] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... close resumed>) = 0 ./strace-static-x86_64: Process 778 attached [pid 773] close(3 [pid 375] rmdir("./10" [pid 778] set_robust_list(0x7f70edcbc9e0, 24 [pid 773] <... close resumed>) = 0 [pid 753] <... clone resumed>, parent_tid=[778], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 778 [pid 375] <... rmdir resumed>) = 0 [pid 753] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] mkdir("./11", 0777 [pid 773] mkdir("./file0", 0777 [pid 753] <... futex resumed>) = 0 [pid 375] <... mkdir resumed>) = 0 [pid 753] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD [pid 773] <... mkdir resumed>) = 0 [pid 758] <... futex resumed>) = ? [pid 755] <... futex resumed>) = ? [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 758] +++ killed by SIGBUS +++ [pid 773] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] close(3 [pid 778] <... set_robust_list resumed>) = 0 [pid 774] +++ killed by SIGBUS +++ [pid 755] +++ killed by SIGBUS +++ [ 24.027032][ T774] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 375] <... close resumed>) = 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=755, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=3} --- [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 779 [pid 771] <... write resumed>) = 1048576 ./strace-static-x86_64: Process 776 attached [pid 776] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 779 attached [pid 778] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 771] munmap(0x7f70edbbd000, 1048576 [pid 776] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 771] <... munmap resumed>) = 0 [pid 756] <... futex resumed>) = ? [pid 753] <... futex resumed>) = ? [pid 779] set_robust_list(0x5555569495e0, 24 [pid 771] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 761] <... futex resumed>) = ? [pid 759] <... futex resumed>) = ? [pid 756] +++ killed by SIGBUS +++ [pid 377] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... set_robust_list resumed>) = 0 [pid 778] +++ killed by SIGBUS +++ [pid 773] <... mount resumed>) = 0 [pid 771] <... openat resumed>) = 4 [pid 761] +++ killed by SIGBUS +++ [pid 753] +++ killed by SIGBUS +++ [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] chdir("./11" [pid 776] +++ killed by SIGBUS +++ [pid 773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 771] ioctl(4, LOOP_SET_FD, 3 [pid 759] +++ killed by SIGBUS +++ [pid 377] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 773] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=753, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 773] chdir("./file0" [pid 377] fstat(3, [pid 773] <... chdir resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=759, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 773] ioctl(4, LOOP_CLR_FD [pid 377] getdents64(3, [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 773] <... ioctl resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 773] close(4 [pid 377] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... restart_syscall resumed>) = 0 [pid 779] <... chdir resumed>) = 0 [pid 773] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] <... restart_syscall resumed>) = 0 [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] unlink("./10/binderfs" [pid 376] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 377] <... unlink resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 773] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 771] <... ioctl resumed>) = 0 [pid 770] <... futex resumed>) = 0 [pid 376] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 779] <... prctl resumed>) = 0 [pid 773] <... open resumed>) = 4 [pid 771] close(3 [pid 376] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] setpgid(0, 0 [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... close resumed>) = 0 [pid 376] fstat(3, [pid 372] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 779] <... setpgid resumed>) = 0 [pid 773] <... futex resumed>) = 0 [pid 771] mkdir("./file0", 0777 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... openat resumed>) = 3 [pid 779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 771] <... mkdir resumed>) = 0 [pid 376] getdents64(3, [pid 372] fstat(3, [pid 779] <... openat resumed>) = 3 [pid 771] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 779] write(3, "1000", 4 [pid 770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 773] <... futex resumed>) = 0 [pid 770] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 773] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./11/binderfs", [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] <... write resumed>) = 9 [pid 376] unlink("./11/binderfs" [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 779] <... write resumed>) = 4 [pid 779] close(3 [pid 376] <... unlink resumed>) = 0 [pid 372] lstat("./10/binderfs", [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 779] <... close resumed>) = 0 [pid 779] symlink("/dev/binderfs", "./binderfs" [pid 770] <... futex resumed>) = 0 [pid 372] unlink("./10/binderfs" [pid 773] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 779] <... symlink resumed>) = 0 [pid 773] open("./bus", O_RDWR [pid 372] <... unlink resumed>) = 0 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 773] <... open resumed>) = 5 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 773] <... futex resumed>) = 1 [pid 770] <... futex resumed>) = 0 [pid 779] <... mmap resumed>) = 0x7f70f5fbd000 [pid 773] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 770] <... futex resumed>) = 0 [pid 779] <... mprotect resumed>) = 0 [pid 779] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 773] <... mmap resumed>) = 0x20000000 [pid 770] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 773] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 773] write(4, 0x20000f80, 9 [pid 770] <... futex resumed>) = 0 [pid 770] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] <... clone resumed>, parent_tid=[783], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 783 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... futex resumed>) = 0 [pid 773] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 770] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 773] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 770] <... mmap resumed>) = 0x7f70edc9c000 ./strace-static-x86_64: Process 783 attached [pid 783] set_robust_list(0x7f70f5fdd9e0, 24 [pid 773] <... futex resumed>) = 0 [pid 770] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 773] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 770] <... mprotect resumed>) = 0 [pid 783] <... set_robust_list resumed>) = 0 [pid 783] memfd_create("syzkaller", 0 [pid 770] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[784], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 784 [pid 770] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 770] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... memfd_create resumed>) = 3 [pid 783] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 784 attached [ 24.063635][ T778] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.069292][ T776] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 784] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 783] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 783] munmap(0x7f70edbbd000, 1048576) = 0 [pid 783] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 784] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 377] <... umount2 resumed>) = 0 [pid 773] <... futex resumed>) = ? [pid 770] <... futex resumed>) = ? [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 773] +++ killed by SIGBUS +++ [pid 377] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 784] +++ killed by SIGBUS +++ [pid 770] +++ killed by SIGBUS +++ [pid 377] <... close resumed>) = 0 [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=770, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 377] rmdir("./10/file0") = 0 [pid 377] getdents64(3, [pid 374] <... restart_syscall resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 374] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] rmdir("./10" [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 377] <... rmdir resumed>) = 0 [pid 374] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 377] mkdir("./11", 0777 [pid 374] <... openat resumed>) = 3 [pid 377] <... mkdir resumed>) = 0 [pid 374] fstat(3, [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./10/binderfs") = 0 [ 24.114206][ T784] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 783] <... openat resumed>) = 4 [pid 783] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 783] close(3) = 0 [pid 377] <... openat resumed>) = 3 [pid 783] mkdir("./file0", 0777) = 0 [pid 783] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] ioctl(3, LOOP_CLR_FD [pid 372] <... umount2 resumed>) = 0 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./10/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./10") = 0 [pid 372] mkdir("./11", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 771] <... mount resumed>) = 0 [pid 771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 771] chdir("./file0") = 0 [pid 771] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 771] <... ioctl resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 377] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] ioctl(3, LOOP_CLR_FD [pid 377] <... close resumed>) = 0 [pid 376] lstat("./11/file0", [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] close(3 [pid 376] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... close resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 788 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 789 [pid 376] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./11/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./11") = 0 [pid 376] mkdir("./12", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3 [pid 376] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 376] close(3) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 790 [pid 771] close(4) = 0 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 0 [pid 771] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 763] <... futex resumed>) = 0 [pid 771] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... open resumed>) = 4 [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 788 attached [pid 788] set_robust_list(0x5555569495e0, 24) = 0 [pid 788] chdir("./11") = 0 [pid 788] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 788] setpgid(0, 0) = 0 [pid 788] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 788] write(3, "1000", 4) = 4 [pid 788] close(3) = 0 [pid 788] symlink("/dev/binderfs", "./binderfs") = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 788] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 788] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] lstat("./10/file0", [pid 788] <... clone resumed>, parent_tid=[792], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 792 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 763] <... futex resumed>) = 0 [pid 788] <... futex resumed>) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 792 attached [pid 771] <... write resumed>) = 9 [pid 374] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 792] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 792] memfd_create("syzkaller", 0) = 3 [pid 792] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 771] open("./bus", O_RDWR [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... open resumed>) = 5 [pid 374] <... openat resumed>) = 4 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] fstat(4, [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 763] <... futex resumed>) = 0 [pid 374] getdents64(4, [pid 763] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] <... mmap resumed>) = 0x20000000 [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, [pid 771] <... futex resumed>) = 1 [pid 763] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 763] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 771] write(4, 0x20000f80, 9 [pid 763] <... futex resumed>) = 0 [pid 374] close(4 [pid 763] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... close resumed>) = 0 [pid 763] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] rmdir("./10/file0" [pid 771] <... write resumed>) = 9 [pid 763] <... mmap resumed>) = 0x7f70edc9c000 [pid 763] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 763] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[793], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 793 [pid 763] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 374] <... rmdir resumed>) = 0 [pid 763] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 771] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] getdents64(3, [pid 771] <... futex resumed>) = 0 [pid 771] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./10") = 0 [pid 374] mkdir("./11", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3 [pid 374] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 794 [pid 792] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 794 attached ./strace-static-x86_64: Process 793 attached [pid 794] set_robust_list(0x5555569495e0, 24) = 0 [pid 793] set_robust_list(0x7f70edcbc9e0, 24 [pid 794] chdir("./11" [pid 793] <... set_robust_list resumed>) = 0 [pid 794] <... chdir resumed>) = 0 [pid 794] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 792] <... write resumed>) = 1048576 [pid 792] munmap(0x7f70edbbd000, 1048576) = 0 [pid 792] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4 [pid 792] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 789 attached [pid 789] set_robust_list(0x5555569495e0, 24) = 0 [pid 789] chdir("./11") = 0 [pid 789] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 789] setpgid(0, 0) = 0 [pid 789] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 789] write(3, "1000", 4) = 4 [pid 789] close(3) = 0 [pid 789] symlink("/dev/binderfs", "./binderfs") = 0 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 789] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[796], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 796 [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 796 attached [pid 796] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 796] memfd_create("syzkaller", 0) = 3 [pid 796] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 796] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 783] <... mount resumed>) = 0 [pid 783] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 783] chdir("./file0") = 0 [pid 783] ioctl(4, LOOP_CLR_FD [pid 794] <... prctl resumed>) = 0 [pid 796] <... write resumed>) = 1048576 [pid 796] munmap(0x7f70edbbd000, 1048576) = 0 [pid 796] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 794] setpgid(0, 0) = 0 [pid 794] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 794] write(3, "1000", 4 [pid 792] <... ioctl resumed>) = 0 [pid 783] <... ioctl resumed>) = 0 [pid 792] close(3 [pid 783] close(4 [pid 792] <... close resumed>) = 0 [pid 783] <... close resumed>) = 0 [pid 792] mkdir("./file0", 0777 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... write resumed>) = 4 [pid 792] <... mkdir resumed>) = 0 [pid 783] <... futex resumed>) = 1 [pid 779] <... futex resumed>) = 0 [pid 792] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 783] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 794] close(3 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... close resumed>) = 0 [pid 783] <... open resumed>) = 4 [pid 779] <... futex resumed>) = 0 [pid 794] symlink("/dev/binderfs", "./binderfs" [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... symlink resumed>) = 0 [pid 783] <... futex resumed>) = 0 [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 783] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... futex resumed>) = 0 [pid 779] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 783] open("./bus", O_RDWR [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 783] <... open resumed>) = 5 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 783] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 779] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 794] <... mmap resumed>) = 0x7f70f5fbd000 [pid 794] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 783] <... mmap resumed>) = 0x20000000 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 779] <... futex resumed>) = 0 [pid 783] write(4, 0x20000f80, 9 [pid 779] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 783] <... write resumed>) = 9 [pid 779] <... futex resumed>) = 0 [pid 783] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 779] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 783] <... futex resumed>) = 0 [pid 779] <... mmap resumed>) = 0x7f70edc9c000 [pid 783] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 779] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 779] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 794] <... mprotect resumed>) = 0 [pid 779] <... clone resumed>, parent_tid=[798], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 798 [pid 779] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 798 attached [pid 796] <... openat resumed>) = 4 [pid 794] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 779] <... futex resumed>) = 0 [pid 779] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 790 attached [pid 798] set_robust_list(0x7f70edcbc9e0, 24 [pid 796] ioctl(4, LOOP_SET_FD, 3 [pid 793] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 798] <... set_robust_list resumed>) = 0 [pid 794] <... clone resumed>, parent_tid=[799], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 799 [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 799 attached [pid 799] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 799] memfd_create("syzkaller", 0) = 3 [pid 799] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 799] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 799] munmap(0x7f70edbbd000, 1048576) = 0 [pid 799] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 763] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 794] <... futex resumed>) = 0 [pid 796] <... ioctl resumed>) = 0 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 796] close(3) = 0 [pid 796] mkdir("./file0", 0777 [pid 771] <... futex resumed>) = ? [pid 796] <... mkdir resumed>) = 0 [pid 796] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 792] <... mount resumed>) = 0 [pid 792] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 792] chdir("./file0") = 0 [pid 792] ioctl(4, LOOP_CLR_FD) = 0 [pid 792] close(4) = 0 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 792] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] set_robust_list(0x5555569495e0, 24 [pid 792] <... open resumed>) = 4 [pid 771] +++ killed by SIGBUS +++ [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... write resumed>) = 9 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 790] <... set_robust_list resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 792] open("./bus", O_RDWR) = 5 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 788] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 790] chdir("./12" [pid 792] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 792] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 788] <... futex resumed>) = 0 [pid 792] write(4, 0x20000f80, 9 [pid 788] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 788] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 792] <... write resumed>) = 9 [pid 788] <... mmap resumed>) = 0x7f70edc9c000 [pid 792] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 788] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 792] <... futex resumed>) = 0 [pid 792] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 788] <... mprotect resumed>) = 0 [pid 788] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 803 attached , parent_tid=[803], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 803 [pid 790] <... chdir resumed>) = 0 [pid 788] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 803] set_robust_list(0x7f70edcbc9e0, 24 [pid 790] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 788] <... futex resumed>) = 0 [pid 788] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... prctl resumed>) = 0 [pid 790] setpgid(0, 0) = 0 [pid 790] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 793] +++ killed by SIGBUS +++ [pid 790] write(3, "1000", 4 [pid 763] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=763, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 790] <... write resumed>) = 4 [pid 790] close(3 [pid 373] <... restart_syscall resumed>) = 0 [pid 790] <... close resumed>) = 0 [pid 373] umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 373] umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./10/binderfs") = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 790] symlink("/dev/binderfs", "./binderfs") = 0 [pid 803] <... set_robust_list resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [ 24.271826][ T793] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.301078][ T798] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 790] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 798] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 783] <... futex resumed>) = ? [pid 779] <... futex resumed>) = ? [pid 783] +++ killed by SIGBUS +++ [pid 798] +++ killed by SIGBUS +++ [pid 779] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=779, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 375] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./11/binderfs") = 0 [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 790] <... mprotect resumed>) = 0 [pid 790] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[806], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 806 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 796] <... mount resumed>) = 0 [pid 796] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 796] chdir("./file0") = 0 [pid 796] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 806 attached [pid 806] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 806] memfd_create("syzkaller", 0) = 3 [pid 806] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 803] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 792] <... futex resumed>) = ? [pid 788] <... futex resumed>) = ? [pid 792] +++ killed by SIGBUS +++ [pid 803] +++ killed by SIGBUS +++ [pid 788] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=788, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./11/binderfs") = 0 [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 799] <... openat resumed>) = 4 [pid 806] <... write resumed>) = 1048576 [pid 806] munmap(0x7f70edbbd000, 1048576) = 0 [pid 796] <... ioctl resumed>) = 0 [pid 806] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 799] ioctl(4, LOOP_SET_FD, 3 [ 24.334532][ T803] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 796] close(4 [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 799] <... ioctl resumed>) = 0 [pid 796] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 373] umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] <... openat resumed>) = 4 [pid 806] ioctl(4, LOOP_SET_FD, 3 [pid 799] close(3 [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] <... ioctl resumed>) = 0 [pid 799] <... close resumed>) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] close(3 [pid 799] mkdir("./file0", 0777 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] lstat("./11/file0", [pid 375] lstat("./11/file0", [pid 373] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 806] <... close resumed>) = 0 [pid 799] <... mkdir resumed>) = 0 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 806] mkdir("./file0", 0777 [pid 799] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 796] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... openat resumed>) = 4 [pid 806] <... mkdir resumed>) = 0 [pid 806] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 796] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] fstat(4, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 4 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] fstat(4, [pid 375] <... openat resumed>) = 4 [pid 373] getdents64(4, [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] fstat(4, [pid 796] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 796] <... write resumed>) = 9 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 373] getdents64(4, [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 375] getdents64(4, [pid 373] close(4 [pid 377] <... close resumed>) = 0 [pid 796] open("./bus", O_RDWR [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 377] rmdir("./11/file0" [pid 796] <... open resumed>) = 5 [pid 375] close(4 [pid 373] rmdir("./10/file0" [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 789] <... futex resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 796] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 789] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 377] getdents64(3, [pid 796] <... mmap resumed>) = 0x20000000 [pid 375] rmdir("./11/file0" [pid 373] getdents64(3, [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 796] <... futex resumed>) = 1 [pid 789] <... futex resumed>) = 0 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 789] <... futex resumed>) = 0 [pid 377] close(3 [pid 375] <... rmdir resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 796] write(4, 0x20000f80, 9 [pid 789] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 796] <... write resumed>) = 9 [pid 789] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] getdents64(3, [pid 373] close(3 [pid 796] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 789] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 796] <... futex resumed>) = 0 [pid 789] <... mmap resumed>) = 0x7f70edc9c000 [pid 796] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 789] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 789] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] rmdir("./11" [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] <... close resumed>) = 0 [pid 789] <... clone resumed>, parent_tid=[809], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 809 [pid 789] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 789] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 809 attached [pid 377] <... rmdir resumed>) = 0 [pid 375] close(3 [pid 373] rmdir("./10" [pid 377] mkdir("./12", 0777 [pid 375] <... close resumed>) = 0 [pid 809] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] <... rmdir resumed>) = 0 [pid 809] <... set_robust_list resumed>) = 0 [pid 377] <... mkdir resumed>) = 0 [pid 375] rmdir("./11" [pid 373] mkdir("./11", 0777 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] <... rmdir resumed>) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 375] mkdir("./12", 0777 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] <... mkdir resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 373] ioctl(3, LOOP_CLR_FD [pid 377] close(3 [pid 375] <... openat resumed>) = 3 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... close resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] close(3 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 373] <... close resumed>) = 0 [pid 375] close(3 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 811 attached [pid 809] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 799] <... mount resumed>) = 0 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 811 [pid 375] <... close resumed>) = 0 [pid 811] set_robust_list(0x5555569495e0, 24 [pid 799] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 796] <... futex resumed>) = ? [pid 789] <... futex resumed>) = ? [pid 811] <... set_robust_list resumed>) = 0 [pid 799] <... openat resumed>) = 3 [pid 796] +++ killed by SIGBUS +++ [pid 811] chdir("./12" [pid 806] <... mount resumed>) = 0 [pid 799] chdir("./file0" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 815 [pid 811] <... chdir resumed>) = 0 [pid 806] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 799] <... chdir resumed>) = 0 [pid 811] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 799] ioctl(4, LOOP_CLR_FD [pid 811] <... prctl resumed>) = 0 [pid 799] <... ioctl resumed>) = 0 [pid 811] setpgid(0, 0 [pid 809] +++ killed by SIGBUS +++ [pid 806] <... openat resumed>) = 3 [pid 799] close(4 [pid 789] +++ killed by SIGBUS +++ [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 816 [pid 811] <... setpgid resumed>) = 0 [pid 806] chdir("./file0" [pid 799] <... close resumed>) = 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=789, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 811] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 806] <... chdir resumed>) = 0 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 811] <... openat resumed>) = 3 [pid 806] ioctl(4, LOOP_CLR_FD [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 811] write(3, "1000", 4 [pid 806] <... ioctl resumed>) = 0 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... restart_syscall resumed>) = 0 [pid 811] <... write resumed>) = 4 [pid 806] close(4 [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 811] close(3 [pid 806] <... close resumed>) = 0 [pid 799] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] <... close resumed>) = 0 [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... open resumed>) = 4 [pid 372] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 811] symlink("/dev/binderfs", "./binderfs" [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 811] <... symlink resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 811] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 811] <... futex resumed>) = 0 [pid 806] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] fstat(3, [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 799] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 811] <... mmap resumed>) = 0x7f70f5fbd000 [pid 806] <... open resumed>) = 4 [pid 799] <... write resumed>) = 9 [pid 372] getdents64(3, [pid 811] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 811] <... mprotect resumed>) = 0 [pid 799] <... futex resumed>) = 1 [pid 372] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 811] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] lstat("./11/binderfs", [pid 811] <... clone resumed>, parent_tid=[817], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 817 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 1 [pid 790] <... futex resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 799] open("./bus", O_RDWR [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] unlink("./11/binderfs" [pid 811] <... futex resumed>) = 0 [pid 799] <... open resumed>) = 5 [pid 372] <... unlink resumed>) = 0 [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 806] <... write resumed>) = 9 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 ./strace-static-x86_64: Process 815 attached ./strace-static-x86_64: Process 816 attached [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 815] set_robust_list(0x5555569495e0, 24 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] set_robust_list(0x5555569495e0, 24 [pid 815] <... set_robust_list resumed>) = 0 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 794] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] <... futex resumed>) = 0 [pid 816] <... set_robust_list resumed>) = 0 [pid 815] chdir("./11" [pid 806] open("./bus", O_RDWR [pid 799] <... mmap resumed>) = 0x20000000 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] <... chdir resumed>) = 0 [pid 806] <... open resumed>) = 5 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] chdir("./12" [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... futex resumed>) = 1 [pid 794] <... futex resumed>) = 0 [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 816] <... chdir resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 799] write(4, 0x20000f80, 9 [pid 806] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 794] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] <... futex resumed>) = 0 [pid 815] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 794] <... futex resumed>) = 0 [pid 790] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 815] setpgid(0, 0 [pid 806] <... mmap resumed>) = 0x20000000 [pid 794] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 816] <... prctl resumed>) = 0 [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 799] <... write resumed>) = 9 [pid 806] <... futex resumed>) = 1 [pid 799] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] <... mmap resumed>) = 0x7f70edc9c000 [pid 790] <... futex resumed>) = 0 [pid 816] setpgid(0, 0 [pid 815] <... setpgid resumed>) = 0 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 799] <... futex resumed>) = 0 [pid 794] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 790] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... setpgid resumed>) = 0 [pid 815] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 806] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 799] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] <... mprotect resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 816] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 815] <... openat resumed>) = 3 [pid 806] write(4, 0x20000f80, 9 [pid 794] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 790] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] write(3, "1000", 4) = 4 [pid 815] close(3 [pid 790] <... futex resumed>) = 0 [pid 815] <... close resumed>) = 0 [pid 806] <... write resumed>) = 9 [pid 794] <... clone resumed>, parent_tid=[818], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 818 [pid 790] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 816] <... openat resumed>) = 3 [pid 815] symlink("/dev/binderfs", "./binderfs" [pid 806] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 794] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] write(3, "1000", 4 [pid 815] <... symlink resumed>) = 0 [pid 806] <... futex resumed>) = 0 [pid 794] <... futex resumed>) = 0 [pid 790] <... mmap resumed>) = 0x7f70edc9c000 [pid 816] <... write resumed>) = 4 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 806] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 794] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 790] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 816] close(3 [pid 815] <... futex resumed>) = 0 [pid 815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 790] <... mprotect resumed>) = 0 [pid 815] <... mmap resumed>) = 0x7f70f5fbd000 [pid 815] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 790] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 816] <... close resumed>) = 0 [pid 815] <... mprotect resumed>) = 0 [pid 815] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 816] symlink("/dev/binderfs", "./binderfs" [pid 815] <... clone resumed>, parent_tid=[820], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 820 [pid 790] <... clone resumed>, parent_tid=[819], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 819 [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 790] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... symlink resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 790] <... futex resumed>) = 0 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 790] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 818 attached [pid 816] <... futex resumed>) = 0 [pid 818] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 820 attached ./strace-static-x86_64: Process 819 attached ./strace-static-x86_64: Process 817 attached [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 819] set_robust_list(0x7f70edcbc9e0, 24 [pid 817] set_robust_list(0x7f70f5fdd9e0, 24 [pid 816] <... mmap resumed>) = 0x7f70f5fbd000 [pid 820] set_robust_list(0x7f70f5fdd9e0, 24 [pid 819] <... set_robust_list resumed>) = 0 [pid 817] <... set_robust_list resumed>) = 0 [ 24.453235][ T809] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.487421][ T818] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 816] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 818] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 816] <... mprotect resumed>) = 0 [pid 820] <... set_robust_list resumed>) = 0 [pid 820] memfd_create("syzkaller", 0) = 3 [pid 820] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 820] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 820] munmap(0x7f70edbbd000, 1048576) = 0 [pid 820] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 817] memfd_create("syzkaller", 0) = 3 [pid 817] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 799] <... futex resumed>) = ? [pid 794] <... futex resumed>) = ? [pid 816] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 799] +++ killed by SIGBUS +++ [pid 818] +++ killed by SIGBUS +++ [pid 794] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=794, si_uid=0, si_status=SIGBUS, si_utime=1, si_stime=1} --- [pid 819] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 374] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 806] <... futex resumed>) = ? [pid 790] <... futex resumed>) = ? [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, [pid 816] <... clone resumed>, parent_tid=[821], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 821 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 816] <... futex resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./11/binderfs", [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./11/binderfs") = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 806] +++ killed by SIGBUS +++ [pid 817] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 821 attached [pid 819] +++ killed by SIGBUS +++ [pid 790] +++ killed by SIGBUS +++ [pid 821] set_robust_list(0x7f70f5fdd9e0, 24 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=790, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] restart_syscall(<... resuming interrupted clone ...> [pid 821] <... set_robust_list resumed>) = 0 [pid 821] memfd_create("syzkaller", 0) = 3 [pid 376] <... restart_syscall resumed>) = 0 [pid 821] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 376] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./12/binderfs") = 0 [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 820] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = 0 [pid 820] ioctl(4, LOOP_SET_FD, 3 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 817] <... write resumed>) = 1048576 [pid 372] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 817] munmap(0x7f70edbbd000, 1048576 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./11/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./11") = 0 [pid 372] mkdir("./12", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 817] <... munmap resumed>) = 0 [pid 817] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 821] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 821] munmap(0x7f70edbbd000, 1048576) = 0 [ 24.490107][ T819] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 821] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 374] <... umount2 resumed>) = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./11/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./11") = 0 [pid 374] mkdir("./12", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 820] <... ioctl resumed>) = 0 [pid 817] <... openat resumed>) = 4 [pid 372] <... openat resumed>) = 3 [pid 821] <... openat resumed>) = 4 [pid 817] ioctl(4, LOOP_SET_FD, 3 [pid 376] <... umount2 resumed>) = 0 [pid 372] ioctl(3, LOOP_CLR_FD [pid 821] ioctl(4, LOOP_SET_FD, 3 [pid 820] close(3 [pid 817] <... ioctl resumed>) = 0 [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... openat resumed>) = 3 [pid 820] <... close resumed>) = 0 [pid 817] close(3 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 821] <... ioctl resumed>) = 0 [pid 820] mkdir("./file0", 0777 [pid 817] <... close resumed>) = 0 [pid 376] lstat("./12/file0", [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 821] close(3 [pid 820] <... mkdir resumed>) = 0 [pid 817] mkdir("./file0", 0777 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] close(3 [pid 372] close(3 [pid 821] <... close resumed>) = 0 [pid 820] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... close resumed>) = 0 [pid 817] <... mkdir resumed>) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 821] mkdir("./file0", 0777 [pid 817] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 825 [pid 821] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 821] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... openat resumed>) = 4 ./strace-static-x86_64: Process 825 attached [pid 376] fstat(4, [pid 825] set_robust_list(0x5555569495e0, 24 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 827 [pid 376] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./12/file0" [pid 825] <... set_robust_list resumed>) = 0 [pid 376] <... rmdir resumed>) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./12") = 0 [pid 376] mkdir("./13", 0777 [pid 825] chdir("./12" [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 825] <... chdir resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 825] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 825] <... prctl resumed>) = 0 [pid 376] close(3 [pid 825] setpgid(0, 0) = 0 [pid 376] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 825] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 825] write(3, "1000", 4) = 4 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 829 [pid 825] close(3) = 0 [pid 825] symlink("/dev/binderfs", "./binderfs") = 0 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 825] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 827 attached ) = 0 [pid 827] set_robust_list(0x5555569495e0, 24 [pid 825] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 827] <... set_robust_list resumed>) = 0 [pid 827] chdir("./12" [pid 825] <... clone resumed>, parent_tid=[830], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 830 [pid 827] <... chdir resumed>) = 0 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 825] <... futex resumed>) = 0 [pid 827] <... prctl resumed>) = 0 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] <... mount resumed>) = 0 [pid 827] setpgid(0, 0 [pid 820] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 820] chdir("./file0" [pid 827] <... setpgid resumed>) = 0 [pid 820] <... chdir resumed>) = 0 ./strace-static-x86_64: Process 829 attached [pid 827] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 820] ioctl(4, LOOP_CLR_FD [pid 829] set_robust_list(0x5555569495e0, 24 [pid 827] <... openat resumed>) = 3 [pid 820] <... ioctl resumed>) = 0 [pid 829] <... set_robust_list resumed>) = 0 [pid 827] write(3, "1000", 4 [pid 820] close(4 [pid 829] chdir("./13" [pid 827] <... write resumed>) = 4 [pid 820] <... close resumed>) = 0 [pid 829] <... chdir resumed>) = 0 [pid 827] close(3 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 827] <... close resumed>) = 0 [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 820] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] <... prctl resumed>) = 0 [pid 827] symlink("/dev/binderfs", "./binderfs" [pid 829] setpgid(0, 0 [pid 827] <... symlink resumed>) = 0 [pid 820] <... open resumed>) = 4 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 830 attached [pid 829] <... setpgid resumed>) = 0 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 830] set_robust_list(0x7f70f5fdd9e0, 24 [pid 829] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 827] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... set_robust_list resumed>) = 0 [pid 829] <... openat resumed>) = 3 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 830] memfd_create("syzkaller", 0 [pid 829] write(3, "1000", 4 [pid 827] <... mmap resumed>) = 0x7f70f5fbd000 [pid 820] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 830] <... memfd_create resumed>) = 3 [pid 829] <... write resumed>) = 4 [pid 827] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 830] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 829] close(3 [pid 827] <... mprotect resumed>) = 0 [pid 820] <... write resumed>) = 9 [pid 830] <... mmap resumed>) = 0x7f70edbbd000 [pid 829] <... close resumed>) = 0 [pid 827] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] symlink("/dev/binderfs", "./binderfs" [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 829] <... symlink resumed>) = 0 [pid 827] <... clone resumed>, parent_tid=[833], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 833 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 0 [pid 820] open("./bus", O_RDWR [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] <... open resumed>) = 5 [pid 829] <... mmap resumed>) = 0x7f70f5fbd000 [pid 829] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... mprotect resumed>) = 0 [pid 829] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 820] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = 0 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 833 attached [pid 829] <... clone resumed>, parent_tid=[834], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 834 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 815] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 829] <... futex resumed>) = 0 [pid 820] <... mmap resumed>) = 0x20000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 815] <... futex resumed>) = 0 [pid 833] set_robust_list(0x7f70f5fdd9e0, 24 [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 815] <... futex resumed>) = 0 [pid 820] write(4, 0x20000f80, 9 [pid 815] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... set_robust_list resumed>) = 0 [pid 815] <... futex resumed>) = 0 [pid 820] <... write resumed>) = 9 [pid 815] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 820] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 815] <... mmap resumed>) = 0x7f70edc9c000 [pid 820] <... futex resumed>) = 0 [pid 815] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 820] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 815] <... mprotect resumed>) = 0 [pid 815] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 833] memfd_create("syzkaller", 0 [pid 815] <... clone resumed>, parent_tid=[837], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 837 [pid 815] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 815] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... memfd_create resumed>) = 3 [pid 833] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 837 attached [pid 821] <... mount resumed>) = 0 [pid 817] <... mount resumed>) = 0 [pid 821] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 817] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY./strace-static-x86_64: Process 834 attached [pid 837] set_robust_list(0x7f70edcbc9e0, 24 [pid 833] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] <... openat resumed>) = 3 [pid 817] <... openat resumed>) = 3 [pid 830] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] chdir("./file0" [pid 817] chdir("./file0" [pid 821] <... chdir resumed>) = 0 [pid 817] <... chdir resumed>) = 0 [pid 821] ioctl(4, LOOP_CLR_FD [pid 817] ioctl(4, LOOP_CLR_FD [pid 837] <... set_robust_list resumed>) = 0 [pid 834] set_robust_list(0x7f70f5fdd9e0, 24 [pid 821] <... ioctl resumed>) = 0 [pid 817] <... ioctl resumed>) = 0 [pid 821] close(4 [pid 817] close(4 [pid 821] <... close resumed>) = 0 [pid 817] <... close resumed>) = 0 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 817] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... write resumed>) = 1048576 [pid 833] munmap(0x7f70edbbd000, 1048576) = 0 [pid 833] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 833] ioctl(4, LOOP_SET_FD, 3 [pid 834] <... set_robust_list resumed>) = 0 [pid 834] memfd_create("syzkaller", 0) = 3 [pid 834] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 837] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 821] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 817] <... open resumed>) = 4 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] <... futex resumed>) = ? [pid 817] <... futex resumed>) = 1 [pid 815] <... futex resumed>) = ? [pid 811] <... futex resumed>) = 0 [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 811] <... futex resumed>) = 0 [pid 821] <... open resumed>) = 4 [pid 817] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 820] +++ killed by SIGBUS +++ [pid 821] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 821] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... write resumed>) = 9 [pid 816] <... futex resumed>) = 0 [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... write resumed>) = 9 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] <... futex resumed>) = 1 [pid 811] <... futex resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] open("./bus", O_RDWR [pid 817] open("./bus", O_RDWR [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 821] <... open resumed>) = 5 [pid 817] <... open resumed>) = 5 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 837] +++ killed by SIGBUS +++ [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 815] +++ killed by SIGBUS +++ [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=815, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 821] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 817] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 816] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 821] <... mmap resumed>) = 0x20000000 [pid 817] <... mmap resumed>) = 0x20000000 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... restart_syscall resumed>) = 0 [pid 821] <... futex resumed>) = 1 [pid 817] <... futex resumed>) = 1 [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 816] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 821] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 817] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] write(4, 0x20000f80, 9 [pid 817] write(4, 0x20000f80, 9 [pid 816] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 821] <... write resumed>) = 9 [pid 817] <... write resumed>) = 9 [pid 816] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 811] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 830] <... write resumed>) = 1048576 [pid 821] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 817] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 816] <... mmap resumed>) = 0x7f70edc9c000 [pid 811] <... mmap resumed>) = 0x7f70edc9c000 [pid 373] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 834] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 821] <... futex resumed>) = 0 [pid 817] <... futex resumed>) = 0 [pid 816] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 811] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 816] <... mprotect resumed>) = 0 [pid 811] <... mprotect resumed>) = 0 [pid 816] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 811] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 821] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 817] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] <... openat resumed>) = 3 [pid 830] munmap(0x7f70edbbd000, 1048576 [pid 816] <... clone resumed>, parent_tid=[839], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 839 [pid 811] <... clone resumed>, parent_tid=[840], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 840 [pid 373] fstat(3, ./strace-static-x86_64: Process 840 attached [pid 830] <... munmap resumed>) = 0 [pid 816] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 811] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 830] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 816] <... futex resumed>) = 0 [pid 811] <... futex resumed>) = 0 [pid 373] getdents64(3, [pid 816] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 811] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 840] set_robust_list(0x7f70edcbc9e0, 24 [pid 373] umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 839 attached [pid 840] <... set_robust_list resumed>) = 0 [pid 834] <... write resumed>) = 1048576 [pid 833] <... ioctl resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 833] close(3 [pid 830] <... openat resumed>) = 4 [pid 833] <... close resumed>) = 0 [pid 830] ioctl(4, LOOP_SET_FD, 3 [pid 833] mkdir("./file0", 0777) = 0 [pid 833] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 839] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 840] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] munmap(0x7f70edbbd000, 1048576 [pid 373] lstat("./11/binderfs", [pid 834] <... munmap resumed>) = 0 [ 24.659688][ T837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.694413][ T840] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 817] <... futex resumed>) = ? [pid 811] <... futex resumed>) = ? [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 834] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 817] +++ killed by SIGBUS +++ [pid 373] unlink("./11/binderfs" [pid 840] +++ killed by SIGBUS +++ [pid 811] +++ killed by SIGBUS +++ [pid 373] <... unlink resumed>) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=811, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 377] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./12/binderfs") = 0 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 830] <... ioctl resumed>) = 0 [pid 830] close(3) = 0 [pid 830] mkdir("./file0", 0777) = 0 [pid 830] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 839] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] <... openat resumed>) = 4 [pid 834] ioctl(4, LOOP_SET_FD, 3 [pid 821] <... futex resumed>) = ? [pid 816] <... futex resumed>) = ? [pid 834] <... ioctl resumed>) = 0 [pid 834] close(3) = 0 [pid 834] mkdir("./file0", 0777) = 0 [pid 834] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 821] +++ killed by SIGBUS +++ [pid 839] +++ killed by SIGBUS +++ [pid 816] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=816, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 830] <... mount resumed>) = 0 [pid 830] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 375] <... restart_syscall resumed>) = 0 [pid 830] <... openat resumed>) = 3 [pid 375] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 830] chdir("./file0" [pid 375] <... openat resumed>) = 3 [pid 830] <... chdir resumed>) = 0 [pid 375] fstat(3, [pid 830] ioctl(4, LOOP_CLR_FD [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./12/binderfs") = 0 [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 833] <... mount resumed>) = 0 [pid 833] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 833] chdir("./file0") = 0 [pid 833] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [ 24.708625][ T839] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./11/file0") = 0 [pid 373] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./11") = 0 [pid 373] mkdir("./12", 0777) = 0 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 834] <... mount resumed>) = 0 [pid 834] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 834] chdir("./file0") = 0 [pid 834] ioctl(4, LOOP_CLR_FD [pid 830] <... ioctl resumed>) = 0 [pid 830] close(4 [pid 833] <... ioctl resumed>) = 0 [pid 833] close(4) = 0 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 827] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 833] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] <... openat resumed>) = 3 [pid 834] <... ioctl resumed>) = 0 [pid 833] <... open resumed>) = 4 [pid 830] <... close resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 373] ioctl(3, LOOP_CLR_FD [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 830] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] close(4 [pid 833] <... write resumed>) = 9 [pid 830] <... open resumed>) = 4 [pid 377] <... umount2 resumed>) = 0 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] open("./bus", O_RDWR [pid 830] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... close resumed>) = 0 [pid 833] <... open resumed>) = 5 [pid 830] <... write resumed>) = 9 [pid 373] close(3 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 830] open("./bus", O_RDWR [pid 827] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 833] <... mmap resumed>) = 0x20000000 [pid 830] <... open resumed>) = 5 [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = 1 [pid 830] <... futex resumed>) = 1 [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 833] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... futex resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 833] write(4, 0x20000f80, 9 [pid 830] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 827] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 834] <... futex resumed>) = 1 [pid 833] <... write resumed>) = 9 [pid 830] <... mmap resumed>) = 0x20000000 [pid 829] <... futex resumed>) = 0 [pid 827] <... futex resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 833] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 833] <... futex resumed>) = 0 [pid 830] <... futex resumed>) = 1 [pid 827] <... mmap resumed>) = 0x7f70edc9c000 [pid 825] <... futex resumed>) = 0 [pid 833] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 825] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 827] <... mprotect resumed>) = 0 [pid 825] <... futex resumed>) = 0 [pid 830] write(4, 0x20000f80, 9 [pid 827] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 825] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... write resumed>) = 9 [pid 825] <... futex resumed>) = 0 [pid 830] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 827] <... clone resumed>, parent_tid=[849], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 849 [pid 825] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 830] <... futex resumed>) = 0 [pid 827] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 825] <... mmap resumed>) = 0x7f70edc9c000 [pid 830] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 827] <... futex resumed>) = 0 [pid 825] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 827] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 825] <... mprotect resumed>) = 0 [pid 825] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[850], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 850 [pid 825] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 825] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 850 attached [pid 850] set_robust_list(0x7f70edcbc9e0, 24) = 0 ./strace-static-x86_64: Process 849 attached [pid 834] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 834] <... open resumed>) = 4 [pid 829] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 851 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] lstat("./12/file0", [pid 375] lstat("./12/file0", [pid 834] <... futex resumed>) = 0 [pid 829] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 834] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 851 attached [pid 850] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] <... write resumed>) = 9 [pid 377] <... openat resumed>) = 4 [pid 375] <... openat resumed>) = 4 [pid 851] set_robust_list(0x5555569495e0, 24 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 830] <... futex resumed>) = ? [pid 825] <... futex resumed>) = ? [pid 377] fstat(4, [pid 375] fstat(4, [pid 851] <... set_robust_list resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 830] +++ killed by SIGBUS +++ [pid 829] <... futex resumed>) = 0 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 851] chdir("./12" [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 851] <... chdir resumed>) = 0 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 851] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 834] open("./bus", O_RDWR [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(4, [pid 375] getdents64(4, [pid 851] <... prctl resumed>) = 0 [pid 834] <... open resumed>) = 5 [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 851] setpgid(0, 0 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(4 [pid 375] close(4 [pid 851] <... setpgid resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 829] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 851] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] rmdir("./12/file0" [pid 375] rmdir("./12/file0" [pid 851] <... openat resumed>) = 3 [pid 850] +++ killed by SIGBUS +++ [pid 849] set_robust_list(0x7f70edcbc9e0, 24 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] <... futex resumed>) = 0 [pid 825] +++ killed by SIGBUS +++ [pid 377] <... rmdir resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 851] write(3, "1000", 4 [pid 849] <... set_robust_list resumed>) = 0 [pid 834] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 829] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] getdents64(3, [pid 375] getdents64(3, [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=825, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 851] <... write resumed>) = 4 [pid 834] <... mmap resumed>) = 0x20000000 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 851] close(3) = 0 [pid 851] symlink("/dev/binderfs", "./binderfs") = 0 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 851] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[852], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 852 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 852 attached [pid 852] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 852] memfd_create("syzkaller", 0) = 3 [pid 852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 852] munmap(0x7f70edbbd000, 1048576) = 0 [pid 852] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4 [pid 852] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 849] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] close(3 [pid 375] close(3 [pid 852] <... ioctl resumed>) = 0 [pid 834] <... futex resumed>) = 1 [pid 377] <... close resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] rmdir("./12" [pid 852] close(3 [pid 834] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 829] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./12" [pid 377] <... rmdir resumed>) = 0 [pid 834] write(4, 0x20000f80, 9 [pid 829] <... futex resumed>) = 0 [pid 829] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... rmdir resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 829] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 834] <... write resumed>) = 9 [pid 375] mkdir("./13", 0777 [pid 834] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 829] <... mmap resumed>) = 0x7f70edc9c000 [pid 377] mkdir("./13", 0777 [pid 834] <... futex resumed>) = 0 [pid 829] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... mkdir resumed>) = 0 [pid 374] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 377] <... mkdir resumed>) = 0 [pid 829] <... mprotect resumed>) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 834] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 829] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 377] <... openat resumed>) = 3 [pid 374] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 829] <... clone resumed>, parent_tid=[854], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 854 [pid 375] <... openat resumed>) = 3 [pid 829] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD [pid 375] ioctl(3, LOOP_CLR_FD [pid 852] <... close resumed>) = 0 [pid 829] <... futex resumed>) = 0 [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] fstat(3, [pid 852] mkdir("./file0", 0777 [pid 829] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] close(3 [pid 375] close(3 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 852] <... mkdir resumed>) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] <... close resumed>) = 0 [pid 374] lstat("./12/binderfs", [pid 852] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 375] <... close resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 855 [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 856 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./12/binderfs") = 0 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 833] <... futex resumed>) = ? [pid 827] <... futex resumed>) = ? [pid 833] +++ killed by SIGBUS +++ [pid 849] +++ killed by SIGBUS +++ [pid 827] +++ killed by SIGBUS +++ [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=827, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 372] restart_syscall(<... resuming interrupted clone ...>./strace-static-x86_64: Process 854 attached [pid 854] set_robust_list(0x7f70edcbc9e0, 24 [pid 372] <... restart_syscall resumed>) = 0 [pid 372] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./12/binderfs") = 0 [ 24.857394][ T850] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.877668][ T849] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 854] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 856 attached ./strace-static-x86_64: Process 855 attached [pid 856] set_robust_list(0x5555569495e0, 24 [pid 855] set_robust_list(0x5555569495e0, 24 [pid 854] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 856] <... set_robust_list resumed>) = 0 [pid 855] <... set_robust_list resumed>) = 0 [pid 834] <... futex resumed>) = ? [pid 829] <... futex resumed>) = ? [pid 852] <... mount resumed>) = 0 [pid 834] +++ killed by SIGBUS +++ [pid 855] chdir("./13" [pid 856] chdir("./13" [pid 855] <... chdir resumed>) = 0 [pid 856] <... chdir resumed>) = 0 [pid 856] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 855] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 852] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 856] <... prctl resumed>) = 0 [pid 855] <... prctl resumed>) = 0 [pid 852] <... openat resumed>) = 3 [pid 856] setpgid(0, 0 [pid 855] setpgid(0, 0 [pid 852] chdir("./file0" [pid 856] <... setpgid resumed>) = 0 [pid 855] <... setpgid resumed>) = 0 [pid 854] +++ killed by SIGBUS +++ [pid 829] +++ killed by SIGBUS +++ [pid 852] <... chdir resumed>) = 0 [pid 852] ioctl(4, LOOP_CLR_FD [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=829, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 856] <... openat resumed>) = 3 [pid 856] write(3, "1000", 4 [pid 855] <... openat resumed>) = 3 [pid 856] <... write resumed>) = 4 [pid 856] close(3 [pid 855] write(3, "1000", 4 [pid 376] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... close resumed>) = 0 [pid 856] symlink("/dev/binderfs", "./binderfs" [pid 855] <... write resumed>) = 4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] <... symlink resumed>) = 0 [pid 855] close(3 [pid 376] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 855] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 855] symlink("/dev/binderfs", "./binderfs" [pid 376] fstat(3, [pid 856] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... symlink resumed>) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 856] <... futex resumed>) = 0 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(3, [pid 855] <... futex resumed>) = 0 [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 376] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 855] <... mmap resumed>) = 0x7f70f5fbd000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 855] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 376] lstat("./13/binderfs", [pid 855] <... mprotect resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 855] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] unlink("./13/binderfs") = 0 [pid 855] <... clone resumed>, parent_tid=[859], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 859 [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 859 attached [pid 859] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 859] memfd_create("syzkaller", 0) = 3 [pid 859] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 374] <... umount2 resumed>) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... mmap resumed>) = 0x7f70f5fbd000 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 856] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 374] lstat("./12/file0", [pid 856] <... mprotect resumed>) = 0 [pid 856] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 856] <... clone resumed>, parent_tid=[860], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 860 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 ./strace-static-x86_64: Process 860 attached [pid 860] set_robust_list(0x7f70f5fdd9e0, 24 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 860] <... set_robust_list resumed>) = 0 [pid 374] getdents64(4, [pid 860] memfd_create("syzkaller", 0 [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 860] <... memfd_create resumed>) = 3 [pid 374] close(4 [pid 860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 374] <... close resumed>) = 0 [pid 860] <... mmap resumed>) = 0x7f70edbbd000 [pid 374] rmdir("./12/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 374] rmdir("./12") = 0 [pid 374] mkdir("./13", 0777) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 859] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 859] <... write resumed>) = 1048576 [pid 859] munmap(0x7f70edbbd000, 1048576) = 0 [pid 859] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 860] <... write resumed>) = 1048576 [pid 860] munmap(0x7f70edbbd000, 1048576) = 0 [pid 860] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 852] <... ioctl resumed>) = 0 [ 24.910493][ T854] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 852] close(4 [pid 860] <... openat resumed>) = 4 [pid 859] <... openat resumed>) = 4 [pid 852] <... close resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 852] <... futex resumed>) = 1 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 851] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 852] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 374] close(3 [pid 372] lstat("./12/file0", [pid 374] <... close resumed>) = 0 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 861 [pid 372] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 372] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] close(4) = 0 [pid 372] rmdir("./12/file0") = 0 [pid 372] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./12") = 0 [pid 372] mkdir("./13", 0777) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 [pid 372] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 862 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = 1 [pid 860] ioctl(4, LOOP_SET_FD, 3 [pid 852] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 852] <... open resumed>) = 4 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 851] <... futex resumed>) = 0 [pid 852] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 851] <... futex resumed>) = 0 [pid 852] <... write resumed>) = 9 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] lstat("./13/file0", [pid 852] <... futex resumed>) = 0 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 860] <... ioctl resumed>) = 0 [pid 852] open("./bus", O_RDWR [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 860] close(3 [pid 851] <... futex resumed>) = 0 [pid 860] <... close resumed>) = 0 [pid 852] <... open resumed>) = 5 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] <... futex resumed>) = 0 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 852] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 851] <... futex resumed>) = 0 [pid 860] mkdir("./file0", 0777 [pid 852] <... mmap resumed>) = 0x20000000 [pid 851] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 376] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 851] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 852] <... futex resumed>) = 0 [pid 851] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... mkdir resumed>) = 0 [pid 852] write(4, 0x20000f80, 9 [pid 860] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 851] <... futex resumed>) = 0 [pid 376] <... openat resumed>) = 4 [pid 851] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 852] <... write resumed>) = 9 [pid 851] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 852] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] fstat(4, [pid 852] <... futex resumed>) = 0 [pid 851] <... mmap resumed>) = 0x7f70edc9c000 [pid 852] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 851] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 851] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 851] <... clone resumed>, parent_tid=[864], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 864 [pid 851] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] getdents64(4, [pid 851] <... futex resumed>) = 0 ./strace-static-x86_64: Process 864 attached [pid 851] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 864] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 ./strace-static-x86_64: Process 862 attached ./strace-static-x86_64: Process 861 attached [pid 859] ioctl(4, LOOP_SET_FD, 3 [pid 376] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] close(4) = 0 [pid 376] rmdir("./13/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./13") = 0 [pid 376] mkdir("./14", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 861] set_robust_list(0x5555569495e0, 24 [pid 862] set_robust_list(0x5555569495e0, 24) = 0 [pid 861] <... set_robust_list resumed>) = 0 [pid 862] chdir("./13" [pid 861] chdir("./13" [pid 862] <... chdir resumed>) = 0 [pid 861] <... chdir resumed>) = 0 [pid 862] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 861] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 862] <... prctl resumed>) = 0 [pid 861] <... prctl resumed>) = 0 [pid 862] setpgid(0, 0 [pid 861] setpgid(0, 0 [pid 862] <... setpgid resumed>) = 0 [pid 862] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 861] <... setpgid resumed>) = 0 [pid 862] <... openat resumed>) = 3 [pid 861] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 862] write(3, "1000", 4 [pid 861] <... openat resumed>) = 3 [pid 862] <... write resumed>) = 4 [pid 861] write(3, "1000", 4 [pid 862] close(3 [pid 861] <... write resumed>) = 4 [pid 862] <... close resumed>) = 0 [pid 861] close(3 [pid 862] symlink("/dev/binderfs", "./binderfs" [pid 861] <... close resumed>) = 0 [pid 862] <... symlink resumed>) = 0 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] symlink("/dev/binderfs", "./binderfs" [pid 862] <... futex resumed>) = 0 [pid 861] <... symlink resumed>) = 0 [pid 862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 864] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 862] <... mmap resumed>) = 0x7f70f5fbd000 [pid 861] <... futex resumed>) = 0 [pid 862] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 852] <... futex resumed>) = ? [pid 851] <... futex resumed>) = ? [pid 862] <... mprotect resumed>) = 0 [pid 861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 862] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 852] +++ killed by SIGBUS +++ [pid 861] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 866 attached [pid 864] +++ killed by SIGBUS +++ [pid 861] <... mprotect resumed>) = 0 [pid 859] <... ioctl resumed>) = 0 [pid 851] +++ killed by SIGBUS +++ [pid 376] <... openat resumed>) = 3 [pid 866] set_robust_list(0x7f70f5fdd9e0, 24 [pid 862] <... clone resumed>, parent_tid=[866], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 866 [pid 861] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 860] <... mount resumed>) = 0 [pid 859] close(3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 859] <... close resumed>) = 0 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 861] <... clone resumed>, parent_tid=[869], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 869 [pid 859] mkdir("./file0", 0777 [pid 376] close(3 [pid 866] <... set_robust_list resumed>) = 0 [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 859] <... mkdir resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=851, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 861] <... futex resumed>) = 0 [pid 859] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 870 attached [pid 866] memfd_create("syzkaller", 0 [pid 862] <... futex resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 860] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 870 ./strace-static-x86_64: Process 869 attached [pid 869] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 869] memfd_create("syzkaller", 0) = 3 [pid 869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 866] <... memfd_create resumed>) = 3 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 860] chdir("./file0" [pid 866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 860] <... chdir resumed>) = 0 [pid 373] umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW [pid 866] <... mmap resumed>) = 0x7f70edbbd000 [pid 860] ioctl(4, LOOP_CLR_FD [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 860] <... ioctl resumed>) = 0 [pid 373] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 373] <... openat resumed>) = 3 [pid 860] close(4 [pid 869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 860] <... close resumed>) = 0 [pid 373] fstat(3, [pid 870] set_robust_list(0x5555569495e0, 24 [pid 866] <... write resumed>) = 1048576 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 860] <... futex resumed>) = 1 [pid 373] getdents64(3, [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... futex resumed>) = 0 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 860] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 860] <... open resumed>) = 4 [pid 373] lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 870] <... set_robust_list resumed>) = 0 [pid 866] munmap(0x7f70edbbd000, 1048576 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] unlink("./12/binderfs") = 0 [pid 860] <... futex resumed>) = 1 [pid 856] <... futex resumed>) = 0 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 860] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... write resumed>) = 9 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] <... futex resumed>) = 0 [pid 860] open("./bus", O_RDWR [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... open resumed>) = 5 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... futex resumed>) = 0 [pid 856] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 860] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 856] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 860] <... mmap resumed>) = 0x20000000 [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 856] <... futex resumed>) = 0 [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 860] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 856] <... futex resumed>) = 0 [pid 856] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 860] write(4, 0x20000f80, 9 [pid 856] <... mmap resumed>) = 0x7f70edc9c000 [pid 856] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 860] <... write resumed>) = 9 [pid 856] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 860] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 860] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 856] <... clone resumed>, parent_tid=[873], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 873 [pid 856] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 856] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... write resumed>) = 1048576 [pid 869] munmap(0x7f70edbbd000, 1048576) = 0 [pid 869] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 869] ioctl(4, LOOP_SET_FD, 3 [pid 870] chdir("./14") = 0 [pid 866] <... munmap resumed>) = 0 [pid 870] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 866] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 859] <... mount resumed>) = 0 [pid 859] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 859] chdir("./file0") = 0 [pid 859] ioctl(4, LOOP_CLR_FD./strace-static-x86_64: Process 873 attached [pid 873] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 25.026534][ T864] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 870] <... prctl resumed>) = 0 [pid 873] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 870] setpgid(0, 0) = 0 [pid 860] <... futex resumed>) = ? [pid 856] <... futex resumed>) = ? [pid 870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 860] +++ killed by SIGBUS +++ [pid 870] <... openat resumed>) = 3 [pid 870] write(3, "1000", 4) = 4 [pid 869] <... ioctl resumed>) = 0 [pid 870] close(3 [pid 869] close(3 [pid 870] <... close resumed>) = 0 [pid 870] symlink("/dev/binderfs", "./binderfs" [pid 869] <... close resumed>) = 0 [pid 873] +++ killed by SIGBUS +++ [pid 856] +++ killed by SIGBUS +++ [pid 870] <... symlink resumed>) = 0 [pid 869] mkdir("./file0", 0777 [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=856, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 870] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] <... mkdir resumed>) = 0 [pid 870] <... futex resumed>) = 0 [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 869] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 870] <... mmap resumed>) = 0x7f70f5fbd000 [pid 870] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] <... restart_syscall resumed>) = 0 [pid 870] <... mprotect resumed>) = 0 [pid 375] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 870] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 875 attached ) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./13/binderfs" [pid 875] set_robust_list(0x7f70f5fdd9e0, 24 [pid 870] <... clone resumed>, parent_tid=[875], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 875 [pid 375] <... unlink resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 870] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 875] <... set_robust_list resumed>) = 0 [pid 875] memfd_create("syzkaller", 0) = 3 [pid 875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 875] munmap(0x7f70edbbd000, 1048576) = 0 [pid 875] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 859] <... ioctl resumed>) = 0 [pid 866] <... openat resumed>) = 4 [pid 859] close(4 [ 25.077241][ T873] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 866] ioctl(4, LOOP_SET_FD, 3 [pid 875] <... openat resumed>) = 4 [pid 373] <... umount2 resumed>) = 0 [pid 875] ioctl(4, LOOP_SET_FD, 3 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... ioctl resumed>) = 0 [pid 859] <... close resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] close(3 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] lstat("./12/file0", [pid 875] <... close resumed>) = 0 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 875] mkdir("./file0", 0777 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... mkdir resumed>) = 0 [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 859] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 859] <... open resumed>) = 4 [pid 373] <... openat resumed>) = 4 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] fstat(4, [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] getdents64(4, [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 859] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(4, [pid 859] <... write resumed>) = 9 [pid 373] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(4 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./12/file0" [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 859] open("./bus", O_RDWR [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] getdents64(3, [pid 859] <... open resumed>) = 5 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] close(3 [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 373] <... close resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] rmdir("./12" [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 859] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 855] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 373] mkdir("./13", 0777 [pid 859] <... mmap resumed>) = 0x20000000 [pid 373] <... mkdir resumed>) = 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 859] <... futex resumed>) = 1 [pid 855] <... futex resumed>) = 0 [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 855] <... futex resumed>) = 0 [pid 859] write(4, 0x20000f80, 9 [pid 855] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 859] <... write resumed>) = 9 [pid 855] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 859] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 855] <... mmap resumed>) = 0x7f70edc9c000 [pid 859] <... futex resumed>) = 0 [pid 855] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 859] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 855] <... mprotect resumed>) = 0 [pid 855] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[879], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 879 [pid 855] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 879 attached ) = 0 [pid 855] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 879] set_robust_list(0x7f70edcbc9e0, 24 [pid 869] <... mount resumed>) = 0 [pid 866] <... ioctl resumed>) = 0 [pid 869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 869] chdir("./file0") = 0 [pid 869] ioctl(4, LOOP_CLR_FD) = 0 [pid 869] close(4 [pid 879] <... set_robust_list resumed>) = 0 [pid 869] <... close resumed>) = 0 [pid 866] close(3 [pid 375] <... umount2 resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] ioctl(3, LOOP_CLR_FD [pid 869] <... futex resumed>) = 1 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 881 [pid 866] <... close resumed>) = 0 [pid 861] <... futex resumed>) = 0 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 866] mkdir("./file0", 0777 [pid 861] <... futex resumed>) = 1 [pid 866] <... mkdir resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 866] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 869] <... futex resumed>) = 0 [pid 375] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 869] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 375] <... openat resumed>) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, [pid 869] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] getdents64(4, [pid 869] <... futex resumed>) = 1 [pid 861] <... futex resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 869] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 375] close(4 [pid 861] <... futex resumed>) = 0 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... close resumed>) = 0 [pid 869] <... write resumed>) = 9 [pid 375] rmdir("./13/file0" [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 881 attached [pid 881] set_robust_list(0x5555569495e0, 24) = 0 [pid 881] chdir("./13") = 0 [pid 881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 881] setpgid(0, 0 [pid 375] <... rmdir resumed>) = 0 [pid 375] getdents64(3, [pid 869] <... futex resumed>) = 1 [pid 861] <... futex resumed>) = 0 [pid 869] open("./bus", O_RDWR [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 881] <... setpgid resumed>) = 0 [pid 881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 881] write(3, "1000", 4) = 4 [pid 881] close(3) = 0 [pid 861] <... futex resumed>) = 0 [pid 881] symlink("/dev/binderfs", "./binderfs" [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 869] <... open resumed>) = 5 [pid 375] close(3 [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... close resumed>) = 0 [pid 869] <... futex resumed>) = 1 [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 861] <... futex resumed>) = 0 [pid 375] rmdir("./13" [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... symlink resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 869] <... futex resumed>) = 0 [pid 861] <... futex resumed>) = 1 [pid 869] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 875] <... mount resumed>) = 0 [pid 869] <... mmap resumed>) = 0x20000000 [pid 861] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 375] mkdir("./14", 0777 [pid 879] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 875] <... openat resumed>) = 3 [pid 869] <... futex resumed>) = 0 [pid 866] <... mount resumed>) = 0 [pid 861] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... mkdir resumed>) = 0 [pid 875] chdir("./file0" [pid 869] write(4, 0x20000f80, 9 [pid 866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 861] <... futex resumed>) = 0 [pid 859] <... futex resumed>) = ? [pid 855] <... futex resumed>) = ? [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 881] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 875] <... chdir resumed>) = 0 [pid 869] <... write resumed>) = 9 [pid 866] <... openat resumed>) = 3 [pid 861] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 859] +++ killed by SIGBUS +++ [pid 375] <... openat resumed>) = 3 [pid 881] <... futex resumed>) = 0 [pid 879] +++ killed by SIGBUS +++ [pid 875] ioctl(4, LOOP_CLR_FD [pid 869] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] chdir("./file0" [pid 861] <... futex resumed>) = 0 [pid 855] +++ killed by SIGBUS +++ [pid 375] ioctl(3, LOOP_CLR_FD [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 875] <... ioctl resumed>) = 0 [pid 869] <... futex resumed>) = 0 [pid 866] <... chdir resumed>) = 0 [pid 861] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=855, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 875] close(4 [pid 869] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 866] ioctl(4, LOOP_CLR_FD [pid 861] <... mmap resumed>) = 0x7f70edc9c000 [pid 375] close(3 [pid 881] <... mmap resumed>) = 0x7f70f5fbd000 [pid 875] <... close resumed>) = 0 [pid 866] <... ioctl resumed>) = 0 [pid 861] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 375] <... close resumed>) = 0 [pid 881] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] close(4 [pid 861] <... mprotect resumed>) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 881] <... mprotect resumed>) = 0 [pid 875] <... futex resumed>) = 1 [pid 870] <... futex resumed>) = 0 [pid 866] <... close resumed>) = 0 [pid 861] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 881] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 886 [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 861] <... clone resumed>, parent_tid=[887], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 887 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 881] <... clone resumed>, parent_tid=[888], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 888 [pid 875] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 861] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 875] <... open resumed>) = 4 [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 861] <... futex resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 861] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] fstat(3, [pid 881] <... futex resumed>) = 0 [pid 875] <... futex resumed>) = 1 [pid 870] <... futex resumed>) = 0 [pid 866] <... open resumed>) = 4 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] getdents64(3, [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 875] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 377] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... write resumed>) = 9 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... write resumed>) = 9 [pid 862] <... futex resumed>) = 0 [pid 377] lstat("./13/binderfs", [pid 875] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 377] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 875] open("./bus", O_RDWR [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 377] unlink("./13/binderfs" [pid 875] <... open resumed>) = 5 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... unlink resumed>) = 0 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 875] <... futex resumed>) = 0 [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] open("./bus", O_RDWR [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 875] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 866] <... open resumed>) = 5 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 870] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 888 attached ./strace-static-x86_64: Process 887 attached ./strace-static-x86_64: Process 886 attached [pid 875] <... futex resumed>) = 0 [pid 870] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 866] <... futex resumed>) = 1 [pid 862] <... futex resumed>) = 0 [pid 888] set_robust_list(0x7f70f5fdd9e0, 24 [pid 887] set_robust_list(0x7f70edcbc9e0, 24 [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 870] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... set_robust_list resumed>) = 0 [pid 887] <... set_robust_list resumed>) = 0 [pid 886] set_robust_list(0x5555569495e0, 24 [pid 875] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 870] <... futex resumed>) = 0 [pid 866] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] <... futex resumed>) = 0 [pid 875] write(4, 0x20000f80, 9 [pid 870] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 862] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] memfd_create("syzkaller", 0 [pid 875] <... write resumed>) = 9 [pid 875] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 25.153942][ T879] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 875] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] <... set_robust_list resumed>) = 0 [pid 886] chdir("./14") = 0 [pid 886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 886] setpgid(0, 0) = 0 [pid 886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 886] write(3, "1000", 4) = 4 [pid 886] close(3) = 0 [pid 886] symlink("/dev/binderfs", "./binderfs") = 0 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 886] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 886] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[889], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 889 [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 870] <... futex resumed>) = 0 [pid 870] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 870] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 870] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[890], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 890 [pid 870] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 870] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 866] <... mmap resumed>) = 0x20000000 [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 862] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 862] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 866] <... futex resumed>) = 0 [pid 862] <... futex resumed>) = 1 [pid 866] write(4, 0x20000f80, 9 [pid 862] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 862] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 862] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[891], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 891 [pid 862] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 862] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... memfd_create resumed>) = 3 [pid 888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 866] <... write resumed>) = 9 ./strace-static-x86_64: Process 891 attached ./strace-static-x86_64: Process 890 attached ./strace-static-x86_64: Process 889 attached [pid 866] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 891] set_robust_list(0x7f70edcbc9e0, 24 [pid 890] set_robust_list(0x7f70edcbc9e0, 24 [pid 889] set_robust_list(0x7f70f5fdd9e0, 24 [pid 866] <... futex resumed>) = 0 [pid 891] <... set_robust_list resumed>) = 0 [pid 890] <... set_robust_list resumed>) = 0 [pid 889] <... set_robust_list resumed>) = 0 [pid 887] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 866] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] <... write resumed>) = 1048576 [pid 888] munmap(0x7f70edbbd000, 1048576) = 0 [pid 888] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 890] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 889] memfd_create("syzkaller", 0 [pid 869] <... futex resumed>) = ? [pid 861] <... futex resumed>) = ? [pid 889] <... memfd_create resumed>) = 3 [pid 889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 869] +++ killed by SIGBUS +++ [pid 891] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 862] <... futex resumed>) = ? [pid 875] <... futex resumed>) = ? [pid 870] <... futex resumed>) = ? [pid 875] +++ killed by SIGBUS +++ [pid 887] +++ killed by SIGBUS +++ [pid 861] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=861, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 866] <... futex resumed>) = ? [pid 889] <... mmap resumed>) = 0x7f70edbbd000 [pid 866] +++ killed by SIGBUS +++ [pid 890] +++ killed by SIGBUS +++ [pid 870] +++ killed by SIGBUS +++ [pid 891] +++ killed by SIGBUS +++ [pid 862] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=870, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 376] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./14/binderfs", [pid 374] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] unlink("./14/binderfs" [pid 374] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... unlink resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./13/binderfs" [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=862, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 374] <... unlink resumed>) = 0 [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./13/binderfs") = 0 [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] <... write resumed>) = 1048576 [pid 889] munmap(0x7f70edbbd000, 1048576) = 0 [pid 889] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 888] <... openat resumed>) = 4 [pid 888] ioctl(4, LOOP_SET_FD, 3 [pid 377] <... umount2 resumed>) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./13/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./13") = 0 [pid 377] mkdir("./14", 0777) = 0 [ 25.204591][ T887] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.220366][ T890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.224926][ T891] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 889] <... openat resumed>) = 4 [pid 889] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 888] <... ioctl resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 377] <... openat resumed>) = 3 [pid 377] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 377] close(3) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 894 [pid 889] close(3 [pid 888] close(3 [pid 889] <... close resumed>) = 0 [pid 888] <... close resumed>) = 0 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 889] mkdir("./file0", 0777 [pid 888] mkdir("./file0", 0777./strace-static-x86_64: Process 894 attached [pid 894] set_robust_list(0x5555569495e0, 24 [pid 888] <... mkdir resumed>) = 0 [pid 894] <... set_robust_list resumed>) = 0 [pid 889] <... mkdir resumed>) = 0 [pid 888] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 889] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./14/file0", [pid 374] lstat("./13/file0", [pid 372] lstat("./13/file0", [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... openat resumed>) = 4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] fstat(4, [pid 374] <... openat resumed>) = 4 [pid 372] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 894] chdir("./14" [pid 376] getdents64(4, [pid 374] fstat(4, [pid 372] <... openat resumed>) = 4 [pid 894] <... chdir resumed>) = 0 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(4, [pid 372] fstat(4, [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] getdents64(4, [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] close(4 [pid 374] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... close resumed>) = 0 [pid 372] getdents64(4, [pid 374] getdents64(4, [pid 376] rmdir("./14/file0" [pid 374] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... rmdir resumed>) = 0 [pid 374] close(4 [pid 372] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 376] getdents64(3, [pid 374] <... close resumed>) = 0 [pid 372] close(4 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] rmdir("./13/file0" [pid 372] <... close resumed>) = 0 [pid 894] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 374] <... rmdir resumed>) = 0 [pid 894] <... prctl resumed>) = 0 [pid 376] close(3 [pid 374] getdents64(3, [pid 372] rmdir("./13/file0" [pid 376] <... close resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 376] rmdir("./14" [pid 374] close(3 [pid 372] getdents64(3, [pid 376] <... rmdir resumed>) = 0 [pid 374] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] mkdir("./15", 0777 [pid 374] rmdir("./13" [pid 372] close(3 [pid 376] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] <... rmdir resumed>) = 0 [pid 372] <... close resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 374] mkdir("./14", 0777 [pid 376] ioctl(3, LOOP_CLR_FD [pid 372] rmdir("./13" [pid 894] setpgid(0, 0 [pid 374] <... mkdir resumed>) = 0 [pid 894] <... setpgid resumed>) = 0 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] <... rmdir resumed>) = 0 [pid 374] <... openat resumed>) = 3 [pid 376] close(3 [pid 372] mkdir("./14", 0777 [pid 374] ioctl(3, LOOP_CLR_FD [pid 889] <... mount resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 372] <... mkdir resumed>) = 0 [pid 894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 894] write(3, "1000", 4) = 4 [pid 894] close(3 [pid 889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 372] <... openat resumed>) = 3 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 899 [pid 372] ioctl(3, LOOP_CLR_FD [pid 889] <... openat resumed>) = 3 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 900 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 889] chdir("./file0") = 0 [pid 372] close(3 [pid 889] ioctl(4, LOOP_CLR_FD) = 0 [pid 372] <... close resumed>) = 0 [pid 889] close(4 [pid 894] <... close resumed>) = 0 [pid 894] symlink("/dev/binderfs", "./binderfs" [pid 889] <... close resumed>) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] <... futex resumed>) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 901 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 889] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... open resumed>) = 4 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 886] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 889] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 889] <... write resumed>) = 9 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... symlink resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 889] open("./bus", O_RDWR [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] <... mmap resumed>) = 0x7f70f5fbd000 [pid 889] <... open resumed>) = 5 [pid 894] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... mprotect resumed>) = 0 [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 894] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 [pid 894] <... clone resumed>, parent_tid=[902], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 902 [pid 889] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 886] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... mmap resumed>) = 0x20000000 [pid 894] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 889] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] <... futex resumed>) = 0 ./strace-static-x86_64: Process 901 attached ./strace-static-x86_64: Process 900 attached ./strace-static-x86_64: Process 899 attached [pid 889] write(4, 0x20000f80, 9 [pid 888] <... mount resumed>) = 0 [pid 886] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] set_robust_list(0x5555569495e0, 24 [pid 900] set_robust_list(0x5555569495e0, 24 [pid 899] set_robust_list(0x5555569495e0, 24 [pid 889] <... write resumed>) = 9 [pid 888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 886] <... futex resumed>) = 0 [pid 901] <... set_robust_list resumed>) = 0 [pid 900] <... set_robust_list resumed>) = 0 [pid 899] <... set_robust_list resumed>) = 0 [pid 889] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... openat resumed>) = 3 [pid 886] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 901] chdir("./14" [pid 900] chdir("./14" [pid 899] chdir("./15" [pid 889] <... futex resumed>) = 0 [pid 888] chdir("./file0" [pid 886] <... mmap resumed>) = 0x7f70edc9c000 [pid 901] <... chdir resumed>) = 0 [pid 900] <... chdir resumed>) = 0 [pid 899] <... chdir resumed>) = 0 [pid 889] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 888] <... chdir resumed>) = 0 [pid 886] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 902 attached [pid 901] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 900] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 899] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 888] ioctl(4, LOOP_CLR_FD [pid 886] <... mprotect resumed>) = 0 [pid 901] <... prctl resumed>) = 0 [pid 900] <... prctl resumed>) = 0 [pid 899] <... prctl resumed>) = 0 [pid 888] <... ioctl resumed>) = 0 [pid 886] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 902] set_robust_list(0x7f70f5fdd9e0, 24 [pid 901] setpgid(0, 0 [pid 900] setpgid(0, 0 [pid 899] setpgid(0, 0 [pid 888] close(4 [pid 901] <... setpgid resumed>) = 0 [pid 900] <... setpgid resumed>) = 0 [pid 899] <... setpgid resumed>) = 0 [pid 888] <... close resumed>) = 0 [pid 901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 886] <... clone resumed>, parent_tid=[903], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 903 [pid 901] <... openat resumed>) = 3 [pid 900] <... openat resumed>) = 3 [pid 899] <... openat resumed>) = 3 [pid 888] <... futex resumed>) = 1 [pid 886] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] <... futex resumed>) = 0 [pid 901] write(3, "1000", 4 [pid 900] write(3, "1000", 4 [pid 899] write(3, "1000", 4 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 886] <... futex resumed>) = 0 [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... write resumed>) = 4 [pid 900] <... write resumed>) = 4 [pid 899] <... write resumed>) = 4 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 886] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 881] <... futex resumed>) = 0 [pid 901] close(3 [pid 900] close(3 [pid 899] close(3 [pid 888] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 901] <... close resumed>) = 0 [pid 900] <... close resumed>) = 0 [pid 899] <... close resumed>) = 0 [pid 888] <... open resumed>) = 4 [pid 901] symlink("/dev/binderfs", "./binderfs" [pid 900] symlink("/dev/binderfs", "./binderfs" [pid 899] symlink("/dev/binderfs", "./binderfs" [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... set_robust_list resumed>) = 0 [pid 901] <... symlink resumed>) = 0 [pid 900] <... symlink resumed>) = 0 [pid 899] <... symlink resumed>) = 0 [pid 888] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = 0 [pid 900] <... futex resumed>) = 0 [pid 899] <... futex resumed>) = 0 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 888] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] memfd_create("syzkaller", 0 [pid 901] <... mmap resumed>) = 0x7f70f5fbd000 [pid 900] <... mmap resumed>) = 0x7f70f5fbd000 [pid 899] <... mmap resumed>) = 0x7f70f5fbd000 [pid 888] <... write resumed>) = 9 [pid 901] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 900] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 899] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... mprotect resumed>) = 0 [pid 900] <... mprotect resumed>) = 0 [pid 899] <... mprotect resumed>) = 0 [pid 888] <... futex resumed>) = 1 [pid 881] <... futex resumed>) = 0 [pid 902] <... memfd_create resumed>) = 3 [pid 901] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 900] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 899] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 903 attached [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 903] set_robust_list(0x7f70edcbc9e0, 24 [pid 901] <... clone resumed>, parent_tid=[904], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 904 [pid 900] <... clone resumed>, parent_tid=[905], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 905 [pid 899] <... clone resumed>, parent_tid=[906], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 906 [pid 888] open("./bus", O_RDWR [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 903] <... set_robust_list resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... open resumed>) = 5 ./strace-static-x86_64: Process 906 attached ./strace-static-x86_64: Process 905 attached ./strace-static-x86_64: Process 904 attached [pid 902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 901] <... futex resumed>) = 0 [pid 906] set_robust_list(0x7f70f5fdd9e0, 24 [pid 905] set_robust_list(0x7f70f5fdd9e0, 24 [pid 904] set_robust_list(0x7f70f5fdd9e0, 24 [pid 902] <... mmap resumed>) = 0x7f70edbbd000 [pid 906] <... set_robust_list resumed>) = 0 [pid 905] <... set_robust_list resumed>) = 0 [pid 904] <... set_robust_list resumed>) = 0 [pid 902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 906] memfd_create("syzkaller", 0 [pid 905] memfd_create("syzkaller", 0 [pid 904] memfd_create("syzkaller", 0 [pid 902] <... write resumed>) = 1048576 [pid 906] <... memfd_create resumed>) = 3 [pid 905] <... memfd_create resumed>) = 3 [pid 904] <... memfd_create resumed>) = 3 [pid 906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 906] <... mmap resumed>) = 0x7f70edbbd000 [pid 904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 905] <... mmap resumed>) = 0x7f70edbbd000 [pid 903] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 902] munmap(0x7f70edbbd000, 1048576 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 900] <... futex resumed>) = 0 [pid 904] <... mmap resumed>) = 0x7f70edbbd000 [pid 899] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... munmap resumed>) = 0 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 889] <... futex resumed>) = ? [pid 888] <... futex resumed>) = 1 [pid 886] <... futex resumed>) = ? [pid 881] <... futex resumed>) = 0 [pid 902] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... openat resumed>) = 4 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 902] ioctl(4, LOOP_SET_FD, 3 [pid 888] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 881] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 888] <... mmap resumed>) = 0x20000000 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 881] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 881] <... futex resumed>) = 0 [pid 888] write(4, 0x20000f80, 9 [pid 881] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 888] <... write resumed>) = 9 [pid 881] <... futex resumed>) = 0 [pid 888] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 881] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 888] <... futex resumed>) = 0 [pid 881] <... mmap resumed>) = 0x7f70edc9c000 [pid 888] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 881] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 881] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[908], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 908 [pid 881] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 881] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] <... ioctl resumed>) = 0 [pid 902] close(3) = 0 [pid 902] mkdir("./file0", 0777) = 0 [pid 902] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 889] +++ killed by SIGBUS +++ [pid 903] +++ killed by SIGBUS +++ [pid 886] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=886, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 375] restart_syscall(<... resuming interrupted clone ...> [pid 906] <... write resumed>) = 1048576 [pid 906] munmap(0x7f70edbbd000, 1048576 [pid 375] <... restart_syscall resumed>) = 0 [pid 375] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 375] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./14/binderfs") = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 906] <... munmap resumed>) = 0 [pid 906] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 906] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 908 attached [pid 908] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 906] <... ioctl resumed>) = 0 [pid 906] close(3) = 0 [pid 906] mkdir("./file0", 0777) = 0 [pid 906] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 908] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 881] <... futex resumed>) = ? [pid 888] <... futex resumed>) = ? [pid 888] +++ killed by SIGBUS +++ [pid 904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 908] +++ killed by SIGBUS +++ [pid 881] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=881, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 373] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 373] umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 902] <... mount resumed>) = 0 [pid 373] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 373] fstat(3, [pid 902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 902] <... openat resumed>) = 3 [pid 373] getdents64(3, [pid 902] chdir("./file0") = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 902] ioctl(4, LOOP_CLR_FD [pid 373] umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 902] <... ioctl resumed>) = 0 [pid 373] lstat("./13/binderfs", [pid 902] close(4 [pid 373] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 902] <... close resumed>) = 0 [pid 373] unlink("./13/binderfs" [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 902] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] <... open resumed>) = 4 [pid 894] <... futex resumed>) = 0 [pid 373] <... unlink resumed>) = 0 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 906] <... mount resumed>) = 0 [pid 902] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] <... openat resumed>) = 3 [pid 902] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] chdir("./file0" [pid 894] <... futex resumed>) = 0 [pid 906] <... chdir resumed>) = 0 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] ioctl(4, LOOP_CLR_FD) = 0 [pid 902] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 906] close(4) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 902] <... write resumed>) = 9 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 906] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 894] <... futex resumed>) = 0 [pid 902] open("./bus", O_RDWR [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... open resumed>) = 4 [pid 902] <... open resumed>) = 5 [pid 894] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] <... futex resumed>) = 1 [pid 902] <... futex resumed>) = 0 [pid 899] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] <... mmap resumed>) = 0x20000000 [pid 899] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = 0 [pid 906] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 902] <... futex resumed>) = 0 [pid 894] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 906] <... write resumed>) = 9 [pid 902] write(4, 0x20000f80, 9 [pid 894] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 894] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 902] <... write resumed>) = 9 [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... futex resumed>) = 0 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 902] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 899] <... futex resumed>) = 0 [pid 894] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 906] open("./bus", O_RDWR [pid 902] <... futex resumed>) = 0 [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] <... mmap resumed>) = 0x7f70edc9c000 [pid 906] <... open resumed>) = 5 [pid 902] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 894] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] <... mprotect resumed>) = 0 [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 894] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 894] <... clone resumed>, parent_tid=[914], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 914 [pid 906] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 899] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 894] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... mmap resumed>) = 0x20000000 [pid 894] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 894] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 906] <... futex resumed>) = 1 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 899] <... futex resumed>) = 0 [pid 906] write(4, 0x20000f80, 9 [ 25.441686][ T903] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.474495][ T908] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 899] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 906] <... write resumed>) = 9 [pid 899] <... futex resumed>) = 0 [pid 906] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 914 attached ) = 0 [pid 899] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 904] <... write resumed>) = 1048576 [pid 906] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 899] <... mmap resumed>) = 0x7f70edc9c000 [pid 914] set_robust_list(0x7f70edcbc9e0, 24 [pid 904] munmap(0x7f70edbbd000, 1048576 [pid 899] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 899] <... mprotect resumed>) = 0 [pid 899] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 914] <... set_robust_list resumed>) = 0 [pid 904] <... munmap resumed>) = 0 ./strace-static-x86_64: Process 915 attached [pid 904] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 899] <... clone resumed>, parent_tid=[915], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 915 [pid 915] set_robust_list(0x7f70edcbc9e0, 24 [pid 899] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 915] <... set_robust_list resumed>) = 0 [pid 914] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 905] <... write resumed>) = 1048576 [pid 899] <... futex resumed>) = 0 [pid 905] munmap(0x7f70edbbd000, 1048576 [pid 899] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... munmap resumed>) = 0 [pid 905] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 894] <... futex resumed>) = ? [pid 902] <... futex resumed>) = ? [pid 902] +++ killed by SIGBUS +++ [pid 914] +++ killed by SIGBUS +++ [pid 894] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=894, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 377] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 377] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./14/binderfs") = 0 [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 915] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 906] <... futex resumed>) = ? [pid 899] <... futex resumed>) = ? [pid 906] +++ killed by SIGBUS +++ [pid 915] +++ killed by SIGBUS +++ [pid 899] +++ killed by SIGBUS +++ [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=899, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 376] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 376] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 376] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./15/binderfs") = 0 [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./14/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./14") = 0 [pid 375] mkdir("./15", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 905] <... openat resumed>) = 4 [pid 904] <... openat resumed>) = 4 [pid 905] ioctl(4, LOOP_SET_FD, 3 [ 25.509483][ T914] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.509600][ T915] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 904] ioctl(4, LOOP_SET_FD, 3 [pid 375] <... openat resumed>) = 3 [pid 373] <... umount2 resumed>) = 0 [pid 375] ioctl(3, LOOP_CLR_FD [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./13/file0" [pid 905] <... ioctl resumed>) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 905] close(3 [pid 373] getdents64(3, [pid 905] <... close resumed>) = 0 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 905] mkdir("./file0", 0777 [pid 373] close(3 [pid 905] <... mkdir resumed>) = 0 [pid 904] <... ioctl resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... umount2 resumed>) = 0 [pid 375] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 375] close(3 [pid 905] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 904] close(3 [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... close resumed>) = 0 [pid 904] <... close resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 904] mkdir("./file0", 0777 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] rmdir("./13" [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 904] <... mkdir resumed>) = 0 [pid 377] lstat("./14/file0", [pid 376] lstat("./15/file0", [pid 904] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 377] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] <... rmdir resumed>) = 0 [pid 376] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 918 attached [pid 918] set_robust_list(0x5555569495e0, 24) = 0 [pid 918] chdir("./15") = 0 [pid 918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 918] setpgid(0, 0) = 0 [pid 918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 377] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... clone resumed>, child_tidptr=0x5555569495d0) = 918 [pid 373] mkdir("./14", 0777 [pid 918] <... openat resumed>) = 3 [pid 377] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 918] write(3, "1000", 4) = 4 [pid 918] close(3) = 0 [pid 918] symlink("/dev/binderfs", "./binderfs" [pid 373] <... mkdir resumed>) = 0 [pid 377] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 376] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... openat resumed>) = 4 [pid 376] <... openat resumed>) = 4 [pid 377] fstat(4, [pid 376] fstat(4, [pid 373] <... openat resumed>) = 3 [pid 377] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, [pid 373] ioctl(3, LOOP_CLR_FD [pid 376] getdents64(4, [pid 918] <... symlink resumed>) = 0 [pid 377] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] getdents64(4, [pid 376] getdents64(4, [pid 377] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(3 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 376] close(4 [pid 373] <... close resumed>) = 0 [pid 918] <... futex resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] <... close resumed>) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 377] rmdir("./14/file0" [pid 376] rmdir("./15/file0" [pid 918] <... mmap resumed>) = 0x7f70f5fbd000 [pid 918] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 918] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 376] <... rmdir resumed>) = 0 [pid 918] <... clone resumed>, parent_tid=[921], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 921 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] getdents64(3, [pid 377] getdents64(3, [pid 373] <... clone resumed>, child_tidptr=0x5555569495d0) = 920 [pid 376] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] rmdir("./15" [pid 377] rmdir("./14" [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 920 attached [pid 376] <... rmdir resumed>) = 0 [pid 377] <... rmdir resumed>) = 0 [pid 376] mkdir("./16", 0777 [pid 377] mkdir("./15", 0777 [pid 920] set_robust_list(0x5555569495e0, 24) = 0 [pid 920] chdir("./14" [pid 376] <... mkdir resumed>) = 0 [pid 920] <... chdir resumed>) = 0 [pid 920] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 377] <... mkdir resumed>) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 376] <... openat resumed>) = 3 [pid 377] <... openat resumed>) = 3 [pid 376] ioctl(3, LOOP_CLR_FD [pid 920] <... prctl resumed>) = 0 [pid 377] ioctl(3, LOOP_CLR_FD [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 376] close(3 [pid 377] close(3 [pid 376] <... close resumed>) = 0 [pid 904] <... mount resumed>) = 0 [pid 377] <... close resumed>) = 0 [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 920] setpgid(0, 0) = 0 [pid 920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 920] write(3, "1000", 4) = 4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 926 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 925 [pid 904] <... openat resumed>) = 3 [pid 920] close(3 [pid 904] chdir("./file0" [pid 920] <... close resumed>) = 0 [pid 920] symlink("/dev/binderfs", "./binderfs") = 0 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0./strace-static-x86_64: Process 921 attached ) = 0x7f70f5fbd000 [pid 921] set_robust_list(0x7f70f5fdd9e0, 24 [pid 920] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 921] <... set_robust_list resumed>) = 0 [pid 920] <... mprotect resumed>) = 0 [pid 921] memfd_create("syzkaller", 0 [pid 920] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 904] <... chdir resumed>) = 0 [pid 904] ioctl(4, LOOP_CLR_FD) = 0 ./strace-static-x86_64: Process 927 attached [pid 921] <... memfd_create resumed>) = 3 [pid 904] close(4 [pid 921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 920] <... clone resumed>, parent_tid=[927], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 927 [pid 921] <... mmap resumed>) = 0x7f70edbbd000 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000./strace-static-x86_64: Process 926 attached ./strace-static-x86_64: Process 925 attached [pid 927] set_robust_list(0x7f70f5fdd9e0, 24 [pid 905] <... mount resumed>) = 0 [pid 904] <... close resumed>) = 0 [pid 927] <... set_robust_list resumed>) = 0 [pid 926] set_robust_list(0x5555569495e0, 24 [pid 925] set_robust_list(0x5555569495e0, 24 [pid 920] <... futex resumed>) = 0 [pid 927] memfd_create("syzkaller", 0 [pid 926] <... set_robust_list resumed>) = 0 [pid 925] <... set_robust_list resumed>) = 0 [pid 905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] <... memfd_create resumed>) = 3 [pid 926] chdir("./15" [pid 925] chdir("./16" [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 905] <... openat resumed>) = 3 [pid 904] <... futex resumed>) = 1 [pid 901] <... futex resumed>) = 0 [pid 927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 926] <... chdir resumed>) = 0 [pid 925] <... chdir resumed>) = 0 [pid 921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 927] <... mmap resumed>) = 0x7f70edbbd000 [pid 926] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 925] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 905] chdir("./file0" [pid 904] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 1048576 [pid 921] munmap(0x7f70edbbd000, 1048576 [pid 905] <... chdir resumed>) = 0 [pid 921] <... munmap resumed>) = 0 [pid 921] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4 [pid 921] ioctl(4, LOOP_SET_FD, 3 [pid 925] <... prctl resumed>) = 0 [pid 905] ioctl(4, LOOP_CLR_FD [pid 904] <... open resumed>) = 4 [pid 901] <... futex resumed>) = 0 [pid 926] <... prctl resumed>) = 0 [pid 925] setpgid(0, 0 [pid 921] <... ioctl resumed>) = 0 [pid 905] <... ioctl resumed>) = 0 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] close(3 [pid 905] close(4 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] <... futex resumed>) = 0 [pid 927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 926] setpgid(0, 0 [pid 925] <... setpgid resumed>) = 0 [pid 921] <... close resumed>) = 0 [pid 905] <... close resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] mkdir("./file0", 0777 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... mkdir resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 904] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 901] <... futex resumed>) = 0 [pid 900] <... futex resumed>) = 0 [pid 926] <... setpgid resumed>) = 0 [pid 925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 921] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] <... write resumed>) = 9 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] <... futex resumed>) = 0 [pid 905] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... open resumed>) = 4 [pid 904] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] open("./bus", O_RDWR [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] <... open resumed>) = 5 [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 905] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 904] <... futex resumed>) = 0 [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 905] <... write resumed>) = 9 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 925] <... openat resumed>) = 3 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 904] <... mmap resumed>) = 0x20000000 [pid 900] <... futex resumed>) = 0 [pid 925] write(3, "1000", 4 [pid 905] open("./bus", O_RDWR [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] <... openat resumed>) = 3 [pid 925] <... write resumed>) = 4 [pid 905] <... open resumed>) = 5 [pid 904] <... futex resumed>) = 1 [pid 901] <... futex resumed>) = 0 [pid 925] close(3 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] write(3, "1000", 4 [pid 905] <... futex resumed>) = 1 [pid 904] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 926] <... write resumed>) = 4 [pid 925] <... close resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] write(4, 0x20000f80, 9 [pid 901] <... futex resumed>) = 0 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 900] <... futex resumed>) = 0 [pid 905] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 900] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 926] close(3 [pid 925] symlink("/dev/binderfs", "./binderfs" [pid 905] <... mmap resumed>) = 0x20000000 [pid 904] <... write resumed>) = 9 [pid 901] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 901] <... futex resumed>) = 0 [pid 905] <... futex resumed>) = 1 [pid 904] <... futex resumed>) = 0 [pid 901] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 904] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] <... mmap resumed>) = 0x7f70edc9c000 [pid 900] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 926] <... close resumed>) = 0 [pid 925] <... symlink resumed>) = 0 [pid 905] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 901] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 900] <... futex resumed>) = 0 [pid 926] symlink("/dev/binderfs", "./binderfs" [pid 925] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 905] write(4, 0x20000f80, 9 [pid 901] <... mprotect resumed>) = 0 [pid 900] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... futex resumed>) = 0 [pid 905] <... write resumed>) = 9 [pid 901] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 900] <... futex resumed>) = 0 [pid 905] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 905] <... futex resumed>) = 0 [pid 926] <... symlink resumed>) = 0 [pid 900] <... mmap resumed>) = 0x7f70edc9c000 [pid 905] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 901] <... clone resumed>, parent_tid=[929], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 929 [pid 900] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 901] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 900] <... mprotect resumed>) = 0 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 925] <... mmap resumed>) = 0x7f70f5fbd000 [pid 901] <... futex resumed>) = 0 [pid 900] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 926] <... futex resumed>) = 0 [pid 925] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 901] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 900] <... clone resumed>, parent_tid=[930], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 930 [pid 926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 925] <... mprotect resumed>) = 0 [pid 900] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 900] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 929 attached [pid 929] set_robust_list(0x7f70edcbc9e0, 24 [pid 925] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 926] <... mmap resumed>) = 0x7f70f5fbd000 [pid 929] <... set_robust_list resumed>) = 0 [pid 926] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE./strace-static-x86_64: Process 931 attached ./strace-static-x86_64: Process 930 attached [pid 927] <... write resumed>) = 1048576 [pid 926] <... mprotect resumed>) = 0 [pid 925] <... clone resumed>, parent_tid=[931], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 931 [pid 930] set_robust_list(0x7f70edcbc9e0, 24 [pid 927] munmap(0x7f70edbbd000, 1048576 [pid 926] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] set_robust_list(0x7f70f5fdd9e0, 24 [pid 930] <... set_robust_list resumed>) = 0 [pid 927] <... munmap resumed>) = 0 [pid 925] <... futex resumed>) = 0 [pid 931] <... set_robust_list resumed>) = 0 ./strace-static-x86_64: Process 932 attached [pid 932] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 921] <... mount resumed>) = 0 [pid 921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 921] chdir("./file0") = 0 [pid 921] ioctl(4, LOOP_CLR_FD) = 0 [pid 921] close(4) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 918] <... futex resumed>) = 0 [pid 921] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... open resumed>) = 4 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 9 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] open("./bus", O_RDWR [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... open resumed>) = 5 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... mmap resumed>) = 0x20000000 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 921] write(4, 0x20000f80, 9 [pid 918] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... write resumed>) = 9 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 918] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 921] <... futex resumed>) = 0 [pid 918] <... futex resumed>) = 0 [pid 921] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 918] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70edc9c000 [pid 918] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 918] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[935], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 935 [pid 918] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 918] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 935 attached [pid 935] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 931] memfd_create("syzkaller", 0 [pid 930] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 929] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 927] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 926] <... clone resumed>, parent_tid=[932], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 932 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 931] <... memfd_create resumed>) = 3 [pid 927] <... openat resumed>) = 4 [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 904] <... futex resumed>) = ? [pid 901] <... futex resumed>) = ? [pid 932] <... futex resumed>) = 0 [pid 931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 927] ioctl(4, LOOP_SET_FD, 3 [pid 926] <... futex resumed>) = 1 [pid 904] +++ killed by SIGBUS +++ [pid 932] memfd_create("syzkaller", 0 [pid 931] <... mmap resumed>) = 0x7f70edbbd000 [pid 929] +++ killed by SIGBUS +++ [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 901] +++ killed by SIGBUS +++ [pid 932] <... memfd_create resumed>) = 3 [pid 931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=901, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 932] <... mmap resumed>) = 0x7f70edbbd000 [pid 372] restart_syscall(<... resuming interrupted clone ...> [pid 932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 372] <... restart_syscall resumed>) = 0 [pid 935] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 905] <... futex resumed>) = ? [pid 900] <... futex resumed>) = ? [pid 372] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 372] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 931] <... write resumed>) = 1048576 [pid 921] <... futex resumed>) = ? [pid 918] <... futex resumed>) = ? [pid 931] munmap(0x7f70edbbd000, 1048576 [pid 921] +++ killed by SIGBUS +++ [pid 905] +++ killed by SIGBUS +++ [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./14/binderfs") = 0 [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 935] +++ killed by SIGBUS +++ [pid 918] +++ killed by SIGBUS +++ [pid 931] <... munmap resumed>) = 0 [pid 930] +++ killed by SIGBUS +++ [pid 900] +++ killed by SIGBUS +++ [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=918, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=900, si_uid=0, si_status=SIGBUS, si_utime=2, si_stime=2} --- [pid 932] <... write resumed>) = 1048576 [pid 931] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 374] restart_syscall(<... resuming interrupted clone ...> [pid 931] <... openat resumed>) = 4 [pid 927] <... ioctl resumed>) = 0 [pid 931] ioctl(4, LOOP_SET_FD, 3 [pid 932] munmap(0x7f70edbbd000, 1048576) = 0 [pid 927] close(3 [pid 932] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 927] <... close resumed>) = 0 [pid 927] mkdir("./file0", 0777 [pid 931] <... ioctl resumed>) = 0 [pid 931] close(3) = 0 [pid 931] mkdir("./file0", 0777 [pid 927] <... mkdir resumed>) = 0 [pid 374] <... restart_syscall resumed>) = 0 [pid 931] <... mkdir resumed>) = 0 [pid 927] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 931] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 375] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 375] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 3 [pid 375] fstat(3, [pid 374] fstat(3, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, [pid 374] getdents64(3, [pid 375] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 375] lstat("./15/binderfs", [pid 374] lstat("./14/binderfs", [pid 375] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] <... lstat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 375] unlink("./15/binderfs" [pid 374] unlink("./14/binderfs" [pid 375] <... unlink resumed>) = 0 [pid 374] <... unlink resumed>) = 0 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [ 25.733595][ T929] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.739723][ T930] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.759285][ T935] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 932] <... openat resumed>) = 4 [pid 932] ioctl(4, LOOP_SET_FD, 3 [pid 927] <... mount resumed>) = 0 [pid 927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 927] chdir("./file0") = 0 [pid 927] ioctl(4, LOOP_CLR_FD [pid 932] <... ioctl resumed>) = 0 [pid 927] <... ioctl resumed>) = 0 [pid 375] <... umount2 resumed>) = 0 [pid 374] <... umount2 resumed>) = 0 [pid 372] <... umount2 resumed>) = 0 [pid 932] close(3 [pid 927] close(4 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 375] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 375] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 932] <... close resumed>) = 0 [pid 927] <... close resumed>) = 0 [pid 375] getdents64(4, [pid 932] mkdir("./file0", 0777 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 375] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] close(4) = 0 [pid 375] rmdir("./15/file0") = 0 [pid 375] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 375] close(3) = 0 [pid 375] rmdir("./15") = 0 [pid 375] mkdir("./16", 0777) = 0 [pid 375] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3 [pid 375] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 375] close(3) = 0 [pid 375] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 941 [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 374] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./14/file0") = 0 [pid 374] getdents64(3, [pid 927] <... futex resumed>) = 1 [pid 920] <... futex resumed>) = 0 [pid 374] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 932] <... mkdir resumed>) = 0 [pid 374] rmdir("./14" [pid 932] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 927] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] <... rmdir resumed>) = 0 [pid 374] mkdir("./15", 0777 [pid 927] <... open resumed>) = 4 [pid 920] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 927] <... futex resumed>) = 0 [pid 920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 374] <... openat resumed>) = 3 [pid 927] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] ioctl(3, LOOP_CLR_FD [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] close(3) = 0 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 942 [pid 927] <... write resumed>) = 9 [pid 920] <... futex resumed>) = 0 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] lstat("./14/file0", [pid 927] <... futex resumed>) = 0 [pid 920] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 ./strace-static-x86_64: Process 941 attached [pid 927] open("./bus", O_RDWR [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 920] <... futex resumed>) = 0 [pid 927] <... open resumed>) = 5 [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 941] set_robust_list(0x5555569495e0, 24) = 0 [pid 927] <... futex resumed>) = 1 [pid 920] <... futex resumed>) = 0 [pid 372] <... openat resumed>) = 4 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 920] <... futex resumed>) = 0 [pid 372] fstat(4, [pid 927] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 920] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 927] <... mmap resumed>) = 0x20000000 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 920] <... futex resumed>) = 0 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(4, [pid 927] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 920] <... futex resumed>) = 0 [pid 927] write(4, 0x20000f80, 9 [pid 920] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 920] <... futex resumed>) = 0 [pid 927] <... write resumed>) = 9 [pid 920] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 372] getdents64(4, [pid 927] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 920] <... mmap resumed>) = 0x7f70edc9c000 [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 927] <... futex resumed>) = 0 [pid 920] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 372] close(4 [pid 927] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 920] <... mprotect resumed>) = 0 [pid 920] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 372] <... close resumed>) = 0 [pid 372] rmdir("./14/file0" [pid 920] <... clone resumed>, parent_tid=[944], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 944 [pid 941] chdir("./16") = 0 [pid 941] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 372] <... rmdir resumed>) = 0 [pid 920] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] getdents64(3, [pid 920] <... futex resumed>) = 0 [pid 920] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 941] <... prctl resumed>) = 0 [pid 372] close(3) = 0 [pid 372] rmdir("./14" [pid 941] setpgid(0, 0) = 0 [pid 372] <... rmdir resumed>) = 0 [pid 372] mkdir("./15", 0777 [pid 941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 372] <... mkdir resumed>) = 0 [pid 941] write(3, "1000", 4 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 941] <... write resumed>) = 4 [pid 372] <... openat resumed>) = 3 [pid 941] close(3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 941] <... close resumed>) = 0 [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 941] symlink("/dev/binderfs", "./binderfs" [pid 372] close(3) = 0 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 941] <... symlink resumed>) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 946 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 941] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[947], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 947 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 946 attached [pid 946] set_robust_list(0x5555569495e0, 24) = 0 [pid 946] chdir("./15") = 0 [pid 946] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 946] setpgid(0, 0) = 0 [pid 946] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 946] write(3, "1000", 4) = 4 [pid 946] close(3) = 0 [pid 946] symlink("/dev/binderfs", "./binderfs") = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 946] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 946] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[948], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 948 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 948 attached [pid 948] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 948] memfd_create("syzkaller", 0) = 3 [pid 948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 ./strace-static-x86_64: Process 944 attached [pid 931] <... mount resumed>) = 0 [pid 931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 931] chdir("./file0") = 0 [pid 931] ioctl(4, LOOP_CLR_FD) = 0 [pid 931] close(4 [pid 944] set_robust_list(0x7f70edcbc9e0, 24 [pid 931] <... close resumed>) = 0 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] <... futex resumed>) = 0 [pid 944] <... set_robust_list resumed>) = 0 [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 931] <... futex resumed>) = 0 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 948] munmap(0x7f70edbbd000, 1048576) = 0 [pid 948] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 948] ioctl(4, LOOP_SET_FD, 3./strace-static-x86_64: Process 942 attached [pid 942] set_robust_list(0x5555569495e0, 24) = 0 [pid 942] chdir("./15") = 0 [pid 942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 942] setpgid(0, 0) = 0 [pid 942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 942] write(3, "1000", 4) = 4 [pid 942] close(3) = 0 [pid 942] symlink("/dev/binderfs", "./binderfs") = 0 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 942] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 942] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[951], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 951 [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 951 attached [pid 951] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 951] memfd_create("syzkaller", 0) = 3 [pid 951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 931] <... open resumed>) = 4 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... mount resumed>) = 0 [pid 931] <... futex resumed>) = 1 [pid 932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 932] <... openat resumed>) = 3 [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] chdir("./file0" [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 932] <... chdir resumed>) = 0 [pid 931] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] ioctl(4, LOOP_CLR_FD [pid 931] <... write resumed>) = 9 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 931] open("./bus", O_RDWR [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... open resumed>) = 5 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 ./strace-static-x86_64: Process 947 attached [pid 931] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 925] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 931] <... mmap resumed>) = 0x20000000 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 925] <... futex resumed>) = 0 [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 931] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 925] <... futex resumed>) = 0 [pid 931] write(4, 0x20000f80, 9 [pid 925] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 925] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 947] set_robust_list(0x7f70f5fdd9e0, 24 [pid 931] <... write resumed>) = 9 [pid 925] <... mmap resumed>) = 0x7f70edc9c000 [pid 931] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... set_robust_list resumed>) = 0 [pid 931] <... futex resumed>) = 0 [pid 925] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 931] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 925] <... mprotect resumed>) = 0 [pid 925] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[953], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 953 [pid 925] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] memfd_create("syzkaller", 0 [pid 925] <... futex resumed>) = 0 [pid 947] <... memfd_create resumed>) = 3 [pid 925] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 948] <... ioctl resumed>) = 0 [pid 932] <... ioctl resumed>) = 0 [pid 948] close(3) = 0 [pid 932] close(4 [pid 948] mkdir("./file0", 0777) = 0 [pid 932] <... close resumed>) = 0 [pid 948] mount("/dev/loop0", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... open resumed>) = 4 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... write resumed>) = 9 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] open("./bus", O_RDWR [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... open resumed>) = 5 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 932] <... futex resumed>) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 [pid 932] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 926] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 932] <... mmap resumed>) = 0x20000000 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 926] <... futex resumed>) = 0 [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 932] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 926] <... futex resumed>) = 0 ./strace-static-x86_64: Process 953 attached [pid 932] write(4, 0x20000f80, 9 [pid 926] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 932] <... write resumed>) = 9 [pid 953] set_robust_list(0x7f70edcbc9e0, 24 [pid 926] <... mmap resumed>) = 0x7f70edc9c000 [pid 932] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 953] <... set_robust_list resumed>) = 0 [pid 932] <... futex resumed>) = 0 [pid 926] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 932] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 926] <... mprotect resumed>) = 0 [pid 926] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 951] <... write resumed>) = 1048576 [pid 951] munmap(0x7f70edbbd000, 1048576) = 0 [pid 951] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4 [pid 951] ioctl(4, LOOP_SET_FD, 3 [pid 944] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 947] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 [pid 947] munmap(0x7f70edbbd000, 1048576) = 0 [pid 947] openat(AT_FDCWD, "/dev/loop3", O_RDWR [pid 926] <... clone resumed>, parent_tid=[954], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 954 [pid 926] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 926] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 954 attached [pid 954] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 953] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 927] <... futex resumed>) = ? [pid 920] <... futex resumed>) = ? [pid 927] +++ killed by SIGBUS +++ [pid 944] +++ killed by SIGBUS +++ [pid 920] +++ killed by SIGBUS +++ [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=920, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 931] <... futex resumed>) = ? [pid 925] <... futex resumed>) = ? [pid 931] +++ killed by SIGBUS +++ [pid 373] umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 951] <... ioctl resumed>) = 0 [pid 373] fstat(3, [pid 951] close(3 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 951] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 951] mkdir("./file0", 0777 [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 951] <... mkdir resumed>) = 0 [pid 373] umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 951] mount("/dev/loop2", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 373] unlink("./14/binderfs") = 0 [ 25.950056][ T944] EXT4-fs error (device loop1): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 25.979122][ T953] EXT4-fs error (device loop4): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 953] +++ killed by SIGBUS +++ [pid 925] +++ killed by SIGBUS +++ [pid 947] <... openat resumed>) = 4 [pid 954] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 947] ioctl(4, LOOP_SET_FD, 3 [pid 376] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=925, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 376] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 932] <... futex resumed>) = ? [pid 948] <... mount resumed>) = 0 [pid 947] <... ioctl resumed>) = 0 [pid 926] <... futex resumed>) = ? [pid 376] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 947] close(3 [pid 376] <... openat resumed>) = 3 [pid 948] <... openat resumed>) = 3 [pid 947] <... close resumed>) = 0 [pid 376] fstat(3, [pid 948] chdir("./file0" [pid 947] mkdir("./file0", 0777 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 948] <... chdir resumed>) = 0 [pid 947] <... mkdir resumed>) = 0 [pid 932] +++ killed by SIGBUS +++ [pid 376] getdents64(3, [pid 948] ioctl(4, LOOP_CLR_FD [pid 947] mount("/dev/loop3", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 376] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 376] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 376] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 376] unlink("./16/binderfs") = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 954] +++ killed by SIGBUS +++ [pid 926] +++ killed by SIGBUS +++ [pid 377] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=926, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=2} --- [pid 377] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 377] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 377] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 377] unlink("./15/binderfs") = 0 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 951] <... mount resumed>) = 0 [pid 951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 951] chdir("./file0") = 0 [ 25.994091][ T954] EXT4-fs error (device loop5): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 951] ioctl(4, LOOP_CLR_FD [pid 376] <... umount2 resumed>) = 0 [pid 951] <... ioctl resumed>) = 0 [pid 948] <... ioctl resumed>) = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] <... umount2 resumed>) = 0 [pid 951] close(4 [pid 948] close(4 [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 376] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 376] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 373] lstat("./14/file0", [pid 376] <... openat resumed>) = 4 [pid 376] fstat(4, [pid 373] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 376] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 373] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 373] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 373] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] close(4) = 0 [pid 373] rmdir("./14/file0" [pid 376] getdents64(4, [pid 373] <... rmdir resumed>) = 0 [pid 373] getdents64(3, [pid 376] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] close(3) = 0 [pid 373] rmdir("./14") = 0 [pid 376] getdents64(4, [pid 373] mkdir("./15", 0777 [pid 376] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 373] <... mkdir resumed>) = 0 [pid 376] close(4 [pid 373] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 376] <... close resumed>) = 0 [pid 376] rmdir("./16/file0") = 0 [pid 376] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 376] close(3) = 0 [pid 376] rmdir("./16") = 0 [pid 376] mkdir("./17", 0777) = 0 [pid 376] openat(AT_FDCWD, "/dev/loop4", O_RDWR [pid 951] <... close resumed>) = 0 [pid 377] <... umount2 resumed>) = 0 [pid 376] <... openat resumed>) = 3 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 377] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 377] fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 377] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 377] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 377] close(4) = 0 [pid 377] rmdir("./15/file0") = 0 [pid 377] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 377] close(3) = 0 [pid 377] rmdir("./15") = 0 [pid 377] mkdir("./16", 0777 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... mkdir resumed>) = 0 [pid 376] ioctl(3, LOOP_CLR_FD [pid 951] <... futex resumed>) = 1 [pid 942] <... futex resumed>) = 0 [pid 377] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] <... futex resumed>) = 0 [pid 951] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] <... open resumed>) = 4 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] <... futex resumed>) = 0 [pid 951] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] <... write resumed>) = 9 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] open("./bus", O_RDWR) = 5 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 942] <... futex resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 951] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 951] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 942] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 951] write(4, 0x20000f80, 9 [pid 942] <... futex resumed>) = 0 [pid 942] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 951] <... write resumed>) = 9 [pid 942] <... mmap resumed>) = 0x7f70edc9c000 [pid 951] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 942] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 951] <... futex resumed>) = 0 [pid 942] <... mprotect resumed>) = 0 [pid 951] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 942] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[961], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 961 [pid 942] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 942] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 961 attached [pid 961] set_robust_list(0x7f70edcbc9e0, 24) = 0 [pid 961] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 951] <... futex resumed>) = ? [pid 942] <... futex resumed>) = ? [pid 951] +++ killed by SIGBUS +++ [pid 961] +++ killed by SIGBUS +++ [pid 942] +++ killed by SIGBUS +++ [pid 374] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=942, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 374] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 374] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 374] fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 374] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 374] unlink("./15/binderfs") = 0 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 948] <... close resumed>) = 0 [pid 373] <... openat resumed>) = 3 [pid 373] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 373] close(3) = 0 [pid 373] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569495d0) = 962 ./strace-static-x86_64: Process 962 attached [pid 962] set_robust_list(0x5555569495e0, 24) = 0 [pid 962] chdir("./15") = 0 [pid 962] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 377] <... openat resumed>) = 3 [pid 376] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 377] ioctl(3, LOOP_CLR_FD [pid 948] <... futex resumed>) = 1 [pid 376] close(3 [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 946] <... futex resumed>) = 0 [pid 962] <... prctl resumed>) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... open resumed>) = 4 [pid 962] setpgid(0, 0) = 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 962] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 962] write(3, "1000", 4) = 4 [pid 962] close(3) = 0 [pid 962] symlink("/dev/binderfs", "./binderfs" [pid 948] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... symlink resumed>) = 0 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] <... futex resumed>) = 0 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 962] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 948] <... write resumed>) = 9 [pid 962] <... mprotect resumed>) = 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 962] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[965], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 965 [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 965 attached [pid 965] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 965] memfd_create("syzkaller", 0) = 3 [pid 965] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] open("./bus", O_RDWR [pid 946] <... futex resumed>) = 0 [pid 948] <... open resumed>) = 5 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 948] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 946] <... futex resumed>) = 0 [pid 946] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 948] <... mmap resumed>) = 0x20000000 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 946] <... futex resumed>) = 0 [pid 948] write(4, 0x20000f80, 9 [pid 946] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 948] <... write resumed>) = 9 [pid 946] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 948] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 946] <... mmap resumed>) = 0x7f70edc9c000 [pid 948] <... futex resumed>) = 0 [pid 946] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 948] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 946] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[966], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 966 [pid 946] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 946] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... mount resumed>) = 0 [pid 947] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 947] chdir("./file0") = 0 [pid 947] ioctl(4, LOOP_CLR_FD [pid 965] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576./strace-static-x86_64: Process 966 attached [pid 966] set_robust_list(0x7f70edcbc9e0, 24) = 0 [ 26.096768][ T961] EXT4-fs error (device loop2): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 965] <... write resumed>) = 1048576 [pid 965] munmap(0x7f70edbbd000, 1048576 [pid 966] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 965] <... munmap resumed>) = 0 [pid 948] <... futex resumed>) = ? [pid 946] <... futex resumed>) = ? [pid 948] +++ killed by SIGBUS +++ [pid 966] +++ killed by SIGBUS +++ [pid 946] +++ killed by SIGBUS +++ [pid 965] openat(AT_FDCWD, "/dev/loop1", O_RDWR [pid 377] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 374] <... umount2 resumed>) = 0 [pid 377] close(3 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 965] <... openat resumed>) = 4 [pid 372] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=946, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=1} --- [pid 965] ioctl(4, LOOP_SET_FD, 3 [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 374] lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 372] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 374] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 374] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 372] <... openat resumed>) = 3 [pid 374] <... openat resumed>) = 4 [pid 372] fstat(3, [pid 374] fstat(4, [pid 376] <... close resumed>) = 0 [pid 965] <... ioctl resumed>) = 0 [pid 965] close(3) = 0 [pid 965] mkdir("./file0", 0777) = 0 [pid 965] mount("/dev/loop1", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] getdents64(3, [pid 377] <... close resumed>) = 0 [pid 372] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 372] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] unlink("./15/binderfs") = 0 [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 374] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 374] getdents64(4, 0x555556952660 /* 2 entries */, 32768) = 48 [pid 374] getdents64(4, 0x555556952660 /* 0 entries */, 32768) = 0 [pid 374] close(4) = 0 [pid 374] rmdir("./15/file0") = 0 [pid 374] getdents64(3, 0x55555694a620 /* 0 entries */, 32768) = 0 [pid 374] close(3) = 0 [pid 947] <... ioctl resumed>) = 0 [pid 377] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 376] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 374] rmdir("./15" [pid 947] close(4 [pid 377] <... clone resumed>, child_tidptr=0x5555569495d0) = 968 [pid 374] <... rmdir resumed>) = 0 [pid 947] <... close resumed>) = 0 [pid 376] <... clone resumed>, child_tidptr=0x5555569495d0) = 969 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... open resumed>) = 4 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 374] mkdir("./16", 0777 [pid 947] <... futex resumed>) = 1 [pid 941] <... futex resumed>) = 0 [pid 374] <... mkdir resumed>) = 0 [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 947] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... write resumed>) = 9 [pid 374] openat(AT_FDCWD, "/dev/loop2", O_RDWR [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] open("./bus", O_RDWR [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... open resumed>) = 5 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 941] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 947] <... mmap resumed>) = 0x20000000 [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 941] <... futex resumed>) = 0 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 941] <... futex resumed>) = 0 [pid 947] write(4, 0x20000f80, 9 [pid 941] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000 [pid 947] <... write resumed>) = 9 [pid 941] <... futex resumed>) = 0 ./strace-static-x86_64: Process 969 attached ./strace-static-x86_64: Process 968 attached [pid 947] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 941] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 947] <... futex resumed>) = 0 [pid 941] <... mmap resumed>) = 0x7f70edc9c000 [pid 947] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 941] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 941] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[971], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 971 [pid 941] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 941] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 968] set_robust_list(0x5555569495e0, 24 [pid 969] set_robust_list(0x5555569495e0, 24./strace-static-x86_64: Process 971 attached [pid 971] set_robust_list(0x7f70edcbc9e0, 24 [pid 969] <... set_robust_list resumed>) = 0 [pid 968] <... set_robust_list resumed>) = 0 [pid 968] chdir("./16" [pid 971] <... set_robust_list resumed>) = 0 [pid 969] chdir("./17") = 0 [pid 968] <... chdir resumed>) = 0 [pid 965] <... mount resumed>) = 0 [pid 965] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 [pid 965] chdir("./file0") = 0 [pid 965] ioctl(4, LOOP_CLR_FD [pid 969] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 969] setpgid(0, 0) = 0 [pid 969] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 969] write(3, "1000", 4) = 4 [pid 969] close(3) = 0 [pid 969] symlink("/dev/binderfs", "./binderfs") = 0 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 969] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 969] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[973], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 973 [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 968] setpgid(0, 0) = 0 [pid 968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 968] write(3, "1000", 4) = 4 [pid 968] close(3) = 0 [pid 968] symlink("/dev/binderfs", "./binderfs") = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7f70f5fbd000 [pid 968] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 968] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tid=[974], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 974 [pid 968] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 968] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000}./strace-static-x86_64: Process 973 attached [pid 973] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 973] memfd_create("syzkaller", 0) = 3 [pid 973] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f70edbbd000 [ 26.139431][ T966] EXT4-fs error (device loop0): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters ./strace-static-x86_64: Process 974 attached [pid 971] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 974] set_robust_list(0x7f70f5fdd9e0, 24) = 0 [pid 374] <... openat resumed>) = 3 [pid 372] <... umount2 resumed>) = 0 [pid 974] memfd_create("syzkaller", 0 [pid 374] ioctl(3, LOOP_CLR_FD [pid 974] <... memfd_create resumed>) = 3 [pid 974] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 965] <... ioctl resumed>) = 0 [pid 947] <... futex resumed>) = ? [pid 941] <... futex resumed>) = ? [pid 374] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 974] <... mmap resumed>) = 0x7f70edbbd000 [pid 374] close(3 [pid 965] close(4 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 973] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 974] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 374] <... close resumed>) = 0 [pid 973] <... write resumed>) = 1048576 [pid 374] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD [pid 973] munmap(0x7f70edbbd000, 1048576) = 0 [pid 973] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4 [pid 973] ioctl(4, LOOP_SET_FD, 3 [pid 372] lstat("./15/file0", [pid 965] <... close resumed>) = 0 [pid 374] <... clone resumed>, child_tidptr=0x5555569495d0) = 975 [pid 372] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 372] umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 971] +++ killed by SIGBUS +++ [pid 973] <... ioctl resumed>) = 0 [pid 973] close(3) = 0 [pid 947] +++ killed by SIGBUS +++ [pid 941] +++ killed by SIGBUS +++ [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 962] <... futex resumed>) = 0 [pid 372] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 965] <... futex resumed>) = 1 [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=941, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=4} --- [pid 372] <... openat resumed>) = 4 [pid 372] fstat(4, [pid 965] <... open resumed>) = 4 [pid 372] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 372] getdents64(4, [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 375] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... openat resumed>) = 3 [pid 372] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 965] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 962] <... futex resumed>) = 0 [pid 375] fstat(3, [pid 372] getdents64(4, [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 375] getdents64(3, 0x55555694a620 /* 4 entries */, 32768) = 112 [pid 375] umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 375] lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0 [pid 372] close(4 [pid 965] <... write resumed>) = 9 [pid 375] unlink("./16/binderfs" [pid 372] <... close resumed>) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] <... unlink resumed>) = 0 [pid 372] rmdir("./15/file0" [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 965] open("./bus", O_RDWR [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 ./strace-static-x86_64: Process 975 attached [pid 974] <... write resumed>) = 1048576 [pid 965] <... open resumed>) = 5 [pid 962] <... futex resumed>) = 0 [pid 372] getdents64(3, [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 965] <... futex resumed>) = 0 [pid 962] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 965] mmap(0x20000000, 6291456, PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] close(3 [pid 962] <... futex resumed>) = 0 [pid 973] mkdir("./file0", 0777 [pid 962] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 372] <... close resumed>) = 0 [pid 965] <... mmap resumed>) = 0x20000000 [pid 372] rmdir("./15" [pid 973] <... mkdir resumed>) = 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 372] <... rmdir resumed>) = 0 [pid 973] mount("/dev/loop4", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 965] <... futex resumed>) = 1 [pid 962] <... futex resumed>) = 0 [pid 372] mkdir("./16", 0777 [pid 975] set_robust_list(0x5555569495e0, 24 [pid 974] munmap(0x7f70edbbd000, 1048576 [pid 965] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 965] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 372] <... mkdir resumed>) = 0 [pid 965] write(4, 0x20000f80, 9 [pid 962] futex(0x7f70f60b67bc, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 372] openat(AT_FDCWD, "/dev/loop0", O_RDWR [pid 965] <... write resumed>) = 9 [pid 962] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 965] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 962] <... mmap resumed>) = 0x7f70edc9c000 [pid 965] <... futex resumed>) = 0 [pid 962] mprotect(0x7f70edc9d000, 131072, PROT_READ|PROT_WRITE [pid 965] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 962] <... mprotect resumed>) = 0 [pid 962] clone(child_stack=0x7f70edcbc3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID./strace-static-x86_64: Process 977 attached , parent_tid=[977], tls=0x7f70edcbc700, child_tidptr=0x7f70edcbc9d0) = 977 [pid 962] futex(0x7f70f60b67b8, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 962] futex(0x7f70f60b67bc, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 975] <... set_robust_list resumed>) = 0 [pid 977] set_robust_list(0x7f70edcbc9e0, 24 [pid 974] <... munmap resumed>) = 0 [pid 977] <... set_robust_list resumed>) = 0 [ 26.175953][ T971] EXT4-fs error (device loop3): ext4_mb_generate_buddy:805: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [pid 975] chdir("./16" [pid 974] openat(AT_FDCWD, "/dev/loop5", O_RDWR [pid 977] --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x20000204} --- [pid 975] <... chdir resumed>) = 0 [pid 975] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 965] <... futex resumed>) = ? [pid 962] <... futex resumed>) = ? [pid 975] <... prctl resumed>) = 0 [pid 965] +++ killed by SIGBUS +++ [pid 975] setpgid(0, 0 [pid 974] <... openat resumed>) = 4 [pid 375] <... umount2 resumed>) = 0 [pid 372] <... openat resumed>) = 3 [pid 975] <... setpgid resumed>) = 0 [pid 974] ioctl(4, LOOP_SET_FD, 3 [pid 372] ioctl(3, LOOP_CLR_FD [pid 975] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 973] <... mount resumed>) = 0 [pid 975] <... openat resumed>) = 3 [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 975] write(3, "1000", 4 [pid 973] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 975] <... write resumed>) = 4 [pid 375] lstat("./16/file0", [pid 975] close(3 [pid 973] <... openat resumed>) = 3 [pid 975] <... close resumed>) = 0 [pid 973] chdir("./file0" [pid 375] <... lstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 975] symlink("/dev/binderfs", "./binderfs" [pid 973] <... chdir resumed>) = 0 [pid 375] umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW [pid 975] <... symlink resumed>) = 0 [pid 973] ioctl(4, LOOP_CLR_FD [pid 375] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 975] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 975] <... futex resumed>) = 0 [pid 975] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0 [pid 375] <... openat resumed>) = 4 [pid 977] +++ killed by SIGBUS +++ [pid 975] <... mmap resumed>) = 0x7f70f5fbd000 [pid 962] +++ killed by SIGBUS +++ [pid 375] fstat(4, [pid 975] mprotect(0x7f70f5fbe000, 131072, PROT_READ|PROT_WRITE [pid 375] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 975] <... mprotect resumed>) = 0 [pid 375] getdents64(4, [pid 373] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=962, si_uid=0, si_status=SIGBUS, si_utime=0, si_stime=0} --- [pid 975] clone(child_stack=0x7f70f5fdd3f0, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID [pid 974] <... ioctl resumed>) = 0 [pid 973] <... ioctl resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 2 entries */, 32768) = 48 [pid 373] restart_syscall(<... resuming interrupted clone ...> [pid 372] <... ioctl resumed>) = -1 ENXIO (No such device or address) [pid 975] <... clone resumed>, parent_tid=[981], tls=0x7f70f5fdd700, child_tidptr=0x7f70f5fdd9d0) = 981 [pid 974] close(3 [pid 973] close(4 [pid 375] getdents64(4, [pid 373] <... restart_syscall resumed>) = 0 [pid 372] close(3 [pid 975] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 974] <... close resumed>) = 0 [pid 973] <... close resumed>) = 0 [pid 375] <... getdents64 resumed>0x555556952660 /* 0 entries */, 32768) = 0 [pid 372] <... close resumed>) = 0 [pid 975] <... futex resumed>) = 0 [pid 974] mkdir("./file0", 0777 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(4 [pid 372] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 982 attached ./strace-static-x86_64: Process 981 attached [pid 975] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 974] <... mkdir resumed>) = 0 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW [pid 982] set_robust_list(0x5555569495e0, 24 [pid 981] set_robust_list(0x7f70f5fdd9e0, 24 [pid 974] mount("/dev/loop5", "./file0", "ext4", MS_DIRSYNC|MS_NOATIME|MS_LAZYTIME, ",errors=continue" [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./16/file0" [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 372] <... clone resumed>, child_tidptr=0x5555569495d0) = 982 [pid 982] <... set_robust_list resumed>) = 0 [pid 981] <... set_robust_list resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY [pid 982] chdir("./16" [pid 981] memfd_create("syzkaller", 0 [pid 973] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_NOFOLLOW|O_NOATIME|O_CLOEXEC|0x29000030, 000 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] getdents64(3, [pid 373] <... openat resumed>) = 3 [pid 982] <... chdir resumed>) = 0 [pid 981] <... memfd_create resumed>) = 3 [pid 973] <... open resumed>) = 4 [pid 375] <... getdents64 resumed>0x55555694a620 /* 0 entries */, 32768) = 0 [pid 373] fstat(3, [pid 982] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 981] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 [pid 973] futex(0x7f70f60b67ac, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] close(3 [pid 373] <... fstat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 [pid 982] <... prctl resumed>) = 0 [pid 981] <... mmap resumed>) = 0x7f70edbbd000 [pid 973] <... futex resumed>) = 1 [pid 969] <... futex resumed>) = 0 [pid 375] <... close resumed>) = 0 [pid 373] getdents64(3, [pid 982] setpgid(0, 0 [pid 973] futex(0x7f70f60b67a8, FUTEX_WAIT_PRIVATE, 0, NULL [pid 969] futex(0x7f70f60b67a8, FUTEX_WAKE_PRIVATE, 1000000 [pid 375] rmdir("./16" [pid 373] <... getdents64 resumed>0x55555694a620 /* 4 entries */, 32768) = 112 [pid 982] <... setpgid resumed>) = 0 [pid 981] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576 [pid 974] <... mount resumed>) = 0 [pid 973] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 969] <... futex resumed>) = 0 [pid 375] <... rmdir resumed>) = 0 [pid 373] umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW [pid 982] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC [pid 375] mkdir("./17", 0777 [pid 373] <... umount2 resumed>) = -1 EINVAL (Invalid argument) [pid 982] <... openat resumed>) = 3 [pid 974] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY [pid 973] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00", 9 [pid 969] futex(0x7f70f60b67ac, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 375] <... mkdir resumed>) = 0 [pid 373] lstat("./15